Licence
Licence
The Adoption Kit's terms, reproduced verbatim from its own LICENSE file.
MIT License Copyright (c) 2026 William Musgrave Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. --------------------------------------------------------------------------- WHAT THIS COVERS, AND WHAT IT DOES NOT COVERED — the CODE. Every .py file in this kit: the tools, the executable starters, the checks and the generators. Take them, change them, ship them in a commercial product; MIT is the least restrictive license that still requires the notice to travel with the copy. The worked EXAMPLES the tools read and write — the export samples, the worked instances, the schemas needed to run them — are covered on the same terms, because a tool you may use and a sample input you may not is not a usable grant. NOT COVERED — THE REGISTERS, and the distinction is deliberate rather than an oversight. `policy/controls.csv`, `policy/decidability.csv`, `policy/metrics.csv`, `policy/calibration.csv` and the other registers are not code samples. They are the apparatus itself — the forty-nine controls, the two hundred and twenty-five obligations with their decidability classes, the seventy measures with their denominators and anti-Goodhart questions, and the fifty-six calibrated thresholds. They are the substance of the published work in machine-readable form, and they are licensed with the prose rather than with the code. Use them to run this framework in your own organization; that is what they are for and no permission is needed for it. Redistributing or selling them, or shipping them inside a product, is a question for the prose license below. NOT COVERED — the prose. The reference volume and the four books of the series are a commercially published work and their rights are reserved. They carry their own notice in their front matter. ONE OPEN QUESTION, RECORDED RATHER THAN ANSWERED. This work reproduces identifiers and entry names from OWASP under CC BY-SA 4.0, which is a SHARE-ALIKE license. Whether the prose is an ADAPTATION of that material or a QUOTATION WITH ATTRIBUTION decides whether a closed commercial edition is available at all, because share-alike would require a derivative to carry the same license. That is a question for counsel, it sits on the critical path to publication, and it is recorded here so that it is answered before print rather than after. NOT OURS AT ALL — third-party material quoted or cited anywhere in this kit remains the property of its owners, is reproduced under the license recorded against the source that cites it, and nothing above is asserted over it.
The four books and the collected edition are a commercially published work and their rights are reserved; they carry their own notice in their front matter and are not covered by the terms above.