forked from ChelseaKR/habitable
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathNOTICE
More file actions
46 lines (41 loc) · 2.59 KB
/
Copy pathNOTICE
File metadata and controls
46 lines (41 loc) · 2.59 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
habitable
Copyright 2026 Chelsea Kelly-Reif
This product is developed and maintained by Chelsea Kelly-Reif as an independent,
personal open-source project, on the author's own time and equipment.
It is not affiliated with, sponsored by, endorsed by, or a work product of any
employer or client of the author. It is not a government system and was not built
for a government customer. It contains no employer- or client-proprietary or
confidential code, data, or methods. The techniques are general and publicly
known (RFC 3161 trusted timestamping, SHA-256 content hashing, CRDT-based
local-first sync, end-to-end encryption). Any sample cases shipped for tests or
the demo are synthetic and contain no real tenant data.
License
-------
Except where stated below, this project is licensed under the GNU Affero General
Public License, version 3.0 (AGPL-3.0). See the LICENSE file for the full terms.
The AGPL is a deliberate part of the safety case: anyone who runs a modified
relay or a hosted variant for others must publish their changes, so a fork that
weakens the privacy or tamper-evidence guarantees cannot be offered as a service
without disclosure.
Permissive grant for the verification tool (AGPL section 7)
-----------------------------------------------------------
As an additional permission under section 7 of the GNU AGPL, the standalone
evidence-verification subset is ALSO made available under the Apache License,
Version 2.0, at the recipient's option. That subset is `src/habitable/verify.py`
together with the pure, side-effect-free helpers it relies on to do its job:
`src/habitable/canonical.py` (canonical serialization + SHA-256), the timestamp
verification routines and token model in `src/habitable/tsa.py`, the
chain-of-custody verification in `src/habitable/evidence.py`, and the signature
verification (`verify`) in `src/habitable/crypto.py`. This grant exists so that a
court, a housing inspector, a legal-aid organization, or an opposing party can
embed verification of a habitable evidence packet (hashes, RFC 3161 timestamp
tokens, and the chain-of-custody integrity proof) into their own software and
redistribute it without the AGPL reaching their code. Merely running the verifier
never triggers copyleft in any case; this permission is about embedding and
redistribution. Independent verifiability is of little use if shipping the
verifier inside another tool is itself encumbered.
Not legal advice
----------------
habitable is a documentation tool. It produces evidence packets; it does not
provide legal advice and does not guarantee that any packet will be admitted or
relied upon by any court or agency.