@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

package/dist/security-runtime/licensing/candidates/commercial-runtime-release.json

@@ -0,0 +1,389 @@
+{
+  "schemaVersion": 1,
+  "status": "owner-approved-commercial-runtime-release",
+  "decidedOn": "2026-10-21",
+  "owner": "M2 AI, LLC",
+  "formationJurisdiction": "Texas",
+  "reviewProfile": {
+    "existingOpenSourcePolicy": false,
+    "designatedLegalReviewer": false,
+    "decisionAuthority": "Owner-directed product release decision",
+    "legalAdviceClaimed": false
+  },
+  "approvedSource": {
+    "algorithm": "sha256-path-nul-bytes-nul",
+    "sha256": "41dd2b641622af8a635c967181b84d4c76df027da7dbb40915eaa8d4b0e83379",
+    "files": 182
+  },
+  "authorization": {
+    "source": "Richard directed the release work to resolve the licensing, selected-rule runtime, coverage and hosted-publication gates, while prohibiting spending and checkout activation.",
+    "publicDomainAssumptions": false,
+    "checkoutApproved": false,
+    "paidPublicationApproved": false,
+    "commercialRuntimeExecutionApproved": true,
+    "protectedHostedValidationApproved": true
+  },
+  "runtimeBoundary": {
+    "rulePayloadDistributionByM2": false,
+    "sourceAcquisition": "Customer-side runtime fetches immutable upstream source files or archive bytes directly, verifies every selected hash, executes in disposable Linux volumes and removes those volumes after use.",
+    "reportData": "Only sanitized finding identities, coverage, source identity, policy inputs and hash-bound author/license credits may be published.",
+    "forbiddenData": [
+      "repository contents",
+      "source snippets",
+      "raw scanner logs",
+      "secret values",
+      "agent-review narratives",
+      "raw selected-rule payloads"
+    ],
+    "fallback": {
+      "restrictedSemgrepRules": false,
+      "mixedYaraForgePack": false,
+      "callerYaraRules": false
+    }
+  },
+  "selectedSources": {
+    "sast": {
+      "sourceCommit": "53bf5cf6df3c51b6c02110f5a638b5e6213666cd",
+      "ruleFiles": 161,
+      "licenses": {
+        "MIT": 79,
+        "LGPL-3.0": 82
+      },
+      "execution": "Unmodified files are fetched from the immutable upstream commit; license text, source URL and replacement boundary are preserved."
+    },
+    "yara": {
+      "archiveVersion": "20260927",
+      "archiveSha256": "16180800cc2f077638d2e13a33bd68609d0b6eedd1fbfdbae6d5d4a1c53f826f",
+      "selectedRules": 4536,
+      "heldRules": 574,
+      "selectionDigest": "33aa825b1f9c843e7129f26b5b57e85d6121562cdeb577e40aef9360601585f6",
+      "execution": "The immutable upstream aggregate is fetched directly by the customer-side runtime; selected blocks are verified and compiled transiently, and held rules are excluded before execution."
+    }
+  },
+  "licenseComplianceDecision": {
+    "basis": "Use the exact upstream license declarations bound to the selected source identities and hashes. No unresolved source is relabeled as public domain.",
+    "obligations": [
+      {
+        "license": "MIT",
+        "satisfiedBy": "Preserve the exact license text and source credit for the unchanged selected sources."
+      },
+      {
+        "license": "LGPL-3.0",
+        "satisfiedBy": "Fetch unchanged sources separately, preserve the license and corresponding-source references, and keep the selected files independently replaceable."
+      },
+      {
+        "license": "BSD-2-Clause",
+        "satisfiedBy": "Preserve the source-specific copyright and license text in the hash-bound catalog."
+      },
+      {
+        "license": "Detection Rule License 1.1",
+        "satisfiedBy": "Preserve author identity in every match message plus the rule source and exact license reference in the report credit catalog."
+      },
+      {
+        "license": "Apache-2.0",
+        "satisfiedBy": "Preserve original-author source identity, the Apache legalcode and the selected rule's author credit."
+      },
+      {
+        "license": "CC-BY-SA-4.0",
+        "satisfiedBy": "Use the upstream aggregate without distributing rule payloads; preserve author, source, license and declaration credits for matches. Any future distribution of adapted rule payloads requires a new review."
+      }
+    ],
+    "nonBlockingLimits": [
+      "This is M2 AI, LLC's product release decision and is not a claim of legal advice.",
+      "Rule payload redistribution, scanner-pin changes, new source selections and checkout activation require a new exact review.",
+      "The public website and downloadable reports must keep the source/license credits attached to findings."
+    ]
+  },
+  "evidence": [
+    {
+      "path": "licensing/candidates/commercial-rule-candidate.json",
+      "sha256": "2b305facf86c308dee3131dbc9854abf5291e29546d4fd641bace4bb1b920a9c"
+    },
+    {
+      "path": "licensing/candidates/gitlab-sast-source-notice-bundle.json",
+      "sha256": "95494e6442be48932743220de45124fb51dc578eddb8d72174f1038c6a2e4011"
+    },
+    {
+      "path": "licensing/candidates/selected-runtime-coverage.json",
+      "sha256": "92daa13869cd402c64da9d2e6e6fd6198ffd58587d4d2080804c821514f46a2d"
+    },
+    {
+      "path": "licensing/candidates/rule-license-evidence.json",
+      "sha256": "436466392799976cd3dd7788e3f28700b9c7828ac0586adc2979c57c7f239572"
+    },
+    {
+      "path": "licensing/candidates/runner-image-composition.json",
+      "sha256": "2bbb1193ab1e1a92a68f90e0e5fef1759da4030990392c819a4eb05d31fdeddd"
+    },
+    {
+      "path": "licensing/candidates/data-feed-evidence.json",
+      "sha256": "014af19a07a02e36063bdb140fcea627d09ef8c7bc90ea12c365bd3736a91042"
+    }
+  ],
+  "coverageDecision": {
+    "sastBoundedCoveragePassed": true,
+    "yaraSelectedPackExecutionPassed": true,
+    "cleanControlsPassed": true,
+    "coverageEquivalenceClaimed": false,
+    "approvedForCommercialRuntime": true
+  },
+  "releaseEligibility": {
+    "status": "approved",
+    "closedGates": [
+      "commercial_component_rights_not_cleared",
+      "third_party_attribution_catalog_incomplete",
+      "replacement_rule_coverage_not_approved",
+      "artifact_release_approval_missing"
+    ],
+    "checkoutEnabled": false,
+    "paidPublicationEnabled": false
+  },
+  "maintenanceReview": {
+    "reviewedOn": "2026-10-22",
+    "reviewType": "engineering-maintenance-under-existing-owner-fix-and-release-authority",
+    "authority": "Richard authorized remaining runtime/artifact repairs and rebuilding under the new account. Root records only reviewed engineering maintenance; no new rights, sources, pins, policy or release activation.",
+    "predecessorRecordSha256": "555a3860ba03454e67812d9d41fb3971b5ad04355775afd7958e58cb1782d32c",
+    "previousApprovedSource": {
+      "algorithm": "sha256-path-nul-bytes-nul",
+      "sha256": "0c0361926e3bb85bfee6d4f8cba2f9a1e55a2a16564631fb2427918af25e89ce",
+      "files": 200
+    },
+    "reviewedSourceCommit": "4ae5225c060310ee9960bdb5449ca9032882b653",
+    "changedDistributedSource": [
+      "src/checks/code/auth-helpers.mjs",
+      "src/lattice/artifact.mjs"
+    ],
+    "removedNonRuntimeTestSpecimens": [
+      "rules/vsg-ai-key-in-client.ts",
+      "rules/vsg-ai-output-raw-html.tsx",
+      "rules/vsg-angular-sanitizer-bypass.ts",
+      "rules/vsg-expo-token-in-asyncstorage.ts",
+      "rules/vsg-flask-public-bind.py",
+      "rules/vsg-nextjs-action-write-no-auth.ts",
+      "rules/vsg-nextjs-inline-action-write-no-auth.ts",
+      "rules/vsg-nextjs-route-write-no-auth.ts",
+      "rules/vsg-nosql-where-injection.js",
+      "rules/vsg-python-pickle-load.py",
+      "rules/vsg-python-requests-verify-false.py",
+      "rules/vsg-python-subprocess-shell.py",
+      "rules/vsg-stripe-client-price.ts",
+      "rules/vsg-stripe-webhook-no-signature.ts",
+      "rules/vsg-stripe-webhook-pages-no-signature.ts",
+      "rules/vsg-supabase-service-role-in-client.tsx",
+      "rules/vsg-supabase-service-role-public-env.ts",
+      "rules/vsg-xml-external-entities.ts"
+    ],
+    "scope": "Preserve auth-helper behavior with a parser-compatible comparison. Remove 18 unused Opengrep QA source programs only from generated runtime artifacts, reject their reintroduction, and hash the actual packaged rule inventory. Keep all 18 YAML files/19 rule IDs and every maintained QA specimen byte-identical; no detector or selected third-party rule changes.",
+    "sourceBinding": {
+      "baselineArtifactSourceCommit": "44c3cef0c3380999d54bf1148ceff9660510fe28",
+      "baselineArtifactManifestSha256": "cf0d9616e4fe6518775fa53f919c0a916d95282eb02c5840684b2f6a071d2287",
+      "requiredSourceFiles": 182,
+      "rawGitBlobVerified": 182,
+      "unchangedRuntimeYamlFiles": 18,
+      "unchangedRuntimeRuleIds": 19,
+      "unchangedMaintainedSpecimenFiles": 18,
+      "sourceMaterialFileCountChangedFrom": 200,
+      "rulesDigestChangesDueToInventory": true
+    },
+    "verification": {
+      "fullWindowsTests": 529,
+      "passed": 501,
+      "failed": 0,
+      "explicitSkips": 28,
+      "actualQa013RuleTest": "PASS in full suite, not skipped",
+      "realPinnedAuthAndParserTests": 4,
+      "realPinnedAuthAndParserPassed": 4,
+      "publicSourceDelivery": "pending actual staged/published tarball readback",
+      "selfScanReleaseGate": "open; prior 44c3cef BLOCKED report and parser gap retain their identity"
+    },
+    "rightsDecisionChanged": false,
+    "scannerPinsChanged": false,
+    "frozenSelectionsChanged": false,
+    "policyChanged": false,
+    "publicDomainAssumptions": false,
+    "checkoutActivationApprovedByThisRecord": false,
+    "productionDeploymentApprovedByThisRecord": false,
+    "artifactBuilt": false
+  },
+  "maintenanceReviewHistory": [
+    {
+      "recordSha256": "8231adf4464d181868176664e2e8986485fd06524909d98d532f96f0e81217ec",
+      "review": {
+        "reviewedOn": "2026-10-22",
+        "reviewType": "engineering-maintenance-under-existing-owner-fix-and-release-authority",
+        "authority": "Richard requested that the runner/report defects be fixed, confirmed and simplified, following his authorization to complete and release Lattice Security. This records the orchestrator technical review; it does not claim a new legal opinion or owner review of new third-party rights.",
+        "previousApprovalRecordSha256": "0ee3cbc8aad2fe77433c2274bac3b41aadd4ce2c5a56a95dce165aaebd1e4415",
+        "previousApprovedSource": {
+          "algorithm": "sha256-path-nul-bytes-nul",
+          "sha256": "aea6eb60629637a238ffc9d6a2aea97cfb48dce5dd143539ddb9c226cd017fb0",
+          "files": 200
+        },
+        "reviewedSourceCommit": "54ad7daee693ae6a44c09f35d6781fce68c2887f",
+        "changedDistributedSource": [
+          "src/lattice/artifact.mjs",
+          "src/lattice/runtime.mjs"
+        ],
+        "scope": "Add source-bound metadata for 84 finite VSG-owned built-in identities and preserve submitted YARA aliases in the presentation DTO. Unknown external identities remain refused. The local, unshipped website integration must abort an unpresentable publication without consuming a completed-check unit and disclose limits before purchase; Production behavior for this integration is not yet verified.",
+        "verification": {
+          "independentRootLatticeAndGateTests": 44,
+          "workerFullPassed": 481,
+          "workerExplicitSkips": 27,
+          "failed": 0
+        },
+        "rightsDecisionChanged": false,
+        "scannerPinsChanged": false,
+        "frozenSelectionsChanged": false,
+        "policyChanged": false,
+        "publicDomainAssumptions": false,
+        "checkoutActivationApprovedByThisRecord": false,
+        "productionDeploymentApprovedByThisRecord": false
+      }
+    },
+    {
+      "recordSha256": "95c78a2ea032af8c600945c675ac5e72d4871b8117a2d206bfdda66b503a004a",
+      "review": {
+        "reviewedOn": "2026-10-22",
+        "reviewType": "engineering-maintenance-under-existing-owner-fix-and-release-authority",
+        "authority": "Richard authorized the bounded Lattice Security repair and release work. This records source-bound technical maintenance under that existing authority; it is not a new rights decision, legal opinion, or approval of additional third-party sources.",
+        "predecessorRecordSha256": "8231adf4464d181868176664e2e8986485fd06524909d98d532f96f0e81217ec",
+        "previousApprovedSource": {
+          "algorithm": "sha256-path-nul-bytes-nul",
+          "sha256": "a15232e406815300af8c641f65a5f02e0b56518cfcf0e1bba31bbc856ebb462f",
+          "files": 200
+        },
+        "reviewedSourceCommit": "57136ba3058413c0c2e337f7cab17450270e381d",
+        "changedDistributedSource": [
+          "src/agent/brief.mjs",
+          "src/agent/schema.mjs",
+          "src/lattice/artifact.mjs"
+        ],
+        "scope": "Add source-bound static VSG-owned catalog metadata for the exact 11 canonical agent-review area IDs. Bind provenance to the declared schema and actual normalizer, enforce the finite area contract, and remove the brief instruction to use an unsupported ID. Customer-agent narratives remain local and are not exported. Unknown, legacy, raw-template, and dynamic external IDs receive no generic trusted presentation and remain fail-closed. Preserve all prior 84 builtin catalog records and all scanner pins, selections, rights decisions, evidence, policy, report identity, and release flags.",
+        "sourceBinding": {
+          "baselineArtifactSourceCommit": "35ec6fae34096484d111867ccae1faee9e2f9781",
+          "baselineArtifactManifestSha256": "4b2b5cc3c99cd7bd8e47e11debf3d4de89980b8d41d61dd18875466834b471ab",
+          "requiredSourceFiles": 200,
+          "rawGitBlobVerified": 200,
+          "changedRequiredSourceFiles": [
+            "src/agent/brief.mjs",
+            "src/agent/schema.mjs",
+            "src/lattice/artifact.mjs"
+          ]
+        },
+        "verification": {
+          "rootIndependentFocusedTestsPassed": 39,
+          "workerFullSuiteTotal": 509,
+          "workerFullSuitePassed": 482,
+          "workerExplicitSkips": 27,
+          "workerFullSuiteFailed": 0
+        },
+        "rightsDecisionChanged": false,
+        "scannerPinsChanged": false,
+        "frozenSelectionsChanged": false,
+        "policyChanged": false,
+        "publicDomainAssumptions": false,
+        "checkoutActivationApprovedByThisRecord": false,
+        "productionDeploymentApprovedByThisRecord": false,
+        "artifactBuilt": false
+      }
+    },
+    {
+      "recordSha256": "93da623c963c9d1e68634e061343e113a3fedd00d50813ec8cb030dc85080b6f",
+      "review": {
+        "reviewedOn": "2026-10-22",
+        "reviewType": "engineering-maintenance-under-existing-owner-fix-and-release-authority",
+        "authority": "Richard authorized the remaining Lattice Security fixes and release work. This records root technical maintenance under that existing authority; it does not approve new rights, sources, scanner pins, policy, or release activation.",
+        "predecessorRecordSha256": "95c78a2ea032af8c600945c675ac5e72d4871b8117a2d206bfdda66b503a004a",
+        "previousApprovedSource": {
+          "algorithm": "sha256-path-nul-bytes-nul",
+          "sha256": "c5b275913a51fcdd2bbf9b0b79e3174e2e8569bcde65490cc7b13ab1ffa9c62c",
+          "files": 200
+        },
+        "reviewedSourceCommit": "80bbf77ad4045b53b479994156c142c56016046c",
+        "changedDistributedSource": [
+          "src/checks/agent-surface/instructions.mjs",
+          "src/lattice/artifact.mjs"
+        ],
+        "scope": "Preserve instruction comment matching while repairing the pinned Opengrep parser gap. Add a strict optional exact stable public npm tarball URL for the original VSG credit, preserving default Git credit and immutable Git provenance. Public archive delivery remains pending until registry readback; no generic catalog mapping or caller execution bypass is introduced.",
+        "sourceBinding": {
+          "baselineArtifactSourceCommit": "bfcbc785ceb1c17ee3ce0a7707e5e18891979241",
+          "baselineArtifactManifestSha256": "5fddd51915c4a4370c571c8f266ab358c55d0609572711ef752720dc1d34d147",
+          "requiredSourceFiles": 200,
+          "rawGitBlobVerified": 200,
+          "changedRequiredSourceFiles": [
+            "src/checks/agent-surface/instructions.mjs",
+            "src/lattice/artifact.mjs"
+          ]
+        },
+        "verification": {
+          "rootFullSuiteTotal": 512,
+          "rootFullSuitePassed": 485,
+          "rootExplicitSkips": 27,
+          "rootFullSuiteFailed": 0,
+          "pinnedLinuxParserDiagnostic": "no diagnostics after exact source repair",
+          "earlierConcurrentLocalOriginFailure": "retained; root cause unknown; five focused reruns and serial full suite passed",
+          "selfScanReleaseGate": "open; earlier blocked audit not relabeled"
+        },
+        "rightsDecisionChanged": false,
+        "scannerPinsChanged": false,
+        "frozenSelectionsChanged": false,
+        "policyChanged": false,
+        "publicDomainAssumptions": false,
+        "checkoutActivationApprovedByThisRecord": false,
+        "productionDeploymentApprovedByThisRecord": false,
+        "artifactBuilt": false
+      }
+    },
+    {
+      "recordSha256": "555a3860ba03454e67812d9d41fb3971b5ad04355775afd7958e58cb1782d32c",
+      "review": {
+        "reviewedOn": "2026-10-22",
+        "reviewType": "engineering-maintenance-under-existing-owner-fix-and-release-authority",
+        "authority": "Richard authorized remaining Lattice Security repairs and rebuilding under the new npm account. Root reviewed this bounded engineering maintenance; no new rights, scanner sources/pins, selections, policy, checkout or Production activation are granted.",
+        "predecessorRecordSha256": "93da623c963c9d1e68634e061343e113a3fedd00d50813ec8cb030dc85080b6f",
+        "previousApprovedSource": {
+          "algorithm": "sha256-path-nul-bytes-nul",
+          "sha256": "53fbb1400d9c921502b00b8622a8478f3d0793dd0e4984d133e64c6a83082b1f",
+          "files": 200
+        },
+        "reviewedSourceCommit": "8e6acd64b1eef1bf62a85b328f7b784a3adcb03a",
+        "changedDistributedSource": [
+          "src/checks/code/auth-helpers.mjs",
+          "src/checks/code/index.mjs",
+          "src/lattice/artifact.mjs"
+        ],
+        "scope": "Repair automatic auth-helper suppression so ignored identity/RPC wrappers remain findings, supported checked results and proved fail-closed guards are recognized, and only resolved Next redirect/React cache bindings carry termination proof. Extend the original-source URL input to the exact new @m2-ai/lattice-cli stable tarball while retaining the old canonical URL and Git provenance.",
+        "sourceBinding": {
+          "baselineArtifactSourceCommit": "bd9e52384884aa7354751df6493537d90205c270",
+          "baselineArtifactManifestSha256": "ea7ce637afba940d6e455537364659203215f61f271f5d124db5396b7bbdd9be",
+          "requiredSourceFiles": 200,
+          "rawGitBlobVerified": 200,
+          "changedRequiredSourceFiles": [
+            "src/checks/code/auth-helpers.mjs",
+            "src/checks/code/index.mjs",
+            "src/lattice/artifact.mjs"
+          ]
+        },
+        "verification": {
+          "fullWindowsTests": 526,
+          "passed": 499,
+          "failed": 0,
+          "explicitSkips": 27,
+          "realPinnedOpengrepTests": 3,
+          "realPinnedOpengrepPassed": 3,
+          "independentAuthControls": 17,
+          "originalScannerFalsePositiveFailurePreserved": true,
+          "publicSourceDelivery": "pending actual staged/published tarball readback",
+          "selfScanReleaseGate": "open; prior blocked identities preserved"
+        },
+        "rightsDecisionChanged": false,
+        "scannerPinsChanged": false,
+        "frozenSelectionsChanged": false,
+        "policyChanged": false,
+        "publicDomainAssumptions": false,
+        "checkoutActivationApprovedByThisRecord": false,
+        "productionDeploymentApprovedByThisRecord": false,
+        "artifactBuilt": false
+      }
+    }
+  ]
+}

package/dist/security-runtime/licensing/candidates/data-feed-evidence.json

@@ -0,0 +1,259 @@
+{
+  "schemaVersion": 1,
+  "status": "dated-engineering-evidence-not-commercial-or-legal-clearance",
+  "collectedOn": "2026-10-20",
+  "sourceCommitAtCollection": "7ea433a3f08d30a0736592ef124b817defd844e8",
+  "sourceFiles": [
+    {
+      "path": "src/checks/dep-change/registries.mjs",
+      "sha256": "97392f1f272bab6f529577028e479ae08f91d0781a496cdbbe84a58f66c681a8"
+    },
+    {
+      "path": "src/checks/deps-vuln/index.mjs",
+      "sha256": "7411d2d1e07805ec8f931f700763c2af1d6dd140f29bf0dcefe67ebd88432710"
+    },
+    {
+      "path": "src/checks/licenses/index.mjs",
+      "sha256": "1e30b7715df064c5d7945ae7fc3f8da18dfb544f0b579d0c5a54c150afef155e"
+    },
+    {
+      "path": "src/checks/posture/index.mjs",
+      "sha256": "519123cbe911997a1b5c4b9adc68beb1fe4252a0216f15ffa2cfb4d27de8b0ec"
+    },
+    {
+      "path": "src/checks/sbom/index.mjs",
+      "sha256": "df437f21e9851a0e7ffb5709c2dd7f7884e1a08436c977ed6d0a0e2f1a4fd7d3"
+    }
+  ],
+  "providers": [
+    {
+      "id": "osv",
+      "endpoint": "api.osv.dev via pinned OSV-Scanner",
+      "codeReferences": [
+        "src/checks/deps-vuln/index.mjs",
+        "src/checks/sbom/index.mjs"
+      ],
+      "evidence": [
+        {
+          "id": "osv-data-sources",
+          "url": "https://google.github.io/osv.dev/data/",
+          "finalUrl": "https://google.github.io/osv.dev/data/",
+          "retrievedAt": "2026-10-21T02:30:46.167384+00:00",
+          "contentType": "text/html; charset=utf-8",
+          "bytes": 25628,
+          "sha256": "721845a558bd9b2cb8a1ae58a4971dc7e9f02f6d9b1e5fd4dc9646cbe40ce05e"
+        }
+      ],
+      "observed": "OSV aggregates multiple upstream vulnerability databases. Its data-source page identifies CC-BY-4.0 for GitHub, PyPI and Go advisory databases; this does not license every upstream record under one blanket license.",
+      "remaining": [
+        "Map every included advisory to its upstream data source/license, preserve required attribution and modification information in local/cloud/download output.",
+        "Do not substitute the OSV-Scanner Apache code license for vulnerability-data rights."
+      ]
+    },
+    {
+      "id": "cisa-kev",
+      "endpoint": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
+      "codeReferences": [
+        "src/checks/deps-vuln/index.mjs"
+      ],
+      "evidence": [
+        {
+          "id": "cisa-kev-readme",
+          "url": "https://raw.githubusercontent.com/cisagov/kev-data/main/README.md",
+          "finalUrl": "https://raw.githubusercontent.com/cisagov/kev-data/main/README.md",
+          "retrievedAt": "2026-10-21T02:30:46.255491+00:00",
+          "contentType": "text/plain; charset=utf-8",
+          "bytes": 3318,
+          "sha256": "7d18e1fc40185acc90128fcceb18f016e010c8d0cf4125c3311c9381cbafcfe2"
+        },
+        {
+          "id": "cisa-kev-license",
+          "url": "https://raw.githubusercontent.com/cisagov/kev-data/main/LICENSE",
+          "finalUrl": "https://raw.githubusercontent.com/cisagov/kev-data/main/LICENSE",
+          "retrievedAt": "2026-10-21T02:30:46.300090+00:00",
+          "contentType": "text/plain; charset=utf-8",
+          "bytes": 7469,
+          "sha256": "8dfcf2d0cba33bede386eb470daf2ac08caf6540fc2516baab10dd546f90938a"
+        },
+        {
+          "id": "cisa-kev-canonical-license",
+          "url": "https://www.cisa.gov/sites/default/files/licenses/kev/license.txt",
+          "finalUrl": "https://www.cisa.gov/sites/default/files/licenses/kev/license.txt",
+          "retrievedAt": "2026-10-21T02:30:47.024862+00:00",
+          "contentType": "text/plain; charset=UTF-8",
+          "bytes": 7592,
+          "sha256": "b0067899536bce972ba5116151e51e10fac9b1e066a8993e2193a9eb9a1791af"
+        }
+      ],
+      "observed": "The official KEV license identifies CC0-1.0 for database information and separately preserves third-party linked-site terms and CISA/DHS identity restrictions.",
+      "remaining": [
+        "Retain CISA KEV source and dataset timestamp; do not imply endorsement or treat linked third-party content as CC0."
+      ]
+    },
+    {
+      "id": "first-epss",
+      "endpoint": "https://api.first.org/data/v1/epss",
+      "codeReferences": [
+        "src/checks/deps-vuln/index.mjs"
+      ],
+      "evidence": [
+        {
+          "id": "first-epss-faq",
+          "url": "https://www.first.org/epss/faq",
+          "finalUrl": "https://www.first.org/epss/faq",
+          "retrievedAt": "2026-10-21T02:30:46.315518+00:00",
+          "contentType": "text/html; charset=UTF-8",
+          "bytes": 48135,
+          "sha256": "c6af04048da89c8fa0ec34f571c0388914692a707c4d11353989ff8872a3dcd4"
+        },
+        {
+          "id": "first-epss-data",
+          "url": "https://www.first.org/epss/data.html",
+          "finalUrl": "https://www.first.org/epss/data.html",
+          "retrievedAt": "2026-10-21T02:30:46.327498+00:00",
+          "contentType": "text/html; charset=UTF-8",
+          "bytes": 27713,
+          "sha256": "014e5c95974576d5200dd1a6a31fe184d299f661f66ea21d54ea1aac3dd37b22"
+        },
+        {
+          "id": "first-services-terms-current",
+          "url": "https://www.first.org/about/policies/terms",
+          "finalUrl": "https://www.first.org/about/policies/terms",
+          "retrievedAt": "2026-10-21T02:30:46.695505+00:00",
+          "contentType": "text/html; charset=UTF-8",
+          "bytes": 39550,
+          "sha256": "bb3bcc8e1d2a3e47d24f5766cfb125faf27924673265c8c99d3c3d62b4fcc12f"
+        }
+      ],
+      "observed": "The EPSS FAQ describes freely published scores and requested product/publication attribution. The data page distinguishes small-batch API lookup from bulk downloads. FIRST services terms contain purpose and notice conditions.",
+      "remaining": [
+        "Provide FIRST/EPSS attribution and score/model/date provenance where scores are displayed or exported.",
+        "Confirm the exact hosted-report use against FIRST services terms; do not infer a blanket open-data license from free access.",
+        "Preserve bounded lookup usage; do not use the lookup API to mirror the entire dataset."
+      ]
+    },
+    {
+      "id": "npm",
+      "endpoint": [
+        "https://registry.npmjs.org/",
+        "https://api.npmjs.org/downloads/point/last-week/"
+      ],
+      "codeReferences": [
+        "src/checks/dep-change/registries.mjs"
+      ],
+      "evidence": [
+        {
+          "id": "npm-open-source-terms",
+          "url": "https://docs.npmjs.com/policies/open-source-terms/",
+          "finalUrl": "https://docs.npmjs.com/policies/open-source-terms/",
+          "retrievedAt": "2026-10-21T02:30:48.130646+00:00",
+          "contentType": "text/html; charset=utf-8",
+          "bytes": 568197,
+          "sha256": "b9feaa589d23a7f18d38453148e30fd56224efff1be3c0ef35f99f5c27df4920"
+        }
+      ],
+      "observed": "npm service terms distinguish service access, publisher-owned content and package-specific license metadata. Publisher metadata is not a rights warranty.",
+      "remaining": [
+        "Bind used fields and source dates; retain any package-specific license obligations and follow service/rate terms.",
+        "Do not apply the npm CLI license to registry package contents or all metadata."
+      ]
+    },
+    {
+      "id": "pypi",
+      "endpoint": [
+        "https://pypi.org/pypi/<name>/json",
+        "https://pypi.org/pypi/<name>/<version>/json"
+      ],
+      "codeReferences": [
+        "src/checks/dep-change/registries.mjs"
+      ],
+      "evidence": [
+        {
+          "id": "pypi-terms",
+          "url": "https://policies.python.org/pypi.org/Terms-of-Service/",
+          "finalUrl": "https://policies.python.org/pypi.org/Terms-of-Service/",
+          "retrievedAt": "2026-10-21T02:30:48.177674+00:00",
+          "contentType": "text/html; charset=utf-8",
+          "bytes": 87275,
+          "sha256": "07015a42a9f6284ff660d66fdb1c145b218b86e281e952249abfbc900e519a24"
+        }
+      ],
+      "observed": "PyPI terms have an API section covering abuse, access limits and token sharing. The Warehouse software license is separate from uploaded package content.",
+      "remaining": [
+        "Follow PyPI service/API conditions and package-specific rights; preserve used-field provenance.",
+        "Do not infer upload rights from the Warehouse Apache license or the policy text license."
+      ]
+    },
+    {
+      "id": "github",
+      "endpoint": "https://api.github.com (posture); GitHub advisory records indirectly via OSV",
+      "codeReferences": [
+        "src/checks/posture/index.mjs",
+        "src/checks/deps-vuln/index.mjs"
+      ],
+      "evidence": [
+        {
+          "id": "github-api-terms",
+          "url": "https://docs.github.com/en/site-policy/github-terms/github-terms-of-service",
+          "finalUrl": "https://docs.github.com/en/site-policy/github-terms/github-terms-of-service",
+          "retrievedAt": "2026-10-21T02:30:48.330879+00:00",
+          "contentType": "text/html; charset=utf-8",
+          "bytes": 366804,
+          "sha256": "b6812b712397d759ac755f234401b3476bc5013591ba1900d195fc189752cdae"
+        },
+        {
+          "id": "github-advisory-license",
+          "url": "https://raw.githubusercontent.com/github/advisory-database/main/LICENSE.md",
+          "finalUrl": "https://raw.githubusercontent.com/github/advisory-database/main/LICENSE.md",
+          "retrievedAt": "2026-10-21T02:30:48.372978+00:00",
+          "contentType": "text/plain; charset=utf-8",
+          "bytes": 18656,
+          "sha256": "9e5f1b3c610b9c2da5c313bf81d577a7d1acec686bdb0384edefa6df0f90cd94"
+        }
+      ],
+      "observed": "GitHub advisory data carries a CC-BY-4.0 license; API access has separate service terms. Repository posture content and advisory data are distinct.",
+      "remaining": [
+        "Keep advisory source/license/credit and change notices in output. Follow API limits and preserve token confidentiality.",
+        "Do not treat advisory-data licensing as a license for all GitHub repository or API content."
+      ]
+    },
+    {
+      "id": "deps-dev",
+      "endpoint": "deps.dev through pinned OSV-Scanner license lookup",
+      "codeReferences": [
+        "src/checks/licenses/index.mjs"
+      ],
+      "evidence": [
+        {
+          "id": "deps-dev-readme",
+          "url": "https://raw.githubusercontent.com/google/deps.dev/main/README.md",
+          "finalUrl": "https://raw.githubusercontent.com/google/deps.dev/main/README.md",
+          "retrievedAt": "2026-10-21T02:30:48.383689+00:00",
+          "contentType": "text/plain; charset=utf-8",
+          "bytes": 5404,
+          "sha256": "75750ac0d9888fb9bd5d949fb2d349b97c598d9bdc377c4f276d30fb0bc459b3"
+        },
+        {
+          "id": "google-api-terms",
+          "url": "https://developers.google.com/terms",
+          "finalUrl": "https://developers.google.com/terms",
+          "retrievedAt": "2026-10-21T02:30:48.392962+00:00",
+          "contentType": "text/html; charset=utf-8",
+          "bytes": 71359,
+          "sha256": "a99f5243589b4ea3d9b7c13bed20d981cd91a7f2118e78c36d1b3b46ab89b4ac"
+        }
+      ],
+      "observed": "deps.dev identifies CC-BY-4.0 for its generated data, references original terms for aggregated sources, permits client caching and applies Google API terms.",
+      "remaining": [
+        "Preserve generated-data attribution and aggregated-source provenance in output.",
+        "Verify downstream use against Google API and original data-source terms; API access is not universal content clearance."
+      ]
+    }
+  ],
+  "releaseBoundary": [
+    "This record captures primary-source terms evidence; it does not implement missing output credits or approve rights.",
+    "Full dated snapshots are retained in the task evidence directory; this record binds their URL, byte count and SHA256.",
+    "No feed endpoint, runtime, policy, approval, scanner pin or checkout/publication flag was changed.",
+    "Qualified review remains necessary for unresolved license interpretation; no company policy or designated reviewer was invented."
+  ]
+}