Skip to content

chore(license): enforce source policy - #38

Merged
Windsor Nguyễn (windsornguyen) merged 1 commit into
mainfrom
codex/license-policy
Aug 11, 2026
Merged

chore(license): enforce source policy#38
Windsor Nguyễn (windsornguyen) merged 1 commit into
mainfrom
codex/license-policy

Conversation

@windsornguyen

Copy link
Copy Markdown
Member

Explain what this changes, why it is needed, and anything reviewers should
verify. Link an issue when one exists.

What does this change?

Adds pnpm run ci check license, a typed repository audit that inventories source from the immutable Buck2 boundary, validates canonical preambles, requires root LICENSE to match Apache-2.0 exactly, and checks first-party npm and Cargo package metadata. The inherited superconsole crate remains the explicit MIT OR Apache-2.0 exception.

The apply path is deterministic and insertion-only for source files; the check path fails closed with every offending path.

How was it tested?

  • pnpm run ci check

  • pnpm exec tsc --noEmit

  • Isolated policy test covering canonical source, root license, npm metadata, Git inventory, and Cargo metadata

  • CLA/Vouch check passes, or this PR only updates VOUCHED.td

Base automatically changed from codex/license-preambles to main August 11, 2026 01:46
Merged via the queue into main with commit 5030f2c Aug 11, 2026
12 checks passed
@windsornguyen
Windsor Nguyễn (windsornguyen) deleted the codex/license-policy branch August 11, 2026 02:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants