dumen 0.7.3__tar.gz

dumen-0.7.3/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,48 @@
+name: Bug report
+description: A reproducible failure — commands, versions, output included
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        This project's doctrine is **"no evidence, no claim"** — it applies to
+        bug reports too. "It doesn't work" is not actionable; the exact command
+        and its exact output are.
+  - type: textarea
+    id: repro
+    attributes:
+      label: Reproduction command
+      description: The exact command line that fails (paste it, don't paraphrase)
+      placeholder: |
+        dumen audit --model X --endpoint http://127.0.0.1:11434/v1 --request-timeout 300
+      render: shell
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual output
+      description: Full traceback or log tail (trim secrets, keep line numbers)
+      render: shell
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      description: output of `dumen --version`
+    validations:
+      required: true
+  - type: input
+    id: env
+    attributes:
+      label: Environment
+      description: Python version, OS, CPU/GPU, whether torch is CUDA or CPU build
+    validations:
+      required: true

dumen-0.7.3/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Security vulnerability
+    url: https://github.com/goun7/Dumen/security/advisories/new
+    about: Privately report product-security issues (gateway bypass, evidence-chain tampering, PII masking leaks)
+  - name: Model audit results / red-team findings
+    url: https://github.com/goun7/Dumen/issues/new?template=feature_request.yml
+    about: Jailbreak prompts and model weaknesses belong in the model, not in this tracker — audit artifacts live in examples/audits/

dumen-0.7.3/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,30 @@
+name: Feature request
+description: A capability the evidence pipeline is missing
+labels: [enhancement]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem this solves
+      description: What were you auditing and what could the tool not (yet) prove?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed shape
+      description: CLI flag / API / report field — as concrete as you can make it
+    validations:
+      required: true
+  - type: dropdown
+    id: doctrine
+    attributes:
+      label: Which honesty rule does it touch?
+      options:
+        - "None — purely additive"
+        - "Measured-only metrics (must render None when unmeasured)"
+        - "License/data policy (raw licensed corpora stay out of the repo)"
+        - "White-box vs black-box channel separation"
+        - "Not sure — discuss"
+    validations:
+      required: true

dumen-0.7.3/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,20 @@
+<!-- Doctrine applies to PRs as it does to reports: no evidence, no claim. -->
+
+## What & why (one theme per PR)
+
+- [ ] Single theme; commit prefix `feat|fix|docs|test|perf|security(scope):`
+- [ ] User-visible behavior change → README/CHANGELOG lines updated in the same PR
+
+## Evidence
+
+- [ ] `python3 -m pytest tests/ -q --cov=dumen --cov-fail-under=95` green (paste the
+      final line — test count + coverage %, measured not remembered)
+- [ ] `ruff check dumen/ tests/ examples/ scripts/` clean
+- [ ] New behavior tested through a real socket/CLI/file path — **no mocks**
+- [ ] Claims of the "no evidence, no claim" kind: unmeasured metrics render as
+      "Ölçülmedi"/None, never a placeholder number
+
+## Published audits (if any new artifact)
+
+- [ ] Reproduction command + environment noted inside `*_run.log`
+- [ ] Raw licensed/harmful payloads stay OUT of the repo (cache-only policy)

dumen-0.7.3/.github/workflows/ci.yml

@@ -0,0 +1,37 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.10", "3.12", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install torch --index-url https://download.pytorch.org/whl/cpu
+          pip install -e ".[dev]"
+      - name: Real-model extra (3.12 job)
+        if: matrix.python-version == '3.12'
+        run: pip install -e ".[model]"
+      - name: Lint (ruff)
+        run: ruff check dumen/ tests/ examples/ scripts/
+      - name: Surface language parity (README EN ↔ TR numeric tokens)
+        run: python scripts/surface_parity.py
+      - name: Tests (3.10/3.14: skip real-model; 3.12: include real-model integration)
+        run: |
+          if [ "${{ matrix.python-version }}" = "3.12" ]; then
+            python -m pytest tests/ -q --cov=dumen --cov-report=term --cov-fail-under=95
+          else
+            python -m pytest tests/ -q --ignore=tests/test_real_model_integration.py
+          fi

dumen-0.7.3/.gitignore

@@ -0,0 +1,14 @@
+__pycache__/
+*.py[cod]
+*$py.class
+.pytest_cache/
+.coverage
+htmlcov/
+dist/
+build/
+*.egg-info/
+.env
+.venv
+session.v*.jsonl
+.mergen-id
+audit_output/

dumen-0.7.3/CHANGELOG.md

@@ -0,0 +1,119 @@
+# Changelog
+
+Format: Keep a Changelog · This project uses SemVer. The *evidence* for each
+release lives in `examples/audits/` as reproducible artifacts.
+
+## [Unreleased]
+
+## [0.7.3] - 2026-09-15
+
+Brand identity + public surface + release hygiene.
+
+- **Brand mark (helm-"D")**: hi-res generated mark → potrace single-path SVG
+  (IoU 0.994 ≥ 0.99 gate); og.png/avatar/favicon family generated by
+  `scripts/make_brand_assets.py`; mark embedded in both README surfaces.
+- **Surface language alignment**: English-primary README + full Turkish sibling
+  with a numeric-parity CI gate (`scripts/surface_parity.py`); CONTRIBUTING/
+  SECURITY/CHANGELOG migrated to English (zero numeric drift, multiset-diff).
+- **Community kit**: issue/PR templates, CODE_OF_CONDUCT, CITATION.cff.
+- **Release hygiene gates**: sdist whitelist + `scripts/dist_hygiene.py`
+  (8 internal docs were entering the tarball — caught pre-upload); public-clone
+  masker v4 revived and proof-fired (liveness 146→0 / path-sweep 9→0); full
+  sdist rehearsal: fresh venv install → CLI trio → 24 bundled tests green.
+- No functional API changes; CLI flags, report schema untouched.
+
+## [0.7.2] - 2026-09-15
+
+Fresh-environment verification and the first sales-grade sample, pre-publication.
+
+- **Packaging fix (fresh-venv smoke-test finding):** `numpy` is now declared as
+  a direct (not transitive) dependency — the torch "Failed to initialize NumPy"
+  first-run warning on new installs is gone (measured: fresh env 5.4GB,
+  refusal-baseline audit **5.1s**, CLI trio smoke clean). Honest
+  "install weight" note added to the README.
+- **Sales sample (`examples/pilot_dossier.py` + `examples/pilot/`):** a full
+  Annex XI dossier + CoP matrix (62% — the two missing rows are deliberate:
+  customer declaration + incident pipeline) + SHA-256 evidence chain sealing
+  the source scorecard's hash, generated from a REAL PUBLISHED scorecard
+  (qwen2.5:3b JBB-40, safety 91.8). The compute field is LABELLED as a
+  6·N·D order-of-magnitude estimate (3.34e23 < 1e25 → below the Art. 3(63)
+  threshold; D=18T verified live from arXiv:2412.15115); every unverifiable
+  field stays a bracketed [pending declaration].
+- No API/schema changes — the sole SemVer reason is the packaging finding.
+
+## [0.7.1] - 2026-09-15 — B1 capability-externality gate + B5 multi-family publications
+
+### Added
+- **B1 `CapabilityGate`**: steering damage to model CAPABILITY is now measured —
+  12 deterministically-verifiable tasks (no LLM judge, no circular evidence;
+  echo-safety test-enforced). pass/fail/inconclusive; **a fail retracts the
+  protection claim from CLI and Annex XI** (an intervention that harms is not
+  an intervention). First live pair: Qwen2.5-0.5B efficacy %0 + capability
+  PASS (%83.3→%83.3).
+- `--request-timeout` (audit; default 300s) — field finding: on single-VRAM
+  machines, cold model load + slow generation blew the 180s budget
+  (phi3:mini/GTX-1070, ~1s/token). Timeouts still raise a clean
+  `EndpointError`; no fake refusals are produced.
+- **B5 multi-family publications** (`examples/audits/` + comparison table):
+  llama3.2:3b (std 77.5 · JBB-40 **91.3**) and phi3:mini (std 95.0 · JBB-10
+  97.0 — n difference flagged in the table) — with qwen2.5:3b JBB-40 91.8,
+  same-depth inter-family consistency was MEASURED; llama std surfaced a
+  cyber %60 REAL weakness finding.
+- **B3 process tool**: `examples/calibration_seed.py` — generates a human
+  second-label B3 worksheet from real (prompt, response) pairs; first live
+  output: llama3.2:3b × 20 pairs (3 refusal / 17 mixed — the hard zone for
+  the fastpath). Raw pairs stay out of the repo (dual-use policy); only the
+  distribution is published.
+### Unchanged
+- Black-box/refusal-baseline channels, API surface, report schema (only the
+  `capability_regression` field was added — old artifacts stay schema-safe).
+
+## [0.7.0] - 2026-09-15 — API-endpoint auditing + real-catalog red-teaming
+
+### Added
+- **Black-box API audit channel** (`dumen audit --endpoint`): audit any
+  Ollama / vLLM / LM Studio / OpenAI-compatible server; deterministic
+  temperature=0; HTTP errors never become FAKE REFUSALS (EndpointError raises).
+- **First local-real-model audit published**: Ollama qwen2.5:3b — standard-suite
+  scorecard (`safety 58.8`, sandbox %95) + 40-task JBB wide audit (`safety
+  91.8`, %0 jailbreak) — `examples/audits/qwen2.5-3b_ollama_*.json`.
+- **Gateway self-red-team comparison** (`GatewaySelfRedTeam`): two-layer
+  (regex ∪ semantic LLM-judge) recall/FPR matrices on the published
+  deepset/prompt-injections corpus; regex patterns hardened with EN+DE
+  families (holdout FPR %0, precision %100); `JudgeEvaluator.classify_injection`.
+- **External attack-catalog bridges**: HarmBenchLoader (400 real behaviors) +
+  AgentHarmLoader (176 agentic tasks) + `--dataset` CLI with automatic schema
+  detection (JBB CSV · HarmBench CSV · AgentHarm JSON · AILuminate JSON/JSONL).
+### Fixed
+- JBB/AILuminate `CATEGORY_MAP` calibrated to real distribution labels
+  (Malware/Hacking→cyber_attack, Disinformation→hallucination, Privacy→pii_leak).
+
+## [0.6.1] - 2026-09-15 — evidence-integrity release
+
+### Fixed (deep-audit findings)
+- Fabricated success numbers purged: "%96.2 Active Protection" → three-state
+  measured efficacy (Not measured ⚪ / %0 🟠 / +%X 🟢) via behavioral
+  `SteeringEfficacyBench` (before/after judge comparison; cosmetic cosine
+  rejected).
+- `--measure-steering` became a real measurement pipeline (mining + live hook +
+  steered generation).
+- vLLM/sub-1ms/Anthropic-native/JBB-live claims → verified text only; SLA claim
+  replaced by a MEASURED latency bench (`test_latency_bench.py`).
+- 3 wrong academic citations corrected (PAIR/TAP; RepE↔StMP; 2606.13720 title);
+  unverifiable quotes softened; EU timeline updated with EC-sourced dates.
+- dossier/serve channels: refusal-baseline stamp + `evidence_channel` + chain
+  head rendered inside Annex XI; context note for Art.14 ❌.
+### Infrastructure
+- CI coverage gate made actually effective (pytest-cov was missing); 3.12 job
+  runs real-model tests; unused dependencies deleted; AILuminate format bridge;
+  threat-model & limitations section (§6.5).
+
+## [0.6.0] - 2026-09-14 — Evidence-gap closure
+- rank-k subspace mining + bootstrap confidence + permutation p; joint-nullspace
+  steering; InspectBridge red-team; evidence-chain reports.
+
+## [0.5.0] - 2026-09-13 — mechanistic-core verification
+- OV-circuit mask, output-filter critical bug fix, unified StTP/StMP pipeline.
+
+## [0.4.0] and earlier — prototype
+- basic mining/hook/report pipeline; test count between 52–173.

dumen-0.7.3/CITATION.cff

@@ -0,0 +1,21 @@
+cff-version: 1.2.0
+message: "If you use Dümen in published research, please cite the software repository."
+title: "Dümen: Open-source EU AI Act audit engine with white-box steering evidence and tamper-evident compliance dossiers"
+authors:
+  - name: "Dümen Contributors"
+repository-code: "https://github.com/goun7/Dumen"
+license: Apache-2.0
+version: 0.7.3
+date-released: 2026-09-15
+keywords:
+  - eu-ai-act
+  - llm-auditing
+  - activation-steering
+  - red-teaming
+  - interpretability
+preferred-citation:
+  type: software
+  title: "Dümen"
+  authors:
+    - name: "Dümen Contributors"
+  url: "https://github.com/goun7/Dumen"

dumen-0.7.3/CODE_OF_CONDUCT.md

@@ -0,0 +1,28 @@
+# Code of Conduct
+
+## Our commitment
+
+Contributors and maintainers of this project pledge to make participation
+harassment-free for everyone, regardless of the usual categories. This is an
+audit tool whose subject matter (AI safety) attracts strong opinions — the
+doctrine applies to conduct as it does to claims: **critique the evidence,
+never the person.**
+
+## Standards
+
+Expected: cite reproducible commands when disagreeing with a finding; assume
+good faith for first-time contributors; keep discussions in issue/PR threads
+rather than personal channels.
+
+Unacceptable: ad hominem attacks, doxxing, spam-driven "safety claims" without
+reproduction steps, and attempts to use this tracker to distribute raw
+harmful payloads (use coordinated disclosure instead — see SECURITY.md).
+
+## Enforcement
+
+Report to the maintainer via GitHub private vulnerability reporting channel or
+a private issue. Remedies scale from edit → warning → temporary → permanent
+exclusion, applied by the maintainer, with reasons logged.
+
+Adapted from the Contributor Covenant 2.1 (https://www.contributor-covenant.org),
+CC BY-SA 4.0.

dumen-0.7.3/CONTRIBUTING.md

@@ -0,0 +1,48 @@
+# Contributing guide
+
+Evidence is mandatory for contributions to Dümen — code is not. The project
+doctrine is: ***no evidence, no claim.*** This applies to contributions too.
+
+## Development environment
+
+```bash
+python -m venv .venv && source .venv/bin/activate
+pip install -e ".[dev]"            # test + lint tooling
+pip install -e ".[model]"          # (opt.) transformers, for real-model integration tests
+python -m pytest tests/ -q         # run the suite
+ruff check dumen/ tests/ examples/ scripts/
+python scripts/surface_parity.py   # README EN↔TR numeric-token parity gate
+```
+
+Python 3.10–3.14 is supported; CI runs three versions (real-model tests
+included on 3.12; CI also runs the lint scope above, the parity gate, and fails under coverage %95).
+
+## Rules
+
+1. **No fake numbers.** An unmeasured metric stays `None`/"Not measured" in
+   the report; a hard-coded success number never reaches production
+   (see `steering_efficacy`).
+2. **No behavior without a test.** Every new production branch is exercised
+   through a real socket/CLI/file path — real mechanisms over mock servers
+   (e.g. stdlib threading HTTP server, see `test_api_runner.py`).
+3. **Citations verified.** arXiv ID + title + year must be confirmed against
+   the primary source; a citation correction is called out separately in the PR.
+4. **External data licenses.** Raw licensed/harmful corpora (deepset CC-BY-NC,
+   AgentHarm "other") **never enter the repo**; only MIT/Apache distributions
+   get committed (JBB MIT ✓). Loaders pin the schema; the data stays with the
+   user.
+5. **Scope honesty.** White-box (activation) and black-box (API) channels are
+   never conflated; efficacy measurement is only possible white-box.
+
+## PR process
+
+- One theme, one commit (prefixes `feat|fix|docs|test|perf|security(scope)`).
+- Gates: full suite green + coverage ≥ %95 + `ruff` clean + surface parity (numbers never drift between README languages).
+- New CLI flag: user-facing text may mix Turkish and English; error messages
+  must be **reproducible** (say what you tried).
+
+## Report quality
+
+Published audits under `examples/audits/` are **transparent evidence**: every
+shipped artifact carries its reproduction command inside `_run.log`. If you
+publish a new audit, add the command and the environment too.

dumen-0.7.3/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Dümen contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.