From 022d6498e292e83bec5fef6b497e00ee90fa627b Mon Sep 17 00:00:00 2001 From: Jeff Posluns Date: Tue, 22 Sep 2026 21:22:09 -0400 Subject: [PATCH 1/2] Re-reference the vendored AIQT Guardrails licence as Apache 2.0 (item 44) guardrails relicensed AIQT Guardrails from CC BY-SA 4.0 to the Apache License 2.0 (verified: jposluns/guardrails LICENSE is Apache 2.0). Update the three references to the vendored AIQT corpus's licence accordingly: NOTICE.md (Adopted governance rules section), .claude/CLAUDE.md (Adopted governance section), and .aiqt/pin.toml (the [source] license field, with a comment recording the relicense). Scoped strictly to the AIQT attribution; the repository's own Clean Language material stays CC BY-SA 4.0 (README, NOTICE Clean Language section, all site pages, SKILL.md, the JSON-LD). No OPF licence reference exists in the repository. --- .aiqt/pin.toml | 2 +- .claude/CLAUDE.md | 2 +- NOTICE.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.aiqt/pin.toml b/.aiqt/pin.toml index 33fcf175..473f89a1 100644 --- a/.aiqt/pin.toml +++ b/.aiqt/pin.toml @@ -9,7 +9,7 @@ [source] name = "aiqt-guardrails" homepage = "https://aiqt.ai" -license = "CC-BY-SA-4.0" +license = "Apache-2.0" # relicensed from CC-BY-SA-4.0 by the pack author; see jposluns/guardrails LICENSE (verified 2026-09-22) author = "Jeff Posluns" vendored-from = "/opt/guardrails/guardrails" # local pack checkout at adoption time adopted = "2026-09-05" diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md index 834ef89a..d6fac97e 100644 --- a/.claude/CLAUDE.md +++ b/.claude/CLAUDE.md @@ -52,7 +52,7 @@ this repository's own skill. See ## Adopted governance This repository adopts the **AIQT Guardrails** rule corpus by Jeff Posluns -(https://aiqt.ai), CC BY-SA 4.0, vendored under `.aiqt/` and auto-loaded as the rule +(https://aiqt.ai), Apache 2.0, vendored under `.aiqt/` and auto-loaded as the rule tree under `rules/aiqt/` and `rules/security/` (107 active rules for this project's profile; the full 126-rule corpus is kept as reference under `.aiqt/core/rules/`). Provenance and the adopted version are in [`.aiqt/pin.toml`](../.aiqt/pin.toml); the diff --git a/NOTICE.md b/NOTICE.md index e3068799..4f65a0a9 100644 --- a/NOTICE.md +++ b/NOTICE.md @@ -23,4 +23,4 @@ Clean Language is developed independently. If you know of another project workin ## Adopted governance rules -The Claude Code governance in this repository is the AIQT Guardrails rule corpus and hooks, vendored under `.aiqt/`, `.claude/rules/aiqt/`, `.claude/rules/security/`, and `plugin/aiqt-guardrails-hooks/`, adopted from AIQT Guardrails by Jeff Posluns (https://aiqt.ai), licensed under CC BY-SA 4.0. See `.aiqt/pin.toml` for the adopted version and provenance. This supersedes the 3 governance rules previously vendored from `grc_library`. +The Claude Code governance in this repository is the AIQT Guardrails rule corpus and hooks, vendored under `.aiqt/`, `.claude/rules/aiqt/`, `.claude/rules/security/`, and `plugin/aiqt-guardrails-hooks/`, adopted from AIQT Guardrails by Jeff Posluns (https://aiqt.ai), licensed under the Apache License 2.0. See `.aiqt/pin.toml` for the adopted version and provenance. This supersedes the 3 governance rules previously vendored from `grc_library`. From 4beeb749f15ca2f2238032d983fdf9a4512d70b4 Mon Sep 17 00:00:00 2001 From: Jeff Posluns Date: Tue, 22 Sep 2026 21:31:32 -0400 Subject: [PATCH 2/2] Keep the pin's adoption-time licence and note the relicense forward (item 44, QA round 1) Dual-family QA (gemini) raised a provenance HIGH: .aiqt/pin.toml's [source] block is bound to adopted = 2026-09-05 and records what was vendored (the v1.0.0 pack, CC BY-SA 4.0), so overwriting its structured license field to Apache-2.0 misrepresented the adoption-time state. Revert the field to CC-BY-SA-4.0 with a forward-note that the pack was later relicensed to Apache-2.0 (jposluns/guardrails LICENSE, verified 2026-09-22), which the field advances to on a re-vendor. The user-facing licence statements in NOTICE.md and .claude/CLAUDE.md correctly state the current Apache 2.0 licence and are unchanged by this fix. --- .aiqt/pin.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.aiqt/pin.toml b/.aiqt/pin.toml index 473f89a1..fa86813b 100644 --- a/.aiqt/pin.toml +++ b/.aiqt/pin.toml @@ -9,7 +9,7 @@ [source] name = "aiqt-guardrails" homepage = "https://aiqt.ai" -license = "Apache-2.0" # relicensed from CC-BY-SA-4.0 by the pack author; see jposluns/guardrails LICENSE (verified 2026-09-22) +license = "CC-BY-SA-4.0" # licence of the adopted v1.0.0 source; the pack was later relicensed to Apache-2.0 by the author (jposluns/guardrails LICENSE, verified 2026-09-22), now reflected in NOTICE.md and .claude/CLAUDE.md; this adoption-time field advances on a re-vendor to an Apache-licensed release author = "Jeff Posluns" vendored-from = "/opt/guardrails/guardrails" # local pack checkout at adoption time adopted = "2026-09-05"