@the-inclusionist/engine 9.0.0 → 11.0.0

package/docs/CREDITS.md

@@ -1,18 +1,23 @@
-# Créditos e atribuições de terceiros
+# Credits and third-party attributions
 
-O código de **The Inclusionist** é AGPL-3.0-or-later. Partes de terceiros abaixo mantêm suas próprias licenças.
+The code of **The Inclusionist** is AGPL-3.0-or-later. The third-party parts below keep their own licences.
 
 ## Clarity — Adam Brooks (dissimulate) — MIT
 
-As **mecânicas de plataforma** partiram do projeto **Clarity**, de Adam Brooks (dissimulate), sob licença
-**MIT**. O **mapa** (`app/assets/levels/clarity.map.txt`, batizado em homenagem) foi **fortemente adaptado** do
-nível do Clarity — com modificações cirúrgicas de layout e mudança de significado de vários tiles — não é uma
-cópia, mas uma obra derivada. A atribuição abaixo cobre a porção de origem.
+The **platform mechanics** started from the **Clarity** project, by Adam Brooks (dissimulate), under the
+**MIT** licence. The **map** (`clarity.map.txt`, named in its honour) was **heavily adapted** from
+Clarity's level — with surgical layout changes and a change of meaning of several tiles — it is not a
+copy, but a derived work. The attribution below covers the original portion.
 
-- Código: https://github.com/dissimulate/Clarity
-- Jogável: https://codepen.io/dissimulate/pen/AGYEby
+⚠️ **Neither the mechanics nor the map are in this repository any more.** They left with the platformer
+(the cartridge's departure, issue #111) and live in `game-platformer`, whose credits carry this attribution;
+the engine published from here contains no code derived from Clarity. The credit stays here as the record of
+where the project's platform code came from.
 
-Texto da licença MIT (aplicável às porções derivadas do Clarity):
+- Code: https://github.com/dissimulate/Clarity
+- Playable: https://codepen.io/dissimulate/pen/AGYEby
+
+Text of the MIT licence (applicable to the portions derived from Clarity):
 
 ```
 MIT License
@@ -38,48 +43,299 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-> Nota: confirmar o ano/linha exata de copyright no `LICENSE` do repositório do Clarity e alinhar aqui antes de
-> qualquer distribuição formal. MIT é compatível com AGPL-3.0 (as porções MIT mantêm seu aviso; o todo é AGPL-3.0).
+> Note: confirm the exact copyright year/line in the `LICENSE` of the Clarity repository and align it here before
+> any formal distribution. MIT is compatible with AGPL-3.0 (the MIT portions keep their notice; the whole is AGPL-3.0).
+
+## Neural voice (TTS) — until 2026-09-14: Piper and sherpa-onnx (WITHDRAWN)
+
+🔴 **The Piper voices left the engine on 2026-09-14** (ADR-0207, issue #193) — see the public notice
+[`notices/2026-09-14-piper-voices-withdrawn.md`](notices/2026-09-14-piper-voices-withdrawn.md). `pt_BR-faber-medium`,
+`en_US-amy-medium` and `en_US-ryan-medium` start from the `lessac` voice («Finetuned from U.S. English lessac voice», in their
+`MODEL_CARD`s), trained on the **Blizzard 2013** dataset (CSTR, University of Edinburgh), whose licence limits use to research and
+forbids distributing the materials; `es_MX-claude-high` states no starting checkpoint. We could not show a licence for what the project
+does with them.
+
+Credit follows what was used. Until that date neural narration relied on:
+
+- **[sherpa-onnx](https://github.com/k2-fsa/sherpa-onnx)** (Next-gen Kaldi / k2-fsa, **Apache-2.0**) — in the TTS lab; thanks to
+  **Fangjun Kuang** ([@csukuangfj](https://github.com/csukuangfj)), who packaged Piper voices in the sherpa format.
+- **[Piper](https://github.com/rhasspy/piper)** (Michael Hansen / rhasspy, **MIT**) and the `@mintplex-labs/piper-tts-web` runtime (MIT).
+- **[eSpeak NG](https://github.com/espeak-ng/espeak-ng)** (**GPL-3.0**) — the voices' phonemization (`piper_phonemize`).
+  It still phonemizes the neural voice, now in the project's own build (under Kokoro, below).
+- **The voices and their dataset licences**, read on 2026-09-14: `pt_BR-faber-medium` (NabuCasa/voice-datasets, CC0),
+  `es_MX-claude-high` (HirCoir/Piper-TTS-Spanish, Apache-2.0), `en_US-amy-medium` (MycroftAI/mimic3-voices, «See URL»),
+  `en_US-ryan-medium` (roholazandie/ryanspeech, CC BY-NC-SA 4.0). The Dev's answer on Ryan — «nosso projeto não tem fins
+  lucrativos» — met its non-commercial clause; the `lessac` chain is what took them out.
+
+## Kokoro-82M — hexgrad — Apache-2.0
+
+The weights are **Apache-2.0** (`huggingface.co/hexgrad/Kokoro-82M`), trained only on permissive audio — among it, **CC BY**
+audio: **Koniwa** (CC BY 3.0) and **SIWIS** (CC BY 4.0), credited here. The ONNX export used is `onnx-community/Kokoro-82M-v1.0-ONNX`.
+
+What speaks it, fetched by the engine beside the model: **[eSpeak NG](https://github.com/espeak-ng/espeak-ng)**
+(by Jonathan Duddington, Reece H. Dunn and its contributors; **GPL-3.0-or-later**) turns the sentence into phonemes, and
+**[ONNX Runtime Web](https://github.com/microsoft/onnxruntime)** (`onnxruntime-web` 1.27.0, **MIT**, Microsoft) runs the graph.
+
+- **Kokoro-82M** (catalogue `voz:kokoro:*`: the fp32 model, the tokenizer and one style table per voice) — **Apache-2.0**.
+  Licence statement and NOTICE: `the-inclusionist-lfs/kokoro-82m-v1.0-onnx/LICENSE.md` and `NOTICE.md`; the Apache-2.0 text
+  itself is upstream (`huggingface.co/hexgrad/Kokoro-82M`), not held in that folder.
+- **eSpeak NG in WebAssembly** (catalogue `voz:runtime:fonemas*`: `espeak-ng.js` and `espeak-ng.wasm`) — **GPL-3.0-or-later**,
+  **built by the project** from eSpeak NG commit `530bf0ab` (issue #192) with `scripts/models/build-espeak-ng.ps1`, which pins
+  that commit, the Emscripten image and every flag; its data is cut to the pt, es and en voices (and the de and fr
+  dictionaries Portuguese hands words to). It replaces the npm package `espeak-ng` 1.0.2 (`ianmarmour/espeak-ng.js`), whose
+  eSpeak NG revision the package never stated: built from `530bf0ab`, the project's build carries that package's data byte for
+  byte and gives the same phonemes (`docs/6-DevOps-SRE/models.md`). **Corresponding Source** (GPL-3.0 §6): the commit and the
+  recipe, both staged beside the build in `the-inclusionist-lfs/espeak-ng-530bf0a/corresponding-source/` with `LICENSE`, `NOTICE` and a
+  `LICENSE.md` naming them; every delivery's folder carries a `SOURCE` note saying where they are
+  (`scripts/licences/third-party.mjs`). The copyright lines are those of the C files compiled into it, listed in its `NOTICE`.
+- **ONNX Runtime Web** (catalogue `voz:runtime:onnx*`: `ort.webgpu.bundle.min.mjs` and the `ort-wasm-simd-threaded.jsep` pair)
+  — **MIT**. The bundle's own header: «Copyright (c) Microsoft Corporation. All rights reserved. Licensed under the MIT
+  License.» Mirror notice: `the-inclusionist-lfs/onnxruntime-web-1.27.0/LICENSE.md`; the MIT text itself is upstream
+  (`github.com/microsoft/onnxruntime`), not held in that folder or in the npm package.
+
+> The voice's files are **downloaded once** — by the build into the delivery's `heavy/` folder, and from there into the
+> device's cache — and run **100% locally** afterwards: no child's audio leaves the device. See ADR-0216 (the engine loads
+> the voice), ADR-0198 and ADR-0207 in `docs/2-Architecture/adr/`.
+
+## The other runtimes and models the engine downloads
+
+Every file below is listed in `app/js/platform/heavy-catalogue.ts` with its address and sha256, fetched by the build into the
+delivery's `heavy/` folder (or from the project's mirror, `the-inclusionist-lfs/`, with the same bytes) and run on the device.
+The published npm package carries none of them. How each one is used and rebuilt: `docs/6-DevOps-SRE/models.md`.
+
+⚠️ **What the licence lines rest on.** Only the Vosk runtime's folder holds the upstream licence text and NOTICE. The other
+folders hold a `LICENSE.md` the project wrote from the upstream page it read, not the upstream text: the
+licence is stated, and the copyright line an MIT or Apache-2.0 notice carries is, where marked **UNVERIFIED**, not held
+anywhere in this project yet.
+
+## MediaPipe tasks-vision and its face, gesture and hand models — Google — Apache-2.0
+
+The eye, face and hand control (`platform/vision`; catalogue `visao:*`): the `@mediapipe/tasks-vision` 1.0.1 runtime
+(`vision_bundle.mjs`, `vision_wasm_internal.js`, `vision_wasm_internal.wasm`, from jsDelivr) and the float16 **Face
+Landmarker**, **Gesture Recognizer** and **Hand Landmarker** models (`storage.googleapis.com/mediapipe-models`).
+
+- **Licence:** `Apache-2.0`, as stated in `the-inclusionist-lfs/mediapipe-tasks-vision-1.0.1/LICENSE.md` and in ADR-0203's
+  erratum (the runtime, and the face model card with its blendshapes).
+- **Copyright line: UNVERIFIED.** The runtime files carry no licence header, the `.task` bundles carry no licence file, and the
+  package is not installed here. The Apache-2.0 text lives upstream, with the MediaPipe project.
+- ⚠️ **The hand and gesture model cards were not read** (the mirror's `LICENSE.md` says so; issue #192). Their terms are
+  UNVERIFIED until they are.
+
+## Whisper small — OpenAI — Apache-2.0
+
+The Portuguese reading model (catalogue `reading:pt:*`): `openai/whisper-small`, **exported to ONNX and quantized by this
+project** (`scripts/models/export-whisper-small.py`), with the upstream tokenizer, configuration and mel filterbank copied
+unchanged. The export was made here because the ready-made `onnx-community/whisper-small` states no licence of its own.
+
+- **Licence:** `Apache-2.0`, as stated in `the-inclusionist-lfs/whisper-small-onnx/LICENSE.md` and in ADR-0203's erratum.
+- **Copyright line: UNVERIFIED** — not held locally. The Apache-2.0 text lives upstream (`huggingface.co/openai/whisper-small`).
+- The ONNX files are a derivative work (converted and quantized); `whisper-small-onnx/README.md` says what was changed.
+
+## Moonshine streaming small — Useful Sensors / Moonshine AI — MIT
+
+The English and Spanish reading models (catalogue `reading:en:*`, `reading:es:*`):
+
+- **English:** the ONNX export `Workmind/moonshine-streaming-small-ONNX` (base model `UsefulSensors/moonshine-streaming-small`),
+  copied unchanged. Licence `MIT`, as the export declares (`license: mit`), read on 2026-09-18 and stated in
+  `the-inclusionist-lfs/moonshine-streaming-small-onnx/LICENSE.md`.
+- **Spanish:** `moonshine-ai/moonshine-streaming-small-es` at revision `8cb0974f29ca24d6b645518c430efc8c57cd0073`, **exported to
+  ONNX by this project** (`scripts/models/export-moonshine-streaming-es.py`; the decoders quantized to q8). Licence `MIT`, as the
+  upstream model declares, stated in `the-inclusionist-lfs/moonshine-streaming-small-es-onnx/LICENSE.md`.
+- **Copyright line: UNVERIFIED** for both. MIT requires its copyright notice and permission notice to travel with every copy,
+  and neither folder holds that text yet; it lives upstream, on each model's Hugging Face page.
+
+## Vosk for the browser — vosk-browser, vosk-api and Kaldi — Apache-2.0
+
+The command runtime (catalogue `commands:runtime*`: `vosk.wasm.js`, `vosk.worker.js`, `vosk.wasm`), **built by this project**
+(`scripts/models/build-vosk-browser.ps1`) from `lichess-org/vosk-browser` `50a6347` and `alphacep/vosk-api` `d714dff`, with one
+change: the link flag `-s DYNAMIC_EXECUTION=0` (`scripts/models/vosk-browser-dynamic-execution.patch`), so it runs under the
+engine's Content-Security-Policy.
+
+- **Licence:** `Apache-2.0`. The full text is `the-inclusionist-lfs/vosk-browser-dynamic-execution-0/LICENSE`, and the attribution
+  notices are that folder's `NOTICE`, which opens:
+
+  ```
+  Vosk-Browser
+  Copyright 2020-2022 Ciaran O'Reilly
+
+  The Initial Developer of the the WASM bindings
+  (https://github.com/dtreskunov/tiny-kaldi) for the VOSK API is Denis
+  Treskunov (https://github.com/dtreskunov).
+  Copyright 2020, Denis Treskunov
+
+  The Developer of the VOSK API (https://github.com/alphacep/vosk-api) is
+  Alpha Cephei Inc (https://alphacephei.com/en/).
+  Copyright 2019-2022 Alpha Cephei Inc. All Rights Reserved.
+  ```
+
+- **What the binary also contains**, each with its notice in the same `NOTICE`: **Kaldi** (Apache-2.0, per-file authors listed
+  there), **OpenFst** (Apache-2.0, Copyright 2005-2010 Google, Inc.), **CLAPACK** (BSD-3-Clause, Copyright (c) 1992-2008 The
+  University of Tennessee), **clapack-wasm** (Apache-2.0, INRIA), **zlib** (Zlib), **libarchive** (BSD-2-Clause) and
+  **Emscripten and musl** (MIT). The `NOTICE` is the full list and its text governs; this page only points at it.
+
+## Vosk small models — Alpha Cephei — Apache-2.0
+
+The command models (catalogue `commands:model:*`): `vosk-model-small-pt-0.3`, `vosk-model-small-en-us-0.15` and
+`vosk-model-small-es-0.42`, **repacked unchanged** from alphacephei's zips into the `.tar.gz` vosk-browser loads
+(`scripts/models/repack-vosk-models.py`).
+
+- **Licence:** `Apache-2.0`, as stated in `the-inclusionist-lfs/vosk-models/LICENSE.md` (from `alphacephei.com/vosk/models`).
+  ⚠️ **The archives themselves state no licence**: their `README`s carry only a copyright line, and the Apache-2.0 text is not
+  held locally.
+- **Copyright lines, as each archive's `README` states them:** en-us 0.15 «Copyright 2020 Alpha Cephei Inc»; es 0.42
+  «Copyright 2022-2050 AC Technologies LLC»; pt 0.3 **none** (its `README` says only what the model is).
+
+## VLibras translator — LAViD-UFPB `vlibras-translator` 1.3.3 — LGPL-3.0 — BUILD TIME ONLY
+
+What turns the Portuguese a child is shown into the Libras glosses the player signs (ADR-0234, plan item 5b):
+`inclusionist-heavy --libras` runs it once, on the build machine, over the engine's Portuguese dictionary and the game's
+(`scripts/libras-glosses.mjs`, `scripts/libras-glosses/gloss.py`), in its **rule-based mode only** — the neural mode fetches a
+model that declares no licence, and is never asked for. Published on test.pypi.org only; pinned with its hashes in
+`scripts/libras-glosses/uv.lock`.
+
+- **Licence:** **LGPL-3.0**, the `LICENSE` in its 1.3.3 source distribution.
+- **Distributed: none of it.** It runs in an environment outside the repository and nothing of it enters a delivery or the npm
+  package; what a delivery carries is its OUTPUT, `libras/avatar/glosses.json`.
+- **Copyright line** as its sources state it: «Copyright (c) Laboratório de Aplicações de Vídeo Digital - LAViD».
+
+## VLibras sign sources — LAViD-UFPB `vlibras-dictionary-sources`, `.blend` files — GPL-3.0 — EXPORTED, DISTRIBUTED BY `--libras`
+
+What the Libras player deaf mode signs with is built from (ADR-0234, route B, phase B1; the engine's interpreter since phase B3): each sign's Blender 2.79 source,
+`FILES/BLENDS/BR/<NAME>.blend` of the same repository at the same commit `f8ddb378affd0d6da42f04c9fc888dafe1cc1299` — the whole
+avatar (meshes, armature, shape keys, materials) plus one Action named after the sign. Only the signs the engine's glosses use
+and the manual alphabet's letters the player fingerspells from: **655 files, 1,194,114,310 bytes** — the 632 of the glosses
+(1,141,253,870 bytes, with A, D, M and O among them) and the alphabet's 23 other letters, B–Z but those four, and Ç
+(52,860,440 bytes) — each pinned by sha256 and byte count in `scripts/libras-export/sources.json`. Downloaded with the Dev's
+permission (route B's first step; the 23 letters on 2026-09-25) into a folder outside the repository; none is committed.
+
+- **Licence:** the repository declares **GPL-3.0**. What `scripts/libras-export.mjs` makes of them — **one avatar**
+  (`avatar.glb`, glTF 2.0) and **one clip per sign** (three.js AnimationClip JSON) — are **derivatives under GPL-3.0**, and a
+  delivery that carries them carries the GPL-3.0 text and a NOTICE naming the pinned source.
+- **Corresponding source of the exports:** the pinned `.blend` files plus `scripts/libras-export.mjs` and
+  `scripts/libras-export/export.py`, run with the Blender version the export's `manifest.json` names (5.2.2 LTS for the first
+  export).
+- **Changed by this project**, all in the export, none in the sources: the avatar's Blender Internal materials rebuilt as one
+  colour each, with the head's and the body's image (`cabecaAvatarCartoon.png`, `TxCorpo.png`) taken from the sign file `0`,
+  one of the twelve that pack them — most files only point at them by a path on LAViD's machines; the hair's normal map, which
+  no file carries, and two secondary texture slots are left out; the sign's constraints baked into bone tracks and its face's
+  driver-moved shape keys sampled into morph tracks; keys reduced within a stated tolerance; node names as three.js's glTF
+  loader renames them.
+- **Distributed: by a delivery built with `inclusionist-heavy --libras`** (phase B3): the avatar and 655 clips — the
+  632 signs of the first export and the manual alphabet's 23 other letters — **34,283,274 bytes**, each pinned by sha256 in
+  `scripts/libras-avatar.json`, into `libras/avatar/` with the
+  GPL-3.0 text and a NOTICE naming LAViD, the pinned commit and where the Corresponding Source is (`scripts/libras-avatar.mjs`).
+  The npm package carries none of them. One clip is played from a later point than its file starts: FALA's `.blend` action
+  begins at a stray keyframe 1404 frames before the sign, and the pins name the sign's start (46.8 s) with why.
+- **Copyright line: UNVERIFIED** — the `.blend` files carry none that was read, and the repository's own `LICENSE` and README
+  were not read.
+
+## three.js 0.186.1 — mrdoob and the three.js authors — MIT
+
+What the free Libras player of route B draws with (ADR-0234 errata, route B, phase B2; the Dev decided it on 2026-09-25): the
+`three` npm package, the one run-time `dependency` of the engine, pinned to exactly `0.186.1`. Only `app/js/ui/libras-avatar-stage.ts`
+imports it — `three` and its glTF loader, `three/addons/loaders/GLTFLoader.js` — and only the player's dynamic `import()` reaches
+that module, at the first sign in deaf mode; a bundler cuts it into a chunk of its own (627 KB, 158 KB gzip), which the service
+worker does not precache.
+
+- **Licence:** **MIT** («Copyright © 2010-2026 three.js authors», the package's `LICENSE`). The npm package names it as a
+  dependency, so a consumer's `node_modules/three` carries that `LICENSE`. The built chunk carries the notice too: the build
+  keeps legal comments (`comments: { legal: true }` in `vite.config.ts`), and 📏 the minified
+  `assets/libras-avatar-stage-<hash>.js` holds three.js's two `@license` headers (it held none before the setting; gate
+  `tests/three-arrives-late.node.test.js`). A game that bundles the engine with its own build keeps the notice only if its
+  bundler keeps legal comments too.
+- **Types:** not `@types/three` (not authorised); `app/js/ui/three-subset.d.ts` declares the few classes the stage uses, written
+  here from three.js's documentation.
+- **Changed by this project:** nothing.
+
+## spaCy and its Portuguese model `pt_core_news_md` 3.8.0 — MIT and CC BY-SA 4.0 — BUILD TIME ONLY
+
+The Portuguese pipeline the translator's rules read (part of speech, morphology, dependencies, entities): spaCy 3.8 (Explosion,
+**MIT**) and the model `pt_core_news_md` 3.8.0 (Explosion, **CC BY-SA 4.0**, from the GitHub release of `explosion/spacy-models`),
+both pinned in `scripts/libras-glosses/uv.lock` with the other Python packages they pull.
+
+- **Distributed: none of it** — build time only, outside the repository, like the translator.
+- ⚠️ **Whether a gloss the model helped produce is a derivative of the model** (and so under CC BY-SA 4.0) is **not determined**;
+  this project believes it is not, and that is not a legal opinion. The glosses a delivery writes say what made them
+  (`"made"` in `glosses.json`).
+
+## Fonts — the engine's 19 families and the font library's 194 — SIL OFL 1.1, Apache-2.0 and the Ubuntu Font Licence 1.0
+
+Two homes since ADR-0255:
+
+- **The engine's own faces** — every family `app/public/vendor/fonts.css` declares, 19 families in 29 `.woff2` files in
+  `app/public/vendor/fonts/`: Atkinson Hyperlegible, Atkinson Hyperlegible Mono (Braille Institute), Andika (SIL), Lexend (the
+  Lexend Project) and the fifteen Playwrite hands the typography button can pick (TypeTogether), the latin and latin-ext subsets
+  `fonts.gstatic.com` serves. The service worker precaches them into every install and the npm package ships them, so each copy
+  of the engine redistributes them; `app/public/vendor/fonts-licences/NOTICE.txt` lists each family's copyright line as read
+  from the font, beside `OFL-1.1.txt`. All 19 are under the **SIL OFL 1.1**.
+- **The font library** — every other family, 194 in 291 files, one folder per family in `the-inclusionist-lfs/fonts/`, each
+  folder with its licence text, a `NOTICE.txt` and a `SHA256SUMS`, catalogued with each face's sha256 in
+  `app/js/platform/font-library.json`. A delivery carries only the families its games declare (`inclusionist-heavy --fonts`),
+  each with the same licence text and notice.
 
-## Voz neural (TTS) — Next-gen Kaldi, Piper, eSpeak NG
+- **Licences, as each font states its own** (name IDs 14, 13 and 0 of its `name` table, read on 2026-09-27): **SIL OFL 1.1**
+  for every family but three, all in the library: **Apache-2.0** for Luckiest Guy and Smokum (Brian J. Bonislawsky DBA
+  Astigmatic) and the **Ubuntu Font Licence 1.0** for Ubuntu (Canonical Ltd.). ⚠️ The typographic catalogue
+  (`research/catalogo_tipografico.json`) records «OFL 1.1» for those three as well; the fonts say otherwise, and the fonts are
+  what ships.
+- **Three families stated no licence in their files** — iA Writer Quattro, Monoton and Yatra One — and LEFT the package on
+  2026-09-27 until their licence is established (ADR-0251); none is declared by hand any more.
+- **Licence texts:** the web subsets strip the licence text (only OpenDyslexic keeps it, in name ID 13), so the texts travel as
+  files, kept in `scripts/licences/` and copied beside every family — `OFL-1.1.txt` (copied from OpenDyslexic's licence field,
+  byte-identical to three upstream `OFL.txt` copies held locally), `Apache-2.0.txt` (the heavy files' text) and `UFL-1.0.txt`
+  (decoded from the Debian `fonts-ubuntu` package's copyright file, and verified byte for byte on 2026-09-27 against
+  `google/fonts` `ufl/ubuntu/UFL.txt`).
+- **Reserved Font Names (ADR-0254):** the 21 library families whose name is a Reserved Font Name — Lato, Lora, OpenDyslexic,
+  Playfair Display, Press Start 2P, Quicksand, Source Sans 3, Source Serif 4, UnifrakturMaguntia, Abril Fatface, Alfa Slab One,
+  Bowlby One SC, Cookie, Lilita One, Lobster, Monofett, Petit Formal Script, Plaster, Ranchers, Sancreek, Titan One — and Ubuntu
+  are their AUTHORS' ORIGINALS: OpenDyslexic its author's `compiled/OpenDyslexic-Regular.woff2` (antijingoist/opendyslexic),
+  the others the files `google/fonts` distributes, converted to WOFF2 by compression alone (every table byte-identical to the
+  author's but the two `head` fields WOFF2 writes, and without the `DSIG` a WOFF2 cannot carry), each folder with the author's
+  `OFL.txt` or `UFL.txt` beside its own. **Merriweather** is no longer offered: its original is a 4.5 MB variable font. The
+  other library families are the Google Fonts web subsets, none of them presented under a Reserved Font Name (ADR-0254 measured
+  the 22 that were).
 
-A narração por voz roda **inteiramente no navegador/offline** graças ao trabalho excepcional de:
+## Arrow icons — Lucide, derived from Feather (Cole Bemis) — MIT
 
-- **[sherpa-onnx](https://github.com/k2-fsa/sherpa-onnx)** (projeto **Next-gen Kaldi / k2-fsa**, **Apache-2.0**) — o motor
-  de inferência TTS em WebAssembly. Um agradecimento especial a **Fangjun Kuang** ([@csukuangfj](https://github.com/csukuangfj)),
-  engenheiro-líder do Next-gen Kaldi (sherpa-onnx, k2, icefall, kaldi-native-fbank; coautor de trabalhos como
-  [ZipVoice](https://github.com/k2-fsa/ZipVoice)), que **empacotou as vozes Piper no formato ONNX/sherpa** (repositórios
-  `vits-piper-*`) — inclusive **portando a `dii` de pt-PT para pt-BR** — tornando este uso possível. Obrigado.
-- **[Piper](https://github.com/rhasspy/piper)** (Michael Hansen / rhasspy, **MIT**) — o sistema TTS VITS por trás das vozes.
-- **[eSpeak NG](https://github.com/espeak-ng/espeak-ng)** (**GPL-3.0**) — a fonemização (`espeak-ng-data`) usada pelas vozes.
-- **Vozes pt-BR** (`faber`, `jeff`, `miro`, `cadu`) e pt-PT (`dii`) — treinadas pela comunidade Piper a partir de datasets
-  de locutores; a licença de cada voz está no `MODEL_CARD` do respectivo pacote e deve ser confirmada por voz antes de
-  distribuição formal.
-  **O que o jogo de fato embarca hoje é uma voz:** `pt_BR-faber-medium`. As demais permanecem no repositório como
-  material de laboratório (`docs/research/sherpa-wasm/`) e continuam creditadas por isso — crédito acompanha o que
-  está no repositório, e não apenas o que é distribuído no pacote. O roster de entrega decidido é `en_US`, `pt_BR` e
-  `es_MX` (ADR-0065, que supersede o ADR-0022).
+The eye control draws four arrows over the game (`app/js/ui/gaze-overlay.ts`): Lucide's `arrow-up`, `arrow-right`, `arrow-down` and
+`arrow-left` (lucide.dev). Lucide is ISC, but its LICENSE lists these four among the icons derived from the Feather project, which carry
+Feather's MIT notice:
 
-> Os pesos das vozes são **baixados uma vez** (de um host público) e rodam **100% localmente** depois — nenhum áudio de
-> criança sai do dispositivo. Ver `the-inclusionist-docs · docs/2-Architecture/adr/ADR-0065-three-neural-voices-owned-by-the-engine-and-cached-on-first-use.yaml`.
+> The MIT License (MIT) (for the icons listed above)
+>
+> Copyright (c) 2013-present Cole Bemis
+>
+> Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the
+> "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish,
+> distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to
+> the following conditions:
+>
+> The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+>
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+> MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR
+> ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH
+> THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
-## Arte importada — CC0, CC BY 3.0, CC BY 4.0 ou OGA-BY
+## Imported art — through the three doors of ADR-0133
 
-A atribuição da arte que vem de fora é **por recurso**, e por isso não cabe nesta página em prosa: a autoria de um
-acervo lê-se recurso a recurso, e a cadeia de derivações com ela.
+The attribution of art that comes from outside is **per resource**, and so it does not fit on this page as prose: the
+authorship of a collection is read resource by resource, and the chain of derivations with it.
 
-**Ela mora em [`../art/ATTRIBUTION.csv`](../art/ATTRIBUTION.csv)** — caminho, autor, **URL da fonte**, licença e de
-que recursos cada um derivou. É a mesma forma que o `LICENSES.md` §4 já usa para as 100 gerações do PixelLab: um
-ficheiro tabular ao lado do apontador em prosa, porque um livro-razão que cresce com o catálogo não se mantém à mão.
+**It lives in [`../art/ATTRIBUTION.csv`](../art/ATTRIBUTION.csv)** — path, author, **source URL**, door, licence,
+delivery and which resources each one derived from. It is the same shape `LICENSES.md` §4 already uses for the 100
+PixelLab generations: a tabular file beside the prose pointer, because a ledger that grows with the catalogue cannot be
+kept by hand.
 
-⚠️ **Atribuição aqui é condição de uso, não linha de crédito.** Três das quatro licenças exigem-na, e um recurso
-sem autor conhecido **não entra** — «não consegui descobrir» não é licença. O gate
-`tests/arte-licencas-aceites.node.test.js` reprova a entrada vazia, a entrada órfã, o recurso sem entrada, a fonte
-sem URL e **qualquer licença fora das quatro** — com ND, NC e share-alike recusados por nome e com o motivo de
-cada um, que o [`LICENSES.md`](LICENSES.md) §3 e o **ADR-0133** explicam.
+⚠️ **Attribution here is a condition of use, not a credit line.** Most of the admitted licences require it, and a
+resource with no known author **does not come in** — *I could not find out* is not a licence. The gate
+`tests/art-licences-accepted.node.test.js` fails the empty entry, the orphan entry, the resource with no entry, the source
+with no URL, a row with no valid door, and ND and NC, refused by name with the reason for each, which
+[`LICENSES.md`](LICENSES.md) §3 and **ADR-0133** explain. A licence name not yet measured is referred, not refused, and
+share-alike comes in only through the bridge, converted to `GPL-3.0-only`.
 
-📌 **Não há quarentena, e já houve.** Até 2026-09-09 o Liberated Pixel Cup ia entrar sob CC BY-SA 3.0 atrás de uma
-parede (ADR-0107). O Dev recusou o share-alike e a parede saiu com ele: sem arte cujo copyleft viaje, não há o que
-segregar.
+📌 **There is no quarantine, and there was one.** Until 2026-09-09 the Liberated Pixel Cup was to come in under CC BY-SA 3.0
+behind a wall (ADR-0107). ADR-0133 replaced the wall with the bridge: art whose copyleft would travel comes in only as an
+adaptation under `GPL-3.0-only`, and the bridge stays closed while the modifiable source it requires does not exist.
 
-**Hoje o livro está vazio** — nenhum recurso entrou nunca.
+**Today the ledger is empty** — no resource has ever come in.