fix(licence): declare MPL-2.0 for code and CC-BY-SA-4.0 for prose

[hyperpolymath]

Summary

Applies the owner's ruling on #109: sanctify-php is MPL-2.0 for code and CC-BY-SA-4.0 for prose. That matches the estate licence policy (standards 3-practice/LICENCE-POLICY.adoc Rule 1). sanctify-php is not on the Rule 2 PMPL register.

LICENSE (verbatim MPL-2.0) and every source file's SPDX header already said MPL-2.0. This PR fixes the declarations that disagreed with them:

• sanctify-php.cabal license:: LicenseRef-PMPL-1.0-or-later → MPL-2.0. This is the field the governance / Licence consistency gate compares with LICENSE.
• CITATION.cff, stapeln.toml and the k9 project-metadata example: → MPL-2.0.
• DUBLINCORE.rdf and void.ttl linked dcterms:license to AGPL-3.0. Both now link to MPL-2.0.
• README licence section (Palimpsest badge removed), QUICKSTART*.adoc, docs/README.adoc, llm-warmup-*.adoc, www/.well-known/{humans,ai}.txt: → MPL-2.0 for code, CC-BY-SA-4.0 for docs.
• docs/accessibility/README.adoc is prose, so it now declares CC-BY-SA-4.0.
• NOTICE rewritten. It cited LICENSES/PMPL-1.0-or-later.txt, which does not exist.
• Removed PALIMPSEST.adoc and the unused LICENSES/AGPL-3.0-or-later.txt: no file in the tree is AGPL-licensed.
• The Guix sketch in docs/ROADMAP.adoc now says license:mpl2.0.

Left as they are: CHANGELOG history, the .a2ml files, and the setup-repo.k9.ncl recipe example.

Closes #109

Type of change

• 🐛 Bug fix (non-breaking change that fixes an issue): the declarations contradicted LICENSE.
• ✨ New feature: none.
• 💥 Breaking change: no. The licence that binds (LICENSE and the SPDX headers) is unchanged; only contradicting metadata moves to match it.
• 🕳️ Soundness fix: not a checker false-negative.
• 📖 Documentation: README, QUICKSTART, docs and NOTICE licence statements.
• 🧹 Refactor: no.
• ⚡ Performance: no.
• 🔧 Build / CI / tooling: no CI files change. The .cabal change is metadata only.

📌 New pins

Head SHA: 9d6a8a935b0f6d20bab6b6e62bbebc0cad2d9a03. No pins are added or changed.

How has this been verified?

• Ran standards' own checker, scripts/check-licence-consistency.sh, taken from standards origin/main:
  • this branch: [OK] Licence identity matches manifest declaration., [OK] Licence consistency check passed., rc 0.
  • positive control, main b0eba0f: rc 1 (Licence-vs-manifest mismatch: licence='MPL-2.0' manifest='LicenseRef-PMPL-1.0-or-later'). This matches CI's failure on main.
• grep -rni 'PMPL\|palimpsest\|agpl' outside CHANGELOG, .a2ml files and setup-repo.k9.ncl → only contractile.just (a grep that accepts either licence) and a keyword in .github/label-classifier.json.

Horizon of this check: it covers the licence gate and the text of every declaration listed above. No cabal build ran. cabal check would confirm that MPL-2.0 is accepted, but cabal is not installed locally. MPL-2.0 is a standard SPDX identifier, and cabal-version: 3.0 accepts SPDX expressions.

Checklist

• My commits are signed (git commit -S). git log --format=%G? → G.
• I ran the project's own checks/tests locally and they pass. The licence-consistency check is above. The Haskell tests are untouched by a metadata-only change, and there is no local cabal.
• New files carry the correct SPDX-License-Identifier: no new files.
• Docs are updated, and no public claim now overstates what the code does.
• I have not introduced a soundness hole: licence metadata and prose only.

Deferred red checks

• governance / Actions lockfile verify: already red on main, deferred to Actions lockfile verify red on main: 3 stale actions.lock entries #108 (stale actions.lock entries).
• Haskell CI (build) dies at startup_failure on every run since 2026-10-03, on main too. This is probably the same lock drift: tracked in Actions lockfile verify red on main: 3 stale actions.lock entries #108.

Notes for reviewers

The owner's ruling was given in a Claude Code session on 2026-10-07: "mpl-2.0 for code, cc-by-sa-4.0 for prose".

🤖 Generated with Claude Code

https://claude.ai/code/session_012kgrMQRhSmZMBbF9Ui1zBw

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 6f62ab04-be7e-4d1e-bc62-195946d04803

📥 Commits

Reviewing files that changed from the base of the PR and between b0eba0f and 9d6a8a9.

📒 Files selected for processing (19)

• .machine_readable/svc/k9/examples/project-metadata.k9.ncl
• CITATION.cff
• DUBLINCORE.rdf
• LICENSES/AGPL-3.0-or-later.txt
• NOTICE
• PALIMPSEST.adoc
• QUICKSTART-MAINTAINER.adoc
• QUICKSTART.adoc
• README.adoc
• docs/README.adoc
• docs/ROADMAP.adoc
• docs/accessibility/README.adoc
• llm-warmup-dev.adoc
• llm-warmup-user.adoc
• sanctify-php.cabal
• stapeln.toml
• void.ttl
• www/.well-known/ai.txt
• www/.well-known/humans.txt

 ____________________________________
< Come with me if you want to debug. >
 ------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}