Repository navigation
chore(policy): MPL-1.0 is flag-only, never rewritten by an agent - #796
Conversation
.claude/CLAUDE.md told agents to rewrite MPL-1.0 / MPL-1.0-or-later to MPL-2.0 "wherever encountered (code + docs)", a standing SPDX sweep. The standards licence policy forbids that: licence edits are manual, per file and owner-only. The owner ruled on 2026-11-14 that the rule here becomes flag-only. The three places that said "rewrite" (the policy note, the BANNED rows and enforcement rule 8) now say "flag to the owner, never rewrite". No SPDX header or LICENSE file is touched. Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_0136P7ZnvMV5Ghe7LUf3oc6N
Codex Review Summary: ✅ CompletedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 47f9da9865
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| 6. **No Python, no exceptions** - The SaltStack exception is removed (owner ruling 2026-11-14). Any Python must be rewritten or removed. | ||
| 7. **No Kotlin/Swift for mobile** - Use Tauri 2.0+ or Dioxus. | ||
| 8. **MPL-1.0 / MPL-1.0-or-later are non-conforming** - Rewrite to MPL-2.0 in SPDX headers and LICENSE files when encountered (Hypatia's `validate_license` flags both). | ||
| 8. **MPL-1.0 / MPL-1.0-or-later are non-conforming: flag, never rewrite** - Report each to the owner (Hypatia's `validate_license` flags both). Licence and SPDX changes are manual, per file and owner-only; an agent never edits them (owner ruling 2026-11-14, matching the standards licence policy). |
There was a problem hiding this comment.
When a PR contains an MPL-1.0 header, .github/workflows/governance.yml:41 runs tools/ci/governance-standalone.sh, whose lines 38 and 45 still say the header must be rewritten to MPL-2.0 and emit that rewrite as the CI remediation. That directly contradicts this new owner-only rule and can prompt an agent or contributor to make the prohibited licence edit; update the gate's comment and diagnostic to instruct reporting the file to the owner instead.
Useful? React with 👍 / 👎.
Summary
.claude/CLAUDE.mdtold agents to rewrite MPL-1.0 / MPL-1.0-or-later to MPL-2.0 "wherever encountered (code + docs)". That is a standing SPDX sweep, and the standards licence policy forbids it: licence edits are manual, per file and owner-only. The owner ruled on 2026-11-14 that the rule here becomes flag-only.This change was meant to ride on #794, but that PR merged a few minutes before the commit was pushed, so it comes separately.
Changes
The three places that said "rewrite" now say "flag to the owner, never rewrite":
No SPDX header or LICENSE file is touched.
Testing
tools/ci/governance-standalone.sh: exit 0.Generated by Claude Code