license switch agpl -> busl1, sprints work, new product advisories

This commit is contained in:
master
2026-01-20 15:32:20 +02:00
parent 4903395618
commit c32fff8f86
1835 changed files with 38630 additions and 4359 deletions

View File

@@ -121,10 +121,21 @@ This documentation set is intentionally consolidated and does not maintain compa
---
## License and notices
- Project license (BUSL-1.1 + Additional Use Grant): `LICENSE`
- Third-party notices: `NOTICE.md`
- Legal and licensing index: `docs/legal/README.md`
- Full dependency inventory: `docs/legal/THIRD-PARTY-DEPENDENCIES.md`
- Compatibility guidance: `docs/legal/LICENSE-COMPATIBILITY.md`
- Cryptography compliance: `docs/legal/crypto-compliance-review.md`
---
## Design principles (non-negotiable)
- **Offline-first:** core operations must work in restricted/air-gapped environments.
- **Deterministic replay:** same inputs yield the same outputs (stable ordering, canonical hashing).
- **Evidence-linked decisions:** every decision links to concrete evidence artifacts.
- **Digest-first identity:** releases are immutable OCI digests, not mutable tags.
- **Pluggable integrations:** connectors and steps are extensible; the core evidence chain stays stable.
- **Pluggable integrations:** connectors and steps are extensible; the core evidence chain stays stable.