Update libraries and clarify licensing roadmap

This commit is contained in:
2026-09-26 22:00:43 +00:00
parent 422a688741
commit 5150b5c636
5 changed files with 55 additions and 37 deletions

View File

@@ -19,7 +19,7 @@ failures; explicit zero makes one attempt. `llm.repair_attempts` counts
additional generations for schema-invalid model output. The operation timeout
covers preparation, capacity waiting, retries, generation, and repair. Caller
cancellation or an earlier deadline also applies. See [configuration](../config.md#settings)
for defaults and [PromptKit's consumer contract](https://gitea.maximumdirect.net/eric/promptkit/src/tag/v0.11.0/docs/consumers/pkg-promptkit.md)
for defaults and [PromptKit's consumer contract](https://gitea.maximumdirect.net/eric/promptkit/src/tag/v0.11.1/docs/consumers/pkg-promptkit.md)
for the pinned protocol and retry details.
A model operation that exhausts structural repair, a live-parent local operation

View File

@@ -1,9 +1,9 @@
# Coordinated ConfigKit and PromptKit Adoption
**Last updated:** 2026-09-24
**Last updated:** 2026-09-26
**Status:** Production implementation complete. ConfigKit v0.4.0 and PromptKit
v0.11.0 are adopted; [historical implementation evidence](https://gitea.maximumdirect.net/eric/audita/src/commit/cb405f6/docs/roadmap/implementation.md) records the
**Status:** Production implementation complete. ConfigKit v0.4.1 and PromptKit
v0.11.1 are adopted; [historical implementation evidence](https://gitea.maximumdirect.net/eric/audita/src/commit/cb405f6/docs/roadmap/implementation.md) records the
completed checks. The current `implementation.md` covers span deletion instead.
Release compliance and publication remain separate work.
@@ -23,7 +23,7 @@ Audita's transcript-correction capabilities and domain protections.
The [configuration roadmap](configkit.md) owns configuration and inspection policy.
The [boundary findings](library-boundary-findings.md) own the selected defaults,
full migration inventory, failure mapping, and prototype evidence. The selected
production versions are ConfigKit v0.4.0 and PromptKit v0.11.0, with Go 1.25.5 as
production versions are ConfigKit v0.4.1 and PromptKit v0.11.1, with Go 1.25.5 as
the minimum. Use published modules, never sibling checkouts or local replacements.
The existing YAML dependency remains while glossary parsing needs it.

View File

@@ -7,10 +7,9 @@ roadmap defines the target and scope, not a staged implementation plan.
## Purpose
Align Audita's licensing documentation with the updated upstream policy set in
`../policy`, using its Open Source Licensing and Attribution Policy (base version
1.2) and the related documentation and release guidance. Adopt the licensing
changes deliberately while retaining Audita's existing policy adaptations.
Establish self-contained licensing and attribution documentation for Audita,
using the House Format defined below. Keep licensing, documentation ownership,
and release guidance consistent while retaining Audita's existing policies.
Audita's selected grant is already GPL-3.0-or-later. This work documents that
choice and the applicable upstream attribution; it does not reconsider the
@@ -23,7 +22,7 @@ As of commit `982b595`:
- [COPYRIGHT](../../COPYRIGHT) contains the project identity, copyright,
GPL-3.0-or-later SPDX expression and grant, warranty disclaimer, and third-party
statement. [LICENSE](../../LICENSE) contains the full GPLv3 text. These already
follow the substantive upstream convention and need no substantive revision.
follow the selected project licensing convention and need no substantive revision.
- There is no `docs/policy/oss.md`, canonical `docs/oss/attribution.md`, or local
dependency license-text collection.
- The [documentation policy](../policy/documentation.md) lacks ownership and
@@ -46,22 +45,42 @@ and arm64 are the supported production targets; macOS arm64 remains best-effort
for local development. Successful release completion remains the successful
push of the release source and tag, without waiting for CI asset publication.
## Reviewed Dependency Updates
ConfigKit v0.4.1 and PromptKit v0.11.1 are now selected. Both make their
LGPL-3.0-or-later grant explicit in `COPYRIGHT` and provide the LGPLv3 and
incorporated GPLv3 texts together in `LICENSE`. Neither changes library code.
PromptKit also selects MIT-licensed OpenRouter and Rakestrawhome catalogs at
v2.20260926.0; those catalog updates leave Go code and profile data unchanged.
Use the selected public source revisions as the starting points for their
attribution entries:
- ConfigKit v0.4.1: `0adb94f59e44827908eff401d4381a398fe17107`.
- PromptKit v0.11.1: `15e40679546f2e21b6f51cc84b6f0a087a8486db`.
- OpenRouter catalog v2.20260926.0: `4f731d217e0bc39151c010f50fb5912706e7b6b3`.
- Rakestrawhome catalog v2.20260926.0: `48918a3ad39fd99843cda94a86133b1b3881d596`.
Inspect the selected components directly. Dependency attribution documents can
help locate relevant notices, but should not be copied wholesale: Audita's
inventory reflects material actually incorporated into or distributed with Audita.
## Targeted End State
### Canonical Policy and Ownership
Adopt `docs/policy/oss.md` from upstream base version 1.2, tailored to Audita's
selected grant and distribution. Remove template adoption instructions and
replace or remove template-only example and reference links. Retain the actual
base version and record the adoption date.
Create `docs/policy/oss.md` for Audita's selected grant and distribution, using
the requirements in this roadmap. Make it self-contained, with references to
Audita's canonical documents and public component sources. Record its adoption
date and appropriate policy version metadata.
The policy establishes the upstream House Format, maintenance responsibilities,
The policy establishes the House Format, maintenance responsibilities,
and treatment of concrete exceptions. It identifies the settled project grant
and routes readers to the canonical documents for source hosting and release
publication mechanics. It does not infer separate licenses for Audita packages.
Merge the licensing-related ownership and boundary guidance from upstream
Documentation Policy 1.5 into the local documentation policy:
Add the following licensing ownership and boundary guidance to the local
documentation policy:
| Document | Owned content |
| --- | --- |
@@ -75,9 +94,9 @@ Documentation Policy 1.5 into the local documentation policy:
The contributor guide directs licensing, dependency, copied-code or asset,
attribution, and release-document changes to the appropriate policy and owner.
Preserve existing documentation ownership, agent commit and discovery rules,
and Audita's retirement of standalone troubleshooting documentation. Record
upstream base versions truthfully alongside repository adaptations; unrelated
upstream changes are outside this adoption scope.
and Audita's retirement of standalone troubleshooting documentation. Keep
policy version metadata accurate; unrelated policy changes are outside this
adoption scope.
### Relevant Attribution and License Texts
@@ -107,7 +126,7 @@ relevant entry, including GPLv3 where an LGPLv3 entry requires it. Inspect upstr
file contents rather than assuming a file named `LICENSE` contains only standard
wording.
Apply the upstream house interpretation accepting direct, commit-specific links
Apply the selected house interpretation accepting direct, commit-specific links
for project-specific license and attribution notice reproduction. Do not add a
blanket local-copy requirement or repeated approval solely because upstream terms
use reproduction, inclusion, or copy language. Preserve required notices already
@@ -130,9 +149,8 @@ Audita is licensed under the [GPL v3.0 or later](COPYRIGHT).
[Open Source attribution notices](docs/oss/attribution.md) are available.
```
Merge the licensing-related guidance from upstream Release Policy 1.2 into
Audita's release policy. Each new checked-in release note and its hosted download
page ends with links visibly labeled `COPYRIGHT | LICENSE | ATTRIBUTION`.
Add the following licensing navigation requirements to Audita's release policy.
Each new checked-in release note and its hosted download page ends with links visibly labeled `COPYRIGHT | LICENSE | ATTRIBUTION`.
Use absolute Gitea URLs to the three canonical files at the release's immutable
tag or corresponding immutable source commit. This differs from dependency
attribution links, which identify the exact imported upstream commit.
@@ -184,7 +202,7 @@ Detailed implementation steps can be planned separately.
## Acceptance Criteria
- Audita has an adopted OSS policy with working repository references, accurate
base-version metadata, and no leftover template setup instructions.
version metadata, and self-contained repository-specific guidance.
- Documentation ownership and contributor navigation identify the canonical
licensing documents without duplicating their substantive content.
- Relevant incorporated and distributed components have evidence-based House

8
go.mod
View File

@@ -3,14 +3,14 @@ module gitea.maximumdirect.net/eric/audita
go 1.25.5
require (
gitea.maximumdirect.net/eric/ConfigKit v0.4.0
gitea.maximumdirect.net/eric/promptkit v0.11.0
gitea.maximumdirect.net/eric/ConfigKit v0.4.1
gitea.maximumdirect.net/eric/promptkit v0.11.1
gopkg.in/yaml.v3 v3.0.1
)
require (
gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260922.1 // indirect
gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260922.0 // indirect
gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260926.0 // indirect
gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260926.0 // indirect
github.com/kr/pretty v0.3.1 // indirect
github.com/rogpeppe/go-internal v1.14.1 // indirect
github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect

16
go.sum
View File

@@ -1,11 +1,11 @@
gitea.maximumdirect.net/eric/ConfigKit v0.4.0 h1:fo+vKff3zTGeWqJIA38NtT84b6OUP//9ZmBH3lFuKgk=
gitea.maximumdirect.net/eric/ConfigKit v0.4.0/go.mod h1:tYWpsrbLyu05r8+1MapWp5fN6ZrX9I8hU2xEPedYmYk=
gitea.maximumdirect.net/eric/promptkit v0.11.0 h1:x7JguOUiInPVXK0GEitjyoRFqqvcuSTjYUvqJ+whtik=
gitea.maximumdirect.net/eric/promptkit v0.11.0/go.mod h1:0zEBVlJJC+ldDdXazAgybYBXNSe74vwFx5dyOuSos/w=
gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260922.1 h1:S2/Q/JDE+m8Ca3pDhAjVbfYrdlEhs9blj0STgNopHo0=
gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260922.1/go.mod h1:a3VBbh9oaGXD6ruxhtwHj+AWW6DY/SSyby1QtMmYSUo=
gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260922.0 h1:Y0EXc3eh12eKW2NrOviVqdk3oBo6UUjopt1YAa1B3Oc=
gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260922.0/go.mod h1:mtgD1E0SGm0e/I8Ffhz+AYX7GN7RKUWJXehNFIKHs4Y=
gitea.maximumdirect.net/eric/ConfigKit v0.4.1 h1:Rl2eaP5NgDgUQt8QZe0DYxF8GFc/6cnkUTLRSf5dcCU=
gitea.maximumdirect.net/eric/ConfigKit v0.4.1/go.mod h1:tYWpsrbLyu05r8+1MapWp5fN6ZrX9I8hU2xEPedYmYk=
gitea.maximumdirect.net/eric/promptkit v0.11.1 h1:fSDLdrijUi0ya4P8N4Z1g31p9LPZWVrLHVFogahUkqQ=
gitea.maximumdirect.net/eric/promptkit v0.11.1/go.mod h1:onm/FBPUKQ8/NSPwTEk26Ut+dVX2iXcq8vEseB+g/0E=
gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260926.0 h1:wdab+R+lgMZxzYwhbAuCrW7zdSQ1cW9ovBR6UzLmZR4=
gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260926.0/go.mod h1:a3VBbh9oaGXD6ruxhtwHj+AWW6DY/SSyby1QtMmYSUo=
gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260926.0 h1:baCCIB6Ee5t0S4Zc++NTBIPcJEv5UPS6DlSrpZfykwg=
gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260926.0/go.mod h1:mtgD1E0SGm0e/I8Ffhz+AYX7GN7RKUWJXehNFIKHs4Y=
github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
github.com/dlclark/regexp2 v1.11.0 h1:G/nrcoOa7ZXlpoa/91N3X7mM3r8eIlMBBJZvsz/mxKI=
github.com/dlclark/regexp2 v1.11.0/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8=