license switch agpl -> busl1, sprints work, new product advisories
This commit is contained in:
@@ -112,7 +112,7 @@ The **OfflineVerificationCryptoProvider** is a cryptographic abstraction layer t
|
||||
┌────────────────────────────────────────────────────────┐
|
||||
│ Trusted Computing Base (TCB) │
|
||||
│ ├── .NET Runtime (Microsoft-signed) │
|
||||
│ ├── OfflineVerificationCryptoProvider (AGPL-3.0) │
|
||||
│ ├── OfflineVerificationCryptoProvider (BUSL-1.1) │
|
||||
│ └── Pre-distributed Public Key Fingerprints │
|
||||
└────────────────────────────────────────────────────────┘
|
||||
▲
|
||||
@@ -595,4 +595,4 @@ public MyService(ICryptoProviderRegistry registry)
|
||||
|---------|------|--------|---------|
|
||||
| 1.0 | 2025-12-23 | StellaOps Platform Team | Initial release with CreateEphemeralVerifier API |
|
||||
|
||||
**License**: AGPL-3.0-or-later
|
||||
**License**: BUSL-1.1
|
||||
|
||||
@@ -42,5 +42,5 @@ ops/crypto/run-cryptopro-tests.ps1 -Configuration Release
|
||||
|
||||
## Licensing & distro notes
|
||||
- Upstream license: MIT; keep `LICENSE` + `NOTICE` from the fork inside RootPack bundles and in third-party notices.
|
||||
- Plugin remains AGPL-3.0-or-later; ensure fork sources stay vendored (no binary-only blobs).
|
||||
- Plugin remains BUSL-1.1; ensure fork sources stay vendored (no binary-only blobs).
|
||||
- Do **not** publish the fork to public feeds; only build from source inside RootPack bundles.
|
||||
|
||||
@@ -4,7 +4,7 @@ This guide describes the reproducible process for assembling the sovereign crypt
|
||||
|
||||
## 0. Fork provenance & licensing checklist
|
||||
- Confirm the vendored fork commit recorded in `src/__Libraries/StellaOps.Cryptography.Plugin.CryptoPro/third_party/AlexMAS.GostCryptography/STELLA_NOTES.md` matches `git -C src/__Libraries/StellaOps.Cryptography.Plugin.CryptoPro/third_party/AlexMAS.GostCryptography rev-parse HEAD` before you package.
|
||||
- Copy the fork's `LICENSE` (MIT) and `STELLA_NOTES.md` into the bundle `docs/` directory so downstream operators see the source provenance; keep the plug-ins themselves under AGPL-3.0-or-later.
|
||||
- Copy the fork's `LICENSE` (MIT) and `STELLA_NOTES.md` into the bundle `docs/` directory so downstream operators see the source provenance; keep the plug-ins themselves under BUSL-1.1.
|
||||
- Do not publish the fork to NuGet; all builds must use the vendored sources shipped inside the bundle.
|
||||
|
||||
## 1. What the bundle contains
|
||||
|
||||
Reference in New Issue
Block a user