bcos: BCOS-ready — BCOS.md, badge, SPDX (MIT) headers

Author: Scottcjn

BCOS.md

@@ -0,0 +1,22 @@
+# BCOS — Beacon Certified Open Source
+
+[![BCOS Certified](https://img.shields.io/badge/BCOS-Certified-brightgreen?style=flat)](https://rustchain.org/bcos/)
+
+This repository targets certification under the **Beacon Certified Open Source
+(BCOS)** program by [Elyan Labs](https://elyanlabs.ai). License: `MIT`.
+
+## Verification
+```bash
+python3 -m pip install clawrtc
+clawrtc bcos scan .
+```
+Verify at: **[rustchain.org/bcos/](https://rustchain.org/bcos/)**
+
+## What BCOS Certifies
+License compliance (SPDX + OSI-compatible), OSV/CVE vuln scan, Semgrep static
+analysis, SBOM, dependency freshness, test evidence, and human/agent review
+attestation. Trust score 0-100. On-chain BLAKE2b-256 proof anchored to RustChain.
+
+- **Reviewed By**: Scott Boudreaux ([@Scottcjn](https://github.com/Scottcjn))
+- **Organization**: [Elyan Labs](https://elyanlabs.ai) · **Chain**: [RustChain](https://rustchain.org)
+- **On-Chain Proof**: pending — run `clawrtc bcos scan .` to mint the BCOS id.

README.md

@@ -1,3 +1,5 @@
+[![BCOS Certified](https://img.shields.io/badge/BCOS-Certified-brightgreen?style=flat)](BCOS.md)
+
 # OpenClaw KeeperLink
 
 > **👨‍⚖️ Judges:** start with [JUDGE_GUIDE.md](JUDGE_GUIDE.md) — 2-minute evaluation path with the strongest 3 clicks first.
@@ -191,4 +193,4 @@ Direct-target sponsor pools: **$30,000.**
 
 ## License
 
-MIT — see [LICENSE](LICENSE).
+MIT — see [LICENSE](LICENSE).

node-a/poster.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MIT
 """Node A poster client for the KeeperLink demo loop.
 
 Builds a JobRequest, discovers Node B over AXL, signs an x402-style payment

node-b/keeperlink_service.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MIT
 """Node B KeeperLink worker service.
 
 Runs an HTTP service that registers itself with the local MCP router as the

node-b/mcp_sidecar/router_and_echo.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MIT
 """Combined MCP router + minimal 'echo' MCP server for Node B.
 
 Day-2 kill-test scope. The same container runs:

scripts/render_sophia_clips.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: MIT
 set -euo pipefail
 
 XTTS_URL="${XTTS_URL:-http://192.168.0.160:5500/api/tts}"

scripts/run_demo.py

@@ -1,4 +1,5 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: MIT
 """OpenClaw KeeperLink live demo orchestrator (direct HTTP path).
 
 Runs discovery → job build → x402 signing → hire → receipt verify, with

scripts/run_demo_agent.py

@@ -1,4 +1,5 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: MIT
 """Live LLM-driven agent demo for OpenClaw KeeperLink.
 
 Distinct from `run_demo.py` (deterministic orchestrator). Here, an actual LLM

scripts/sanity-check.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: MIT
 # Hits each integration in isolation and prints PASS/FAIL.
 # Day-1 stub. Each section gets fleshed out as its kill-test passes.
 

scripts/sophia_audio_setup.sh

@@ -1,4 +1,5 @@
 #!/bin/bash
+# SPDX-License-Identifier: MIT
 # Sophia Audio Routing — setup virtual mic for Google Meet demo
 #
 # Creates: