Document production components and license notices

This commit is contained in:
2026-09-28 01:14:23 +00:00
parent edbbf3d5ea
commit 88470b7b97
12 changed files with 1356 additions and 1 deletions

View File

@@ -2,7 +2,7 @@
**Last updated:** 2026-09-28
**Status:** In progress; Stages 1–2 complete.
**Status:** In progress; Stages 1–3 complete.
**Audience:** gpt-5.6-terra coding agent.
**Audita planning baseline:** `91d9be68a7bb3a102900253fdfd8438f0a43f666`.
**Selected upstream revision:** `d84a38ebab26f048cafbe59a2246700c35d29843`.
@@ -172,6 +172,14 @@ completed by the following stages; do not create scaffolding for it.
## Stage 3 — Complete Component Attribution and README Navigation
**Completed:** 2026-09-28. Both CGO-disabled Linux target dependency lists
selected the same eight production modules. Inspected their selected source
notices and copied assets, excluded test-only dependencies, and resolved the
Go 1.25.5 source tag and its four incorporated vendored modules. Added 14
House Format entries including policy provenance, complete applicable license
texts, and the README footer. Checked 33 pinned source and notice destinations,
license bytes, local links, entry shape, and `git diff --check`.
**Files:** `docs/oss/attribution.md`, applicable texts under
`docs/oss/licenses/`, and `README.md`. Add factual exception treatment to the OSS
policy only if the actual inventory uncovers a concrete need.