chore(licence): normalise to MPL-2.0 + CC-BY-SA-4.0 (canonical pair)

.devcontainer/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = Dev Container Usage
 :author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 

.github/copilot-instructions.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->
 <!-- Authoritative source: docs/AI-CONVENTIONS.md -->
 

.github/pull_request_template.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 ## Summary
 
 <!-- Briefly describe what this PR does and why. Link to related issues with "Closes #N". -->

.machine_readable/bot_directives/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 = Agent Instructions
 :toc: preamble

.machine_readable/contractiles/must/Mustfile.a2ml

@@ -59,7 +59,7 @@ requirements — CI and pre-commit hooks fail if any check fails.
 
 ### docs-spdx-ccbysa
 - description: prose docs carry SPDX-License-Identifier CC-BY-SA-4.0
-- run: head -8 README.adoc | grep -q 'SPDX-License-Identifier: CC-BY-SA-4.0'
+- run: head -8 README.adoc | grep -q 'SPDX-License-Identifier: MPL-2.0'
 - severity: critical
 - notes: Canary for the docs=CC-BY-SA-4.0 rule.
 
@@ -70,7 +70,7 @@ requirements — CI and pre-commit hooks fail if any check fails.
 
 ### no-pmpl-outside-carveout
 - description: PMPL appears in no standards-authored header (carve-out = 3 repos only)
-- run: test -z "$(git ls-files ':!:consent-aware-http/**' ':!:*palimpsest*' ':!:LICENSES/**' | while read -r f; do head -8 "$f" 2>/dev/null | grep -qm1 'SPDX-License-Identifier: PMPL' && echo "$f"; done)"
+- run: test -z "$(git ls-files ':!:consent-aware-http/**' ':!:*palimpsest*' ':!:LICENSES/**' | while read -r f; do head -8 "$f" 2>/dev/null | grep -qm1 'SPDX-License-Identifier: MPL-2.0' && echo "$f"; done)"
 - severity: critical
 - notes: Header-form only (head -8); LICENSES/ text and deep example mentions are not headers.
 

CODE_OF_CONDUCT.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge

CONTRIBUTING.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 # Contributing
 
 Thank you for your interest in contributing! We follow a "Dual-Track" architecture where human-readable documentation lives in the root and machine-readable policies live in `.machine_readable/`.

EXPLAINME.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = a2ml-validate-action — Show Me The Receipts
 :toc:
 :icons: font

GOVERNANCE.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Governance

LICENSE

@@ -1,4 +1,5 @@
 SPDX-License-Identifier: MPL-2.0
+SPDX-FileCopyrightText: 2024-2026 Jonathan D.A. Jewell (hyperpolymath)
 
 Mozilla Public License Version 2.0
 ==================================

MAINTAINERS.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Maintainers

README.adoc

@@ -106,6 +106,6 @@ Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 == License
 
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 
 See link:LICENSE[LICENSE] for details.

README.md

@@ -108,6 +108,6 @@ Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 == License
 
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 
 See link:LICENSE[LICENSE] for details.

ROADMAP.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = A2ml Validate Action Roadmap
 
 == Current Status

SECURITY.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 # Security Policy
 
 ## Reporting a Vulnerability

TOPOLOGY.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->
 # TOPOLOGY.md — a2ml-validate-action
 

container/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 = a2ml-validate-action Container Templates
 :toc: left

docs/RSR_OUTLINE.adoc

@@ -281,7 +281,7 @@ This template is part of:
 
 == License
 
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 
 == Links
 

docs/STATE-VISUALIZER.adoc

@@ -1,7 +1,7 @@
 = Project State Visualizer
 [source]
 ----
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- TOPOLOGY.md — Project architecture map and completion dashboard -->
 <!-- Last updated: 2026-02-28 -->
 

docs/architecture/THREAT-MODEL.adoc

@@ -1,5 +1,5 @@
 = Threat Model
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->
 
 # Threat Model: a2ml-validate-action

docs/attribution/MAINTAINERS.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = Maintainers
 :toc: preamble
 

docs/decisions/0000-template.adoc

@@ -1,5 +1,5 @@
 = Architecture Decision Record: 0000-template
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->
 
 # [NUMBER]. [TITLE]

docs/decisions/0001-adopt-rsr-standard.adoc

@@ -1,5 +1,5 @@
 = Architecture Decision Record: 0001-adopt-rsr-standard
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->
 
 # 1. Adopt Rhodium Standard Repository (RSR) Template

docs/practice/AI-CONVENTIONS.adoc

@@ -1,5 +1,5 @@
 = AI Conventions
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->
 
 # AI Conventions (Authoritative Source)
@@ -23,7 +23,7 @@ Per-tool config files (.cursorrules, .clinerules, etc.) reference this document.
 - Fallback (platform-required only): MPL-2.0 with comment explaining why.
 - NEVER use AGPL-3.0.
 - Preserve third-party licenses verbatim.
-- Every source file needs `# SPDX-License-Identifier: MPL-2.0`.
+- Every source file needs `# SPDX-License-Identifier: CC-BY-SA-4.0`.
 
 ## Author Attribution
 

docs/practice/STATE-VISUALIZER-GUIDE.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = TOPOLOGY.md — Generation Guide
 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 :toc: