Skip to content

feat(license): §4.3 v1.38 LICENSE layout — canonical text at root, LICENSES/ links to it - #53

Merged
UnbreakableMJ merged 1 commit into
mainfrom
compliance/license-layout-v1.38
Jul 26, 2026
Merged

feat(license): §4.3 v1.38 LICENSE layout — canonical text at root, LICENSES/ links to it#53
UnbreakableMJ merged 1 commit into
mainfrom
compliance/license-layout-v1.38

Conversation

@UnbreakableMJ

Copy link
Copy Markdown
Contributor

Brings this repo into compliance with The Steelbore Standard §4.3 as amended in v1.38.

Audit finding

Both a root LICENSE and LICENSES/GPL-3.0-or-later.txt existed as independent regular files — two copies of the same license text, which is the drift risk §4.3 forbids. The root now carries the canonical FSF GPL-3.0 text and LICENSES/GPL-3.0-or-later.txt is a symlink to it, so the text exists exactly once.

Change

  • Root LICENSE: regular file (mode 100644) holding the canonical, unmodified GPL-3.0-or-later text.
  • LICENSES/GPL-3.0-or-later.txt: symlink to ../LICENSE (mode 120000).
  • Every other entry in LICENSES/ is untouched — secondary licenses (§4.2 upstream texts, other artifact classes per §4.1.1) stay regular files.

Why this direction

GitHub's license detector reads git blobs, and a symlink's blob is the target path, not the license text — a symlinked root LICENSE is reported as NOASSERTION. reuse reads the working tree through the filesystem, so it follows the link in LICENSES/ and lints clean. The text exists exactly once, with no drift.

Verification

  • reuse lint: passpass
  • Detected license before this PR: GPL-3.0 (expected GPL-3.0 after merge)
  • Commit is signed (§6.3); only LICENSE / LICENSES/ paths changed

🤖 Generated with Claude Code

…CENSES/ links to it

Both a root LICENSE and LICENSES/GPL-3.0-or-later.txt existed as independent regular files — two copies of the same license text, which is the drift risk §4.3 forbids. The root now carries the canonical FSF GPL-3.0 text and LICENSES/GPL-3.0-or-later.txt is a symlink to it, so the text exists exactly once.

Standard §4.3 (v1.38): the root LICENSE is a regular file holding the
verbatim canonical license text; LICENSES/<SPDX-id>.txt for that license
symlinks back to it. GitHub's detector reads git blobs, so a symlinked
root LICENSE reports NOASSERTION; reuse reads the filesystem and follows
the link. The text exists exactly once.

Only LICENSE and LICENSES/ are touched. Secondary licenses in LICENSES/
stay regular files. reuse lint: pass -> pass.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@UnbreakableMJ
UnbreakableMJ merged commit 8a30f32 into main Jul 26, 2026
@UnbreakableMJ
UnbreakableMJ deleted the compliance/license-layout-v1.38 branch July 26, 2026 10:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant