From 82dba59aa5541da5da4f8c94cf7c85116d16d79e Mon Sep 17 00:00:00 2001 From: mdheller Date: Mon, 3 Aug 2026 00:40:41 -0400 Subject: [PATCH 1/2] SCOPE-D: dual-copyright (MIT), drop upstream remote + links; keep attribution MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit SCOPE-D is a substantial fork/continuation of the original SCOPE project (Tayvion Payton, MIT; ~32% of surviving lines). MIT-compliant resolution: - LICENSE: dual copyright — Tayvion Payton (original) + SocioProphet (new work) - README: short link-free attribution - removed the 'upstream' git remote to tayontech/SCOPE (repo config) - ci.yml --source-ref -> SocioProphet/SCOPE-D - references/*: de-identified the tayontech source link (name/URL) while keeping the documented lessons; copyright attribution lives in LICENSE where MIT requires it. No links to the source repo remain; original author credited per MIT. --- .github/workflows/ci.yml | 2 +- LICENSE | 1 + README.md | 6 ++---- references/scope-d-reference-catalog.json | 9 ++++----- references/work-orders.md | 5 ++--- 5 files changed, 10 insertions(+), 13 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ca832f85..219f7b74 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -45,7 +45,7 @@ jobs: run: | python graph-robustness/codebase/build_codebase_graph.py . \ --out /tmp/scope-d-graph \ - --source-ref "https://github.com/tayontech/SCOPE" + --source-ref "https://github.com/SocioProphet/SCOPE-D" - name: Export to HellGraph + MeshRush run: | diff --git a/LICENSE b/LICENSE index bb8dd4d0..f47cbf5e 100644 --- a/LICENSE +++ b/LICENSE @@ -1,6 +1,7 @@ MIT License Copyright (c) 2026 Tayvion Payton +Copyright (c) 2026 SocioProphet Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal diff --git a/README.md b/README.md index 0231fd07..1315dd15 100644 --- a/README.md +++ b/README.md @@ -173,8 +173,6 @@ SCOPE-D 5. Add issue/project tracking once GitHub Issues or a replacement board is enabled. 6. Add PolicyFabric admission integration only after collector/readiness doctrine is complete. -## Upstream attribution +## Attribution -SCOPE-D is derived from the public SCOPE project created by Tayvion Payton. See the inherited license and upstream project history for original authorship and licensing context. - -Original upstream: https://github.com/tayontech/SCOPE +SCOPE-D builds on the original SCOPE project by Tayvion Payton, used under the MIT License. Substantial subsequent development © SocioProphet. diff --git a/references/scope-d-reference-catalog.json b/references/scope-d-reference-catalog.json index fa574ceb..8fbf70aa 100644 --- a/references/scope-d-reference-catalog.json +++ b/references/scope-d-reference-catalog.json @@ -4,9 +4,8 @@ "generatedFor": "SCOPE-D", "references": [ { - "id": "ref-upstream-scope", - "name": "tayontech/SCOPE", - "url": "https://github.com/tayontech/SCOPE", + "id": "ref-agentic-purple-team", + "name": "Agentic cloud purple-team control loop (external pattern reference)", "category": "agentic_cloud_purple_team", "adoptionMode": "pattern_extract", "safetyClass": "safe_defensive", @@ -17,11 +16,11 @@ "Read-only default posture and artifact validation should be mandatory." ], "doNotImport": [ - "Do not preserve upstream-only branding as the SCOPE-D product surface.", + "Do not preserve external-source branding as the SCOPE-D product surface.", "Do not rely on prompt-only control boundaries." ], "nextActions": [ - "Map upstream audit/defend/hunt outputs into SCOPE-D ControlLoopRun and EvidenceEnvelope contracts.", + "Map audit/defend/hunt outputs into SCOPE-D ControlLoopRun and EvidenceEnvelope contracts.", "Replace AWS-specific assumptions with provider-neutral target surfaces." ] }, diff --git a/references/work-orders.md b/references/work-orders.md index 09ab9628..774eeeed 100644 --- a/references/work-orders.md +++ b/references/work-orders.md @@ -9,10 +9,9 @@ Generated deterministically from `references/scope-d-reference-catalog.json`. Do - No payloads, C2 code, credential theft behavior, destructive automation, or evasion logic may be imported. - Every implementation task must preserve SCOPE-D safety boundaries, synthetic-first validation, and receipt verification. -## WO-001: tayontech/SCOPE +## WO-001: Agentic cloud purple-team control loop (external pattern reference) -- Reference ID: `ref-upstream-scope` -- URL: https://github.com/tayontech/SCOPE +- Reference ID: `ref-agentic-purple-team` - Category: `agentic_cloud_purple_team` - Adoption mode: `pattern_extract` - Safety class: `safe_defensive` From 9bcf2ed44353553f534e6cc96f4d4ca5eb92db72 Mon Sep 17 00:00:00 2001 From: mdheller Date: Mon, 3 Aug 2026 02:05:34 -0400 Subject: [PATCH 2/2] reference-framework schema: make per-reference url optional De-identifying the tayontech source entry removed its url, but the schema required url on every reference. A de-identified / internal reference legitimately has no public url, so url becomes optional (kept in properties, dropped from required). Fixes 'Validate SCOPE-D contracts' / 'test' on this branch. --- config/schemas/reference-framework.schema.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/schemas/reference-framework.schema.json b/config/schemas/reference-framework.schema.json index 2ad1a0b0..d1020294 100644 --- a/config/schemas/reference-framework.schema.json +++ b/config/schemas/reference-framework.schema.json @@ -15,7 +15,7 @@ "items": { "type": "object", "additionalProperties": false, - "required": ["id", "name", "url", "category", "adoptionMode", "safetyClass", "capabilityTargets", "doNotImport", "nextActions"], + "required": ["id", "name", "category", "adoptionMode", "safetyClass", "capabilityTargets", "doNotImport", "nextActions"], "properties": { "id": { "type": "string", "pattern": "^ref-[a-z0-9][a-z0-9._:-]*$" }, "name": { "type": "string", "minLength": 1 },