diff --git a/.aiqt/pin.toml b/.aiqt/pin.toml
index 33fcf17..fa86813 100644
--- a/.aiqt/pin.toml
+++ b/.aiqt/pin.toml
@@ -9,7 +9,7 @@
 [source]
 name = "aiqt-guardrails"
 homepage = "https://aiqt.ai"
-license = "CC-BY-SA-4.0"
+license = "CC-BY-SA-4.0"  # licence of the adopted v1.0.0 source; the pack was later relicensed to Apache-2.0 by the author (jposluns/guardrails LICENSE, verified 2026-09-22), now reflected in NOTICE.md and .claude/CLAUDE.md; this adoption-time field advances on a re-vendor to an Apache-licensed release
 author = "Jeff Posluns"
 vendored-from = "/opt/guardrails/guardrails"   # local pack checkout at adoption time
 adopted = "2026-09-05"
diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md
index 834ef89..d6fac97 100644
--- a/.claude/CLAUDE.md
+++ b/.claude/CLAUDE.md
@@ -52,7 +52,7 @@ this repository's own skill. See
 ## Adopted governance
 
 This repository adopts the **AIQT Guardrails** rule corpus by Jeff Posluns
-(https://aiqt.ai), CC BY-SA 4.0, vendored under `.aiqt/` and auto-loaded as the rule
+(https://aiqt.ai), Apache 2.0, vendored under `.aiqt/` and auto-loaded as the rule
 tree under `rules/aiqt/` and `rules/security/` (107 active rules for this project's
 profile; the full 126-rule corpus is kept as reference under `.aiqt/core/rules/`).
 Provenance and the adopted version are in [`.aiqt/pin.toml`](../.aiqt/pin.toml); the
diff --git a/NOTICE.md b/NOTICE.md
index e306879..4f65a0a 100644
--- a/NOTICE.md
+++ b/NOTICE.md
@@ -23,4 +23,4 @@ Clean Language is developed independently. If you know of another project workin
 
 ## Adopted governance rules
 
-The Claude Code governance in this repository is the AIQT Guardrails rule corpus and hooks, vendored under `.aiqt/`, `.claude/rules/aiqt/`, `.claude/rules/security/`, and `plugin/aiqt-guardrails-hooks/`, adopted from AIQT Guardrails by Jeff Posluns (https://aiqt.ai), licensed under CC BY-SA 4.0. See `.aiqt/pin.toml` for the adopted version and provenance. This supersedes the 3 governance rules previously vendored from `grc_library`.
+The Claude Code governance in this repository is the AIQT Guardrails rule corpus and hooks, vendored under `.aiqt/`, `.claude/rules/aiqt/`, `.claude/rules/security/`, and `plugin/aiqt-guardrails-hooks/`, adopted from AIQT Guardrails by Jeff Posluns (https://aiqt.ai), licensed under the Apache License 2.0. See `.aiqt/pin.toml` for the adopted version and provenance. This supersedes the 3 governance rules previously vendored from `grc_library`.