license switch agpl -> busl1, sprints work, new product advisories

src/Scanner/StellaOps.Scanner.WebService/Endpoints/GitHubCodeScanningEndpoints.cs

@@ -1,5 +1,5 @@
 // <copyright file="GitHubCodeScanningEndpoints.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using Microsoft.AspNetCore.Http;

src/Scanner/StellaOps.Scanner.WebService/Endpoints/ReachabilityEvidenceEndpoints.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Sprint: EVID-001-002 - Reachability Evidence Endpoints
 

src/Scanner/StellaOps.Scanner.WebService/Endpoints/ReachabilityStackEndpoints.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Text.Json;

src/Scanner/StellaOps.Scanner.WebService/Endpoints/ValidationEndpoints.cs

@@ -1,5 +1,5 @@
 // <copyright file="ValidationEndpoints.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Text.Json;

src/Scanner/StellaOps.Scanner.WebService/Services/EvidenceBundleExporter.cs

@@ -1,5 +1,5 @@
 // <copyright file="EvidenceBundleExporter.cs" company="StellaOps">
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // </copyright>
 
 using System.IO.Compression;

src/Scanner/StellaOps.Scanner.WebService/Services/IEvidenceBundleExporter.cs

@@ -1,5 +1,5 @@
 // <copyright file="IEvidenceBundleExporter.cs" company="StellaOps">
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // </copyright>
 
 using StellaOps.Scanner.WebService.Contracts;

src/Scanner/StellaOps.Scanner.WebService/Services/IOciAttestationPublisher.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // © StellaOps Contributors. See LICENSE and NOTICE.md in the repository root.
 
 using System.Threading;

src/Scanner/StellaOps.Scanner.WebService/Services/NullGitHubCodeScanningService.cs

@@ -1,5 +1,5 @@
 // <copyright file="NullGitHubCodeScanningService.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using StellaOps.Determinism;

src/Scanner/StellaOps.Scanner.WebService/Services/NullOciAttestationPublisher.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // © StellaOps Contributors. See LICENSE and NOTICE.md in the repository root.
 
 using System.Threading;

src/Scanner/StellaOps.Scanner.WebService/Services/OciAttestationPublisher.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // © StellaOps Contributors. See LICENSE and NOTICE.md in the repository root.
 
 using System;

src/Scanner/StellaOps.Scanner.WebService/Services/SbomExportService.cs

@@ -1,5 +1,5 @@
 // <copyright file="SbomExportService.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/StellaOps.Scanner.WebService/Services/ScanFindingsSarifExportService.cs

@@ -1,5 +1,5 @@
 // <copyright file="ScanFindingsSarifExportService.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/StellaOps.Scanner.Worker/Extensions/BinaryIndexServiceExtensions.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_6000_0004_0001 - Scanner Worker Integration
 // Task: T5 - Add Configuration and DI Registration
 

src/Scanner/StellaOps.Scanner.Worker/Orchestration/PoEOrchestrator.cs

@@ -1,4 +1,4 @@
-// Copyright (c) StellaOps. Licensed under AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under BUSL-1.1.
 
 using Microsoft.Extensions.Logging;
 using StellaOps.Attestor;

src/Scanner/StellaOps.Scanner.Worker/Processing/BinaryVulnerabilityAnalyzer.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_6000_0004_0001 - Scanner Worker Integration
 // Task: T3 - Create Scanner.Worker Integration Point
 

src/Scanner/StellaOps.Scanner.Worker/Processing/DeltaSigAnalyzer.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_20260102_001_BE - Binary Delta Signatures
 // Task: DS-040 - Scanner integration (match service)
 

src/Scanner/StellaOps.Scanner.Worker/Processing/PoE/PoEGenerationStageExecutor.cs

@@ -1,4 +1,4 @@
-// Copyright (c) StellaOps. Licensed under AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under BUSL-1.1.
 
 using System;
 using System.Collections.Generic;

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.csproj

@@ -10,7 +10,7 @@
     <Version>0.1.0-alpha</Version>
     <Description>Windows Chocolatey and registry package analyzer for StellaOps Scanner</Description>
     <Authors>StellaOps</Authors>
-    <PackageLicenseExpression>AGPL-3.0-or-later</PackageLicenseExpression>
+    <PackageLicenseExpression>BUSL-1.1</PackageLicenseExpression>
     <RepositoryUrl>https://git.stella-ops.org/stella-ops.org/stellaops</RepositoryUrl>
   </PropertyGroup>
   <ItemGroup>

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.Msi/StellaOps.Scanner.Analyzers.OS.Windows.Msi.csproj

@@ -10,7 +10,7 @@
     <Version>0.1.0-alpha</Version>
     <Description>Windows MSI package analyzer for StellaOps Scanner</Description>
     <Authors>StellaOps</Authors>
-    <PackageLicenseExpression>AGPL-3.0-or-later</PackageLicenseExpression>
+    <PackageLicenseExpression>BUSL-1.1</PackageLicenseExpression>
     <RepositoryUrl>https://git.stella-ops.org/stella-ops.org/stellaops</RepositoryUrl>
   </PropertyGroup>
   <ItemGroup>

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.csproj

@@ -10,7 +10,7 @@
     <Version>0.1.0-alpha</Version>
     <Description>Windows WinSxS assembly analyzer for StellaOps Scanner</Description>
     <Authors>StellaOps</Authors>
-    <PackageLicenseExpression>AGPL-3.0-or-later</PackageLicenseExpression>
+    <PackageLicenseExpression>BUSL-1.1</PackageLicenseExpression>
     <RepositoryUrl>https://git.stella-ops.org/stella-ops.org/stellaops</RepositoryUrl>
   </PropertyGroup>
   <ItemGroup>

src/Scanner/__Libraries/StellaOps.Scanner.Cache/StellaOps.Scanner.Cache.csproj

@@ -15,6 +15,7 @@
     <PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" />
     <PackageReference Include="Microsoft.Extensions.Options" />
     <PackageReference Include="Microsoft.Extensions.Options.ConfigurationExtensions" />
+    <PackageReference Include="Npgsql" />
     <PackageReference Include="StackExchange.Redis" />
   </ItemGroup>
 </Project>

src/Scanner/__Libraries/StellaOps.Scanner.CallGraph/Analysis/ReachabilityAnalysisOptions.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // ReachabilityAnalysisOptions is now defined in StellaOps.Scanner.Contracts.
 // This file exists only for file system tracking - the type is imported via global using.

src/Scanner/__Libraries/StellaOps.Scanner.CallGraph/Extraction/GuardDetector.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Text.RegularExpressions;
 

src/Scanner/__Libraries/StellaOps.Scanner.CallGraph/Models/CallGraphModels.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Re-exports types from Contracts for backward compatibility.
 

src/Scanner/__Libraries/StellaOps.Scanner.ChangeTrace/ByteDiff/ByteDiffOptions.cs

@@ -1,5 +1,5 @@
 // Copyright (c) StellaOps. All rights reserved.
-// Licensed under AGPL-3.0-or-later. See LICENSE in the project root.
+// Licensed under BUSL-1.1. See LICENSE in the project root.
 
 using System.Collections.Immutable;
 

src/Scanner/__Libraries/StellaOps.Scanner.ChangeTrace/ByteDiff/ByteLevelDiffer.cs

@@ -1,5 +1,5 @@
 // Copyright (c) StellaOps. All rights reserved.
-// Licensed under AGPL-3.0-or-later. See LICENSE in the project root.
+// Licensed under BUSL-1.1. See LICENSE in the project root.
 
 using System.Security.Cryptography;
 using StellaOps.Scanner.ChangeTrace.Models;

src/Scanner/__Libraries/StellaOps.Scanner.ChangeTrace/ByteDiff/IByteLevelDiffer.cs

@@ -1,5 +1,5 @@
 // Copyright (c) StellaOps. All rights reserved.
-// Licensed under AGPL-3.0-or-later. See LICENSE in the project root.
+// Licensed under BUSL-1.1. See LICENSE in the project root.
 
 using StellaOps.Scanner.ChangeTrace.Models;
 

src/Scanner/__Libraries/StellaOps.Scanner.ChangeTrace/ByteDiff/ISectionAnalyzer.cs

@@ -1,5 +1,5 @@
 // Copyright (c) StellaOps. All rights reserved.
-// Licensed under AGPL-3.0-or-later. See LICENSE in the project root.
+// Licensed under BUSL-1.1. See LICENSE in the project root.
 
 namespace StellaOps.Scanner.ChangeTrace.ByteDiff;
 

src/Scanner/__Libraries/StellaOps.Scanner.ChangeTrace/ByteDiff/SectionAnalyzer.cs

@@ -1,5 +1,5 @@
 // Copyright (c) StellaOps. All rights reserved.
-// Licensed under AGPL-3.0-or-later. See LICENSE in the project root.
+// Licensed under BUSL-1.1. See LICENSE in the project root.
 
 using System.Buffers.Binary;
 

src/Scanner/__Libraries/StellaOps.Scanner.Contracts/CallGraphEnums.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Shared enums for call graph analysis.
 

src/Scanner/__Libraries/StellaOps.Scanner.Contracts/CallGraphModels.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Shared call graph models for Scanner CallGraph and Reachability modules.
 

src/Scanner/__Libraries/StellaOps.Scanner.Contracts/Properties/AssemblyInfo.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Runtime.CompilerServices;

src/Scanner/__Libraries/StellaOps.Scanner.Contracts/SinkCategory.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Shared contracts for Scanner CallGraph and Reachability modules.
 

src/Scanner/__Libraries/StellaOps.Scanner.Contracts/SinkRegistry.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Registry of known dangerous sinks per language.
 

src/Scanner/__Libraries/StellaOps.Scanner.Core/Configuration/PoEConfiguration.cs

@@ -1,4 +1,4 @@
-// Copyright (c) StellaOps. Licensed under AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under BUSL-1.1.
 
 namespace StellaOps.Scanner.Core.Configuration;
 

src/Scanner/__Libraries/StellaOps.Scanner.Core/Epss/EpssChangeEvent.cs

@@ -1,5 +1,5 @@
 // <copyright file="EpssChangeEvent.cs" company="StellaOps">
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_20260112_005_SCANNER_epss_reanalysis_events (SCAN-EPSS-001, SCAN-EPSS-003)
 // </copyright>
 

src/Scanner/__Libraries/StellaOps.Scanner.Delta/Evidence/DeltaEvidenceComposer.cs

@@ -187,12 +187,12 @@ public sealed class DeltaEvidenceComposer : IDeltaEvidenceComposer
         DateTimeOffset scannedAt)
     {
         // Calculate layer reuse ratio
-        var totalLayers = scanResult.AddedLayers.Count +
-                         scanResult.RemovedLayers.Count +
-                         scanResult.UnchangedLayers.Count;
+        var totalLayers = scanResult.AddedLayers.Length +
+                         scanResult.RemovedLayers.Length +
+                         scanResult.UnchangedLayers.Length;
 
         var reuseRatio = totalLayers > 0
-            ? (double)scanResult.UnchangedLayers.Count / totalLayers
+            ? (double)scanResult.UnchangedLayers.Length / totalLayers
             : 0.0;
 
         return new DeltaScanPredicate
@@ -210,19 +210,19 @@ public sealed class DeltaEvidenceComposer : IDeltaEvidenceComposer
             {
                 Reference = scanResult.OldImage,
                 ManifestDigest = scanResult.OldManifestDigest,
-                LayerCount = scanResult.UnchangedLayers.Count + scanResult.RemovedLayers.Count
+                LayerCount = scanResult.UnchangedLayers.Length + scanResult.RemovedLayers.Length
             },
             NewImage = new ImageSubject
             {
                 Reference = scanResult.NewImage,
                 ManifestDigest = scanResult.NewManifestDigest,
-                LayerCount = scanResult.UnchangedLayers.Count + scanResult.AddedLayers.Count
+                LayerCount = scanResult.UnchangedLayers.Length + scanResult.AddedLayers.Length
             },
             LayerChanges = new LayerChangesInfo
             {
-                Added = scanResult.AddedLayers.Count,
-                Removed = scanResult.RemovedLayers.Count,
-                Unchanged = scanResult.UnchangedLayers.Count,
+                Added = scanResult.AddedLayers.Length,
+                Removed = scanResult.RemovedLayers.Length,
+                Unchanged = scanResult.UnchangedLayers.Length,
                 ReuseRatio = Math.Round(reuseRatio, 4),
                 AddedDiffIds = scanResult.AddedLayers.Select(l => l.DiffId).ToList(),
                 RemovedDiffIds = scanResult.RemovedLayers.Select(l => l.DiffId).ToList()
@@ -249,7 +249,7 @@ public sealed class DeltaEvidenceComposer : IDeltaEvidenceComposer
                       (scanResult.AddedComponentCount + scanResult.CachedComponentCount)
                     : null
             },
-            SbomFormat = scanResult.SbomFormat,
+            SbomFormat = scanResult.SbomFormat ?? "cyclonedx",
             SbomDigest = !string.IsNullOrWhiteSpace(scanResult.CompositeSbom)
                 ? "sha256:" + ComputeHash(Encoding.UTF8.GetBytes(scanResult.CompositeSbom))
                 : null

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Composition/SbomValidationPipeline.cs

@@ -1,5 +1,5 @@
 // <copyright file="SbomValidationPipeline.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Evidence/CallstackEvidenceBuilder.cs

@@ -1,5 +1,5 @@
 // <copyright file="CallstackEvidenceBuilder.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Evidence/CycloneDxEvidenceMapper.cs

@@ -1,5 +1,5 @@
 // <copyright file="CycloneDxEvidenceMapper.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Evidence/EvidenceConfidenceNormalizer.cs

@@ -1,5 +1,5 @@
 // <copyright file="EvidenceConfidenceNormalizer.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Globalization;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Evidence/IdentityEvidenceBuilder.cs

@@ -1,5 +1,5 @@
 // <copyright file="IdentityEvidenceBuilder.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Evidence/LegacyEvidencePropertyWriter.cs

@@ -1,5 +1,5 @@
 // <copyright file="LegacyEvidencePropertyWriter.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Evidence/LicenseEvidenceBuilder.cs

@@ -1,5 +1,5 @@
 // <copyright file="LicenseEvidenceBuilder.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Evidence/OccurrenceEvidenceBuilder.cs

@@ -1,5 +1,5 @@
 // <copyright file="OccurrenceEvidenceBuilder.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Pedigree/AncestorComponentBuilder.cs

@@ -1,5 +1,5 @@
 // <copyright file="AncestorComponentBuilder.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Pedigree/CachedPedigreeDataProvider.cs

@@ -1,5 +1,5 @@
 // <copyright file="CachedPedigreeDataProvider.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using Microsoft.Extensions.Caching.Memory;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Pedigree/CommitInfoBuilder.cs

@@ -1,5 +1,5 @@
 // <copyright file="CommitInfoBuilder.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Pedigree/CycloneDxPedigreeMapper.cs

@@ -1,5 +1,5 @@
 // <copyright file="CycloneDxPedigreeMapper.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using CycloneDX.Models;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Pedigree/FeedserPedigreeDataProvider.cs

@@ -1,5 +1,5 @@
 // <copyright file="FeedserPedigreeDataProvider.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Pedigree/IPedigreeDataProvider.cs

@@ -1,5 +1,5 @@
 // <copyright file="IPedigreeDataProvider.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Pedigree/PatchInfoBuilder.cs

@@ -1,5 +1,5 @@
 // <copyright file="PatchInfoBuilder.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Pedigree/PedigreeNotesGenerator.cs

@@ -1,5 +1,5 @@
 // <copyright file="PedigreeNotesGenerator.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Globalization;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Pedigree/VariantComponentBuilder.cs

@@ -1,5 +1,5 @@
 // <copyright file="VariantComponentBuilder.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Spdx/Spdx3ProfileType.cs

@@ -1,5 +1,5 @@
 // <copyright file="Spdx3ProfileType.cs" company="StellaOps">
-// Copyright (c) StellaOps. Licensed under the AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
 namespace StellaOps.Scanner.Emit.Spdx;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/BinaryAnalysisResult.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/BinaryIntelligenceAnalyzer.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using System.Diagnostics;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/CodeFingerprint.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using System.Numerics;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/FingerprintCorpusBuilder.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using System.Text.Json;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/IFingerprintGenerator.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using System.Security.Cryptography;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/IFingerprintIndex.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Concurrent;
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/ISymbolRecovery.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using System.Text.RegularExpressions;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/SymbolInfo.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using System.Numerics;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/VulnerableFunctionMatcher.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Risk/CompositeRiskScorer.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Risk/IRiskScorer.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using StellaOps.Scanner.EntryTrace.Binary;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Risk/RiskScore.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Speculative/ExecutionTree.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using System.Security.Cryptography;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Speculative/ISymbolicExecutor.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using StellaOps.Scanner.EntryTrace.Parsing;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Speculative/PathConfidenceScorer.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Speculative/PathEnumerator.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Speculative/ShellSymbolicExecutor.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using System.Text.RegularExpressions;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Speculative/SymbolicState.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using StellaOps.Scanner.EntryTrace.Parsing;

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Speculative/SymbolicValue.cs

@@ -1,4 +1,4 @@
-// Licensed to StellaOps under the AGPL-3.0-or-later license.
+// Licensed to StellaOps under the BUSL-1.1 license.
 
 using System.Collections.Immutable;
 using StellaOps.Scanner.EntryTrace.Parsing;

src/Scanner/__Libraries/StellaOps.Scanner.Evidence/DeltaSigVexEmitter.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_20260102_001_BE
 // Task: DS-041 - VEX evidence emission for backport detection
 

src/Scanner/__Libraries/StellaOps.Scanner.Evidence/Models/DeltaSignatureEvidence.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_20260102_001_BE
 // Task: DS-041 - VEX evidence emission for backport detection
 

src/Scanner/__Libraries/StellaOps.Scanner.Evidence/Models/EvidenceBundle.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_4300_0002_0001
 // Task: Evidence Privacy Controls - Evidence model definitions
 

src/Scanner/__Libraries/StellaOps.Scanner.Evidence/Models/VersionComparisonEvidence.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_4000_0002_0001
 // Task: T1 - Extend Findings API Response with version comparison metadata
 

src/Scanner/__Libraries/StellaOps.Scanner.Evidence/Privacy/EvidenceRedactionLevel.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_4300_0002_0001
 // Task: T1 - Define Redaction Levels
 

src/Scanner/__Libraries/StellaOps.Scanner.Evidence/Privacy/EvidenceRedactionService.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_4300_0002_0001
 // Task: T2 - Implement EvidenceRedactionService
 

src/Scanner/__Libraries/StellaOps.Scanner.Explainability/Assumptions/Assumption.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 namespace StellaOps.Scanner.Explainability.Assumptions;

src/Scanner/__Libraries/StellaOps.Scanner.Explainability/Assumptions/AssumptionSet.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Explainability/Assumptions/IAssumptionCollector.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 namespace StellaOps.Scanner.Explainability.Assumptions;

src/Scanner/__Libraries/StellaOps.Scanner.Explainability/Confidence/EvidenceDensityScorer.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using StellaOps.Scanner.Explainability.Assumptions;

src/Scanner/__Libraries/StellaOps.Scanner.Explainability/Dsse/ExplainabilityPredicateSerializer.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Text.Json;

src/Scanner/__Libraries/StellaOps.Scanner.Explainability/Falsifiability/FalsifiabilityCriteria.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Explainability/Falsifiability/FalsifiabilityGenerator.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Explainability/RiskReport.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Manifest/OciManifestSnapshotService.cs

@@ -3,6 +3,7 @@ using Microsoft.Extensions.Logging;
 using StellaOps.Scanner.Contracts;
 using StellaOps.Scanner.Manifest.Models;
 using StellaOps.Scanner.Manifest.Persistence;
+using StellaOps.Scanner.Storage.Oci;
 
 namespace StellaOps.Scanner.Manifest;
 

src/Scanner/__Libraries/StellaOps.Scanner.Manifest/Persistence/ManifestSnapshotRepository.cs

@@ -189,7 +189,7 @@ public sealed class ManifestSnapshotRepository : RepositoryBase<ScannerDataSourc
             WHERE captured_at < @older_than
             """;
 
-        return await ExecuteWithRowCountAsync(
+        return await ExecuteAsync(
             Tenant,
             sql,
             cmd => AddParameter(cmd, "older_than", olderThan.UtcDateTime),
@@ -204,12 +204,13 @@ public sealed class ManifestSnapshotRepository : RepositoryBase<ScannerDataSourc
             SELECT EXISTS(SELECT 1 FROM {Table} WHERE manifest_digest = @manifest_digest)
             """;
 
-        return await QueryScalarAsync(
+        var result = await ExecuteScalarAsync<bool>(
             Tenant,
             sql,
             cmd => AddParameter(cmd, "manifest_digest", manifestDigest),
-            reader => reader.GetBoolean(0),
             cancellationToken).ConfigureAwait(false);
+
+        return result;
     }
 
     private static OciManifestSnapshot MapSnapshot(NpgsqlDataReader reader)

src/Scanner/__Libraries/StellaOps.Scanner.Manifest/Resolution/LayerDigestResolver.cs

@@ -50,10 +50,8 @@ public sealed class LayerDigestResolver : ILayerDigestResolver
 
         // Capture manifest snapshot
         var snapshot = await _snapshotService.CaptureAsync(
-            registry,
-            repository,
-            reference,
-            new ManifestCaptureOptions { Platform = options.Platform },
+            imageReference,
+            new ManifestCaptureOptions { PlatformFilter = options.Platform },
             cancellationToken).ConfigureAwait(false);
 
         if (snapshot is null)

src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Binary/BinaryPatchVerifier.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Sprint: EVID-001-004 - Binary Patch Verification Implementation
 

src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Binary/IBinaryPatchVerifier.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Sprint: EVID-001-004 - Binary Patch Verification
 

src/Scanner/__Libraries/StellaOps.Scanner.Reachability/IReachabilityResolver.cs

@@ -1,4 +1,4 @@
-// Copyright (c) StellaOps. Licensed under AGPL-3.0-or-later.
+// Copyright (c) StellaOps. Licensed under BUSL-1.1.
 
 using StellaOps.Attestor;
 

src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Jobs/IReachabilityEvidenceJobExecutor.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Sprint: EVID-001-002 - Reachability Evidence Job Executor
 

src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Jobs/ReachabilityEvidenceJob.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Sprint: EVID-001-002 - Reachability Evidence Job
 

src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Jobs/ReachabilityEvidenceJobExecutor.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 // Sprint: EVID-001-002 - Reachability Evidence Job Executor
 

src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Layer1/ILayer1Analyzer.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Layer2/ILayer2Analyzer.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Collections.Immutable;

src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Layer3/ILayer3Analyzer.cs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
+// SPDX-License-Identifier: BUSL-1.1
 // Copyright (c) StellaOps
 
 using System.Collections.Immutable;