WIP: docs(exceptions): propose scoped AppKit tooling license review #32

2026-10-10T22:59:57Z

KofTwentyTwo commented

2026-10-10 22:59:57 +00:00

(Migrated from github.com)

AppKit draft PR #25 fails dependency review because development-only uri-js 4.4.1
has a BSD views sentence omitted by the shared default license allowlist. This
proposes EX-0009 for that exact package version and repository, with actual license
evidence, obligations, expiry, review date and preserved security controls.

The entry remains Proposed and no caller exemption is activated. If accepted,
mark the reviewed entry Open through the normal register PR process before using
an exact-version exemption. This PR does not request an automatic merge, a shared
allowlist expansion or a release.

Validation: one-file review, Markdown lint, diff hygiene, signed/DCO commit and
applicable hygiene/secret/message hooks pass. Hosted checks remain required.
Refs AppKit #26 and
AppKit #25.
Substantial implementation/review assistance: Codex (GPT-6).

AppKit draft PR #25 fails dependency review because development-only uri-js 4.4.1 has a BSD views sentence omitted by the shared default license allowlist. This proposes EX-0009 for that exact package version and repository, with actual license evidence, obligations, expiry, review date and preserved security controls. The entry remains Proposed and no caller exemption is activated. If accepted, mark the reviewed entry Open through the normal register PR process before using an exact-version exemption. This PR does not request an automatic merge, a shared allowlist expansion or a release. Validation: one-file review, Markdown lint, diff hygiene, signed/DCO commit and applicable hygiene/secret/message hooks pass. Hosted checks remain required. Refs [AppKit #26](https://github.com/KofTwentyTwo/AppKit/issues/26) and [AppKit #25](https://github.com/KofTwentyTwo/AppKit/pull/25). Substantial implementation/review assistance: Codex (GPT-6).

KofTwentyTwo commented

2026-10-12 14:33:21 +00:00

(Migrated from github.com)

Updated the draft to current main in signed/DCO 16e528b. PR #37 has assigned EX-0009 through EX-0012, so this AppKit-only proposal now uses unused EX-0013. Every approved main entry is retained verbatim; the exact development-only uri-js@4.4.1 scope and compensating controls are unchanged. This remains proposed and does not approve/activate a caller exception or disable any checks. Actual changed-register Markdown lint and hygiene pass; fresh CI is required.

Updated the draft to current main in signed/DCO `16e528b`. PR #37 has assigned EX-0009 through EX-0012, so this AppKit-only proposal now uses unused **EX-0013**. Every approved main entry is retained verbatim; the exact development-only `uri-js@4.4.1` scope and compensating controls are unchanged. This remains proposed and does not approve/activate a caller exception or disable any checks. Actual changed-register Markdown lint and hygiene pass; fresh CI is required.

This pull request has changes conflicting with the target branch.

exceptions/register.md

This pull request is marked as a work in progress.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin docs/appkit-tooling-license:docs/appkit-tooling-license

git checkout docs/appkit-tooling-license

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/standards#32