diff options
Diffstat (limited to 'docs/POLICY.txt')
| -rw-r--r-- | docs/POLICY.txt | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/docs/POLICY.txt b/docs/POLICY.txt index 16d97c2..1f54398 100644 --- a/docs/POLICY.txt +++ b/docs/POLICY.txt @@ -23,7 +23,9 @@ PROJECT CONVENTIONS file carries the AGPL copyright and permission header. LICENSE is the unmodified license text. Binary public keys and empty WKD policy files retain their protocol format. Generated Cargo.lock retains Cargo's own - metadata as well as the project notice. + metadata as well as the project notice. JSON npm manifests carry the legal + notice in a top-level // metadata field; compiler JSONC files use the usual + header syntax. Keep generated JavaScript legal markers when compiling. Do not add explanatory source comments. Express intent through structure and names. Legal headers are the required exception. Use .txt for prose @@ -58,6 +60,11 @@ STRICTNESS The dependency allowlist retains the requested permissive licenses and Zlib; an unused allowance may produce an informational audit warning. + Browser logic and automation use strict TypeScript configurations with + separate browser/worker/Node environments and checked untrusted responses. + npm dependencies are exact, development-only, integrity-locked, and installed + with lifecycle scripts disabled. See TYPESCRIPT.txt for the build contract. + Human license names follow https://www.gnu.org/licenses/license-list.html. In particular, display Expat License for SPDX MIT. Do not alter original copyright notices, legal texts, crate metadata, or machine SPDX identifiers. |