Skip to content

docs(license): asset-license boundary — MIT for code/docs/tokens, marks carved out prospectively (P-3) - #14

Merged
JG2547 merged 2 commits into
mainfrom
docs/license-boundary
Aug 23, 2026
Merged

docs(license): asset-license boundary — MIT for code/docs/tokens, marks carved out prospectively (P-3)#14
JG2547 merged 2 commits into
mainfrom
docs/license-boundary

Conversation

@JG2547

@JG2547 JG2547 commented Aug 9, 2026

Copy link
Copy Markdown
Collaborator

Program BN-1132-FAMILY-FINALIZE (Botify-Network/Botify-Network#24209), operator-approved P-3 with the three legal guardrails: (a) prospective-only with an explicit no-retraction sentence; (b) zero historical-exposure analysis in license text (that analysis is a separate register finding); (c) rights reserved only to the extent actually controlled — every unproven asset says 'provenance under review — status will be corrected when established', consistent with the byte-level MARK-ASSET-CLASSIFICATION (all raster marks UNKNOWN). MIT text unmodified; boundary visible from README; notice ships in the store zip. Rollback: revert.

@coderabbitai

coderabbitai Bot commented Aug 9, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@JG2547, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 59 minutes

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: e934079a-c9f2-4b61-b72e-c6413dc909b3

📥 Commits

Reviewing files that changed from the base of the PR and between d00f23e and 40ce7b1.

📒 Files selected for processing (3)
  • ASSET-LICENSE.md
  • README.md
  • scripts/package-extension.js

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 40ce7b1cc5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread README.md Outdated
Comment thread scripts/package-extension.js
JG2547 added a commit that referenced this pull request Aug 11, 2026
…ty strings, report-chip fix (#18)

* docs: add public project docs — security policy, contributing, code of conduct, support, changelog, owners, trademark notice, templates

SECURITY.md routes vulnerabilities to GitHub private vulnerability
reporting (the repo toggle for it is requested separately). TRADEMARKS.md
is prospective-only with the honesty clause (rights reserved only to the
extent actually controlled; provenance findings tracked separately) and
does not restate the ASSET-LICENSE boundary proposed in PR #14.
CHANGELOG entries are summarized from the git history.

* feat(brand): canonical product identity strings — tagline and store description

Tagline "A focused browser cleanup for Zoom error 1132." replaces
"One-click fix for Zoom Error 1132" in the brand conventions, README,
popup header descriptor, and the ds-bundle component copies. Store
description "Clear Zoom site data in Chrome with one guided action."
replaces the old summary in manifest.json (54/132 chars), _config.yml,
index.md, STORE_LISTING.md, and STORE_PREP.md.

As touched in the store docs: the store-name row now matches the listing
copy ("1132 Fixer for Chrome"), the privacy-policy URL row is re-verified
against the post-transfer GitHub Pages address (the pre-transfer URL is
dead — Pages does not redirect across owners), and stale version
references now match the repository's v1.2.5.

At 360px the new popup descriptor renders as two centered lines
(measured 279px + 82px); flagged for design review in the PR.

* fix(report): fallback version chip v1.2.4 -> v1.2.5

report.html ships a hardcoded fallback label that bump-version.js does
not rewrite (it only updates popup.html), so it drifted one release
behind. Runtime still overwrites the chip from the manifest; only the
pre-script fallback was stale. The systematic fix (a multi-surface
version-consistency gate) is designed in the release-automation batch.

* docs(templates): absolute doc links in issue forms (relative paths resolve wrong from issue pages)

* docs(trademarks): working-draft marker pending legal confirmation; provenance-review status updated (review concluded 2026-08-09, per-asset dispositions pending)

* docs(oss): cure EQ returns — exact working-draft marker; certification-honest store source block

TRADEMARKS.md (R1): the variant draft banner is replaced by the exact
working-draft marker "> Working draft — pending operator legal confirmation."
as the top line of the file; the boundaries-in-effect sentence is retained
so draft status cannot be read as the boundaries being suspended.

STORE_LISTING.md (R2, Control-ruled): the detailed-description header
"OPEN SOURCE" becomes "SOURCE CODE" and the body states the facts without
an open-source label claim ("Source code is public under the MIT license.")
— the label is gated on OSS certification. As touched in the same block,
the two old-owner PrimeUpYourLife repository links now point at the
current 1132-Fixer paths.

Evidence at this tree: validate-extension 140/0 · store-listing verifier
8/8 within limits · popup e2e 91/0 · report e2e 32/0.
JG2547 and others added 2 commits August 22, 2026 21:13
…ks carved out prospectively (P-3)

ASSET-LICENSE.md: exact protected-file list, prospective-only carve-out with an explicit no-retraction sentence, rights reserved only to the extent controlled, per-file provenance table (all refresh marks + legacy rasters: provenance under review, CR-10); README License section links the boundary; the packager ships the notice in the store zip so the boundary travels with the icons. MIT text unmodified. Future public design-system packages carry the same boundary.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…package inventory

Addresses the two unresolved review threads on #14, rebased onto main
e09d566 so the #23 README/NOTICE work is preserved intact.

P1 — public license declarations now carry the carve-out:
- _layouts/default.html: hosted-site footer no longer says a bare
  "MIT License"; it scopes MIT to code/docs and links TRADEMARKS.md.
- index.md: License line scopes MIT and links TRADEMARKS/ASSET-LICENSE/NOTICE.
- STORE_LISTING.md: the SOURCE CODE block of the store copy states the
  boundary and links both notices.
- STORE_PREP.md: long-description quick reference matches; Windows link
  corrected to the canonical 1132-Fixer/windows.
- NOTICE.md / TRADEMARKS.md: cross-link ASSET-LICENSE.md as the per-file annex.
- ASSET-LICENSE.md: declares itself the annex to TRADEMARKS.md (which governs
  mark wording) and lists report.* under the MIT-covered source.

P2 — documented package inventory matches the packager:
- scripts/package-extension.js ENTRIES ships NOTICE.md and TRADEMARKS.md
  alongside ASSET-LICENSE.md, so the carve-out travels with the package and
  the shipped README's links resolve.
- STORE_PREP.md inventory rewritten: 19 entries in ENTRIES order, the
  report.* runtime added, and per-target byte counts and SHA-256 recorded
  from npm run package:all. Firefox is called out as a separate Gecko
  package, not one universal build.

Version stays 1.2.7: version-bump.yml fires only on pushes to master that
touch manifest.json, popup.*, or icons/ — none apply here.

npm test green locally: validator 227/0, popup e2e 126/0, package smoke 55/0,
report e2e 32/0, listing:verify 8/8. No store upload, no release, no tag.
@JG2547
JG2547 force-pushed the docs/license-boundary branch from 40ce7b1 to f3f5902 Compare August 23, 2026 02:16
@JG2547
JG2547 merged commit 87e5792 into main Aug 23, 2026
2 checks passed
@JG2547
JG2547 deleted the docs/license-boundary branch August 23, 2026 02:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants