Update libraries and clarify licensing roadmap

This commit is contained in:
2026-09-26 22:00:43 +00:00
parent 422a688741
commit 5150b5c636
5 changed files with 55 additions and 37 deletions

View File

@@ -19,7 +19,7 @@ failures; explicit zero makes one attempt. `llm.repair_attempts` counts
additional generations for schema-invalid model output. The operation timeout additional generations for schema-invalid model output. The operation timeout
covers preparation, capacity waiting, retries, generation, and repair. Caller covers preparation, capacity waiting, retries, generation, and repair. Caller
cancellation or an earlier deadline also applies. See [configuration](../config.md#settings) cancellation or an earlier deadline also applies. See [configuration](../config.md#settings)
for defaults and [PromptKit's consumer contract](https://gitea.maximumdirect.net/eric/promptkit/src/tag/v0.11.0/docs/consumers/pkg-promptkit.md) for defaults and [PromptKit's consumer contract](https://gitea.maximumdirect.net/eric/promptkit/src/tag/v0.11.1/docs/consumers/pkg-promptkit.md)
for the pinned protocol and retry details. for the pinned protocol and retry details.
A model operation that exhausts structural repair, a live-parent local operation A model operation that exhausts structural repair, a live-parent local operation

View File

@@ -1,9 +1,9 @@
# Coordinated ConfigKit and PromptKit Adoption # Coordinated ConfigKit and PromptKit Adoption
**Last updated:** 2026-09-24 **Last updated:** 2026-09-26
**Status:** Production implementation complete. ConfigKit v0.4.0 and PromptKit **Status:** Production implementation complete. ConfigKit v0.4.1 and PromptKit
v0.11.0 are adopted; [historical implementation evidence](https://gitea.maximumdirect.net/eric/audita/src/commit/cb405f6/docs/roadmap/implementation.md) records the v0.11.1 are adopted; [historical implementation evidence](https://gitea.maximumdirect.net/eric/audita/src/commit/cb405f6/docs/roadmap/implementation.md) records the
completed checks. The current `implementation.md` covers span deletion instead. completed checks. The current `implementation.md` covers span deletion instead.
Release compliance and publication remain separate work. Release compliance and publication remain separate work.
@@ -23,7 +23,7 @@ Audita's transcript-correction capabilities and domain protections.
The [configuration roadmap](configkit.md) owns configuration and inspection policy. The [configuration roadmap](configkit.md) owns configuration and inspection policy.
The [boundary findings](library-boundary-findings.md) own the selected defaults, The [boundary findings](library-boundary-findings.md) own the selected defaults,
full migration inventory, failure mapping, and prototype evidence. The selected full migration inventory, failure mapping, and prototype evidence. The selected
production versions are ConfigKit v0.4.0 and PromptKit v0.11.0, with Go 1.25.5 as production versions are ConfigKit v0.4.1 and PromptKit v0.11.1, with Go 1.25.5 as
the minimum. Use published modules, never sibling checkouts or local replacements. the minimum. Use published modules, never sibling checkouts or local replacements.
The existing YAML dependency remains while glossary parsing needs it. The existing YAML dependency remains while glossary parsing needs it.

View File

@@ -7,10 +7,9 @@ roadmap defines the target and scope, not a staged implementation plan.
## Purpose ## Purpose
Align Audita's licensing documentation with the updated upstream policy set in Establish self-contained licensing and attribution documentation for Audita,
`../policy`, using its Open Source Licensing and Attribution Policy (base version using the House Format defined below. Keep licensing, documentation ownership,
1.2) and the related documentation and release guidance. Adopt the licensing and release guidance consistent while retaining Audita's existing policies.
changes deliberately while retaining Audita's existing policy adaptations.
Audita's selected grant is already GPL-3.0-or-later. This work documents that Audita's selected grant is already GPL-3.0-or-later. This work documents that
choice and the applicable upstream attribution; it does not reconsider the choice and the applicable upstream attribution; it does not reconsider the
@@ -23,7 +22,7 @@ As of commit `982b595`:
- [COPYRIGHT](../../COPYRIGHT) contains the project identity, copyright, - [COPYRIGHT](../../COPYRIGHT) contains the project identity, copyright,
GPL-3.0-or-later SPDX expression and grant, warranty disclaimer, and third-party GPL-3.0-or-later SPDX expression and grant, warranty disclaimer, and third-party
statement. [LICENSE](../../LICENSE) contains the full GPLv3 text. These already statement. [LICENSE](../../LICENSE) contains the full GPLv3 text. These already
follow the substantive upstream convention and need no substantive revision. follow the selected project licensing convention and need no substantive revision.
- There is no `docs/policy/oss.md`, canonical `docs/oss/attribution.md`, or local - There is no `docs/policy/oss.md`, canonical `docs/oss/attribution.md`, or local
dependency license-text collection. dependency license-text collection.
- The [documentation policy](../policy/documentation.md) lacks ownership and - The [documentation policy](../policy/documentation.md) lacks ownership and
@@ -46,22 +45,42 @@ and arm64 are the supported production targets; macOS arm64 remains best-effort
for local development. Successful release completion remains the successful for local development. Successful release completion remains the successful
push of the release source and tag, without waiting for CI asset publication. push of the release source and tag, without waiting for CI asset publication.
## Reviewed Dependency Updates
ConfigKit v0.4.1 and PromptKit v0.11.1 are now selected. Both make their
LGPL-3.0-or-later grant explicit in `COPYRIGHT` and provide the LGPLv3 and
incorporated GPLv3 texts together in `LICENSE`. Neither changes library code.
PromptKit also selects MIT-licensed OpenRouter and Rakestrawhome catalogs at
v2.20260926.0; those catalog updates leave Go code and profile data unchanged.
Use the selected public source revisions as the starting points for their
attribution entries:
- ConfigKit v0.4.1: `0adb94f59e44827908eff401d4381a398fe17107`.
- PromptKit v0.11.1: `15e40679546f2e21b6f51cc84b6f0a087a8486db`.
- OpenRouter catalog v2.20260926.0: `4f731d217e0bc39151c010f50fb5912706e7b6b3`.
- Rakestrawhome catalog v2.20260926.0: `48918a3ad39fd99843cda94a86133b1b3881d596`.
Inspect the selected components directly. Dependency attribution documents can
help locate relevant notices, but should not be copied wholesale: Audita's
inventory reflects material actually incorporated into or distributed with Audita.
## Targeted End State ## Targeted End State
### Canonical Policy and Ownership ### Canonical Policy and Ownership
Adopt `docs/policy/oss.md` from upstream base version 1.2, tailored to Audita's Create `docs/policy/oss.md` for Audita's selected grant and distribution, using
selected grant and distribution. Remove template adoption instructions and the requirements in this roadmap. Make it self-contained, with references to
replace or remove template-only example and reference links. Retain the actual Audita's canonical documents and public component sources. Record its adoption
base version and record the adoption date. date and appropriate policy version metadata.
The policy establishes the upstream House Format, maintenance responsibilities, The policy establishes the House Format, maintenance responsibilities,
and treatment of concrete exceptions. It identifies the settled project grant and treatment of concrete exceptions. It identifies the settled project grant
and routes readers to the canonical documents for source hosting and release and routes readers to the canonical documents for source hosting and release
publication mechanics. It does not infer separate licenses for Audita packages. publication mechanics. It does not infer separate licenses for Audita packages.
Merge the licensing-related ownership and boundary guidance from upstream Add the following licensing ownership and boundary guidance to the local
Documentation Policy 1.5 into the local documentation policy: documentation policy:
| Document | Owned content | | Document | Owned content |
| --- | --- | | --- | --- |
@@ -75,9 +94,9 @@ Documentation Policy 1.5 into the local documentation policy:
The contributor guide directs licensing, dependency, copied-code or asset, The contributor guide directs licensing, dependency, copied-code or asset,
attribution, and release-document changes to the appropriate policy and owner. attribution, and release-document changes to the appropriate policy and owner.
Preserve existing documentation ownership, agent commit and discovery rules, Preserve existing documentation ownership, agent commit and discovery rules,
and Audita's retirement of standalone troubleshooting documentation. Record and Audita's retirement of standalone troubleshooting documentation. Keep
upstream base versions truthfully alongside repository adaptations; unrelated policy version metadata accurate; unrelated policy changes are outside this
upstream changes are outside this adoption scope. adoption scope.
### Relevant Attribution and License Texts ### Relevant Attribution and License Texts
@@ -107,7 +126,7 @@ relevant entry, including GPLv3 where an LGPLv3 entry requires it. Inspect upstr
file contents rather than assuming a file named `LICENSE` contains only standard file contents rather than assuming a file named `LICENSE` contains only standard
wording. wording.
Apply the upstream house interpretation accepting direct, commit-specific links Apply the selected house interpretation accepting direct, commit-specific links
for project-specific license and attribution notice reproduction. Do not add a for project-specific license and attribution notice reproduction. Do not add a
blanket local-copy requirement or repeated approval solely because upstream terms blanket local-copy requirement or repeated approval solely because upstream terms
use reproduction, inclusion, or copy language. Preserve required notices already use reproduction, inclusion, or copy language. Preserve required notices already
@@ -130,9 +149,8 @@ Audita is licensed under the [GPL v3.0 or later](COPYRIGHT).
[Open Source attribution notices](docs/oss/attribution.md) are available. [Open Source attribution notices](docs/oss/attribution.md) are available.
``` ```
Merge the licensing-related guidance from upstream Release Policy 1.2 into Add the following licensing navigation requirements to Audita's release policy.
Audita's release policy. Each new checked-in release note and its hosted download Each new checked-in release note and its hosted download page ends with links visibly labeled `COPYRIGHT | LICENSE | ATTRIBUTION`.
page ends with links visibly labeled `COPYRIGHT | LICENSE | ATTRIBUTION`.
Use absolute Gitea URLs to the three canonical files at the release's immutable Use absolute Gitea URLs to the three canonical files at the release's immutable
tag or corresponding immutable source commit. This differs from dependency tag or corresponding immutable source commit. This differs from dependency
attribution links, which identify the exact imported upstream commit. attribution links, which identify the exact imported upstream commit.
@@ -184,7 +202,7 @@ Detailed implementation steps can be planned separately.
## Acceptance Criteria ## Acceptance Criteria
- Audita has an adopted OSS policy with working repository references, accurate - Audita has an adopted OSS policy with working repository references, accurate
base-version metadata, and no leftover template setup instructions. version metadata, and self-contained repository-specific guidance.
- Documentation ownership and contributor navigation identify the canonical - Documentation ownership and contributor navigation identify the canonical
licensing documents without duplicating their substantive content. licensing documents without duplicating their substantive content.
- Relevant incorporated and distributed components have evidence-based House - Relevant incorporated and distributed components have evidence-based House

8
go.mod
View File

@@ -3,14 +3,14 @@ module gitea.maximumdirect.net/eric/audita
go 1.25.5 go 1.25.5
require ( require (
gitea.maximumdirect.net/eric/ConfigKit v0.4.0 gitea.maximumdirect.net/eric/ConfigKit v0.4.1
gitea.maximumdirect.net/eric/promptkit v0.11.0 gitea.maximumdirect.net/eric/promptkit v0.11.1
gopkg.in/yaml.v3 v3.0.1 gopkg.in/yaml.v3 v3.0.1
) )
require ( require (
gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260922.1 // indirect gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260926.0 // indirect
gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260922.0 // indirect gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260926.0 // indirect
github.com/kr/pretty v0.3.1 // indirect github.com/kr/pretty v0.3.1 // indirect
github.com/rogpeppe/go-internal v1.14.1 // indirect github.com/rogpeppe/go-internal v1.14.1 // indirect
github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect

16
go.sum
View File

@@ -1,11 +1,11 @@
gitea.maximumdirect.net/eric/ConfigKit v0.4.0 h1:fo+vKff3zTGeWqJIA38NtT84b6OUP//9ZmBH3lFuKgk= gitea.maximumdirect.net/eric/ConfigKit v0.4.1 h1:Rl2eaP5NgDgUQt8QZe0DYxF8GFc/6cnkUTLRSf5dcCU=
gitea.maximumdirect.net/eric/ConfigKit v0.4.0/go.mod h1:tYWpsrbLyu05r8+1MapWp5fN6ZrX9I8hU2xEPedYmYk= gitea.maximumdirect.net/eric/ConfigKit v0.4.1/go.mod h1:tYWpsrbLyu05r8+1MapWp5fN6ZrX9I8hU2xEPedYmYk=
gitea.maximumdirect.net/eric/promptkit v0.11.0 h1:x7JguOUiInPVXK0GEitjyoRFqqvcuSTjYUvqJ+whtik= gitea.maximumdirect.net/eric/promptkit v0.11.1 h1:fSDLdrijUi0ya4P8N4Z1g31p9LPZWVrLHVFogahUkqQ=
gitea.maximumdirect.net/eric/promptkit v0.11.0/go.mod h1:0zEBVlJJC+ldDdXazAgybYBXNSe74vwFx5dyOuSos/w= gitea.maximumdirect.net/eric/promptkit v0.11.1/go.mod h1:onm/FBPUKQ8/NSPwTEk26Ut+dVX2iXcq8vEseB+g/0E=
gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260922.1 h1:S2/Q/JDE+m8Ca3pDhAjVbfYrdlEhs9blj0STgNopHo0= gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260926.0 h1:wdab+R+lgMZxzYwhbAuCrW7zdSQ1cW9ovBR6UzLmZR4=
gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260922.1/go.mod h1:a3VBbh9oaGXD6ruxhtwHj+AWW6DY/SSyby1QtMmYSUo= gitea.maximumdirect.net/eric/promptkit-backend-openrouter/v2 v2.20260926.0/go.mod h1:a3VBbh9oaGXD6ruxhtwHj+AWW6DY/SSyby1QtMmYSUo=
gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260922.0 h1:Y0EXc3eh12eKW2NrOviVqdk3oBo6UUjopt1YAa1B3Oc= gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260926.0 h1:baCCIB6Ee5t0S4Zc++NTBIPcJEv5UPS6DlSrpZfykwg=
gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260922.0/go.mod h1:mtgD1E0SGm0e/I8Ffhz+AYX7GN7RKUWJXehNFIKHs4Y= gitea.maximumdirect.net/eric/promptkit-backend-rakestrawhome/v2 v2.20260926.0/go.mod h1:mtgD1E0SGm0e/I8Ffhz+AYX7GN7RKUWJXehNFIKHs4Y=
github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E= github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
github.com/dlclark/regexp2 v1.11.0 h1:G/nrcoOa7ZXlpoa/91N3X7mM3r8eIlMBBJZvsz/mxKI= github.com/dlclark/regexp2 v1.11.0 h1:G/nrcoOa7ZXlpoa/91N3X7mM3r8eIlMBBJZvsz/mxKI=
github.com/dlclark/regexp2 v1.11.0/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8= github.com/dlclark/regexp2 v1.11.0/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8=