aere-research/LICENSING.md
Aere Network 6cb0140fae Republished from a clean root: the compiled artifact is gone from history, and the local line of work joins the sanitized public line
The public history carried kat/__pycache__/mlkem768_reference.cpython-314.pyc,
a compiled Python artifact embedding the operator's absolute local path. Text
secret scanners do not read compiled binaries, which is exactly how it slipped
through, and removing it from the tip would have left it reachable through the
old root commits. So this repository is republished from a single clean root.

This root also carries, from the previously unpublished line of work:
- corrected LICENSE year, LICENSING.md, VERIFY-POLICY.md, and
  CITATIONS-UNRESOLVED.md remeasured 2026-08-11 (101 paths, README aligned)
- O-018: run_consensus_verification.py ran 19 of 29 models and reported PASS;
  it now runs all 29, and computemarket_smt.py gains resolveByTimeout /
  reclaimUnsettled cases plus a negative control
- O-006: the word 'audited' removed from next to Bouncy Castle, twice, after a
  concurrent edit resurrected it
- O-014: prior art named and dated - Algorand's native falcon_verify shipped
  about ten months before AERE's precompiles; the primacy claim is withdrawn
  where it was implied
- bench/ scripts parametrized so they actually run for an outsider (the
  earlier textual sanitization left $STAGING unexpanded inside Python strings)
- AIP-2/AIP-3 errata with measured figures, spec remeasurements at 2026-08-01,
  and the spec-zk-stack retractions (owner is an operational key, not the
  Foundation; 'maximally sound' withdrawn; aggregator V1 deprecated)
The redacted bench-host environment files from the sanitized line are kept
exactly as published; the unredacted local variants are not carried.
2026-08-15 13:52:14 +03:00

50 lines
2.0 KiB
Markdown

# Licensing
Default for this repository: **MIT**, `Copyright (c) 2026 AERE Network`. See `LICENSE`.
The papers, proofs, results and verification records in this repository are MIT. Two groups of
files are not, and both are marked in their own headers. Where a file has its own
`SPDX-License-Identifier`, **that header governs, not the repository default.**
This page was produced by reading the `SPDX-License-Identifier` line of every file in the tree.
## Java sources — Apache-2.0
| File | SPDX |
| --- | --- |
| `precompiles/HashToPointPrecompiledContract.java` | `Apache-2.0` |
| `precompiles/MLKEM768PrecompiledContract.java` | `Apache-2.0` |
| `precompiles/Sp1StarkVerifierPrecompiledContract.java` | `Apache-2.0` |
| `pq-stark/FriQueryIndexSelfTest.java` | `Apache-2.0` |
| `pq-stark/Sp1StarkVerifierKat.java` | `Apache-2.0` |
These are AERE Network's copyright, but they are written to compile inside a Hyperledger Besu tree
and they sit in Besu's own package namespace, `org.hyperledger.besu.evm.precompile`. Besu is
Apache-2.0. Licensing them Apache-2.0 is what makes them usable where they are meant to be used,
and it is what their headers have always said.
## Improvement proposals — CC0
Every file under `aips/`, including `aip-template.md`, ends with:
> Released to the public domain (CC0). No rights reserved.
That dedication stands. It follows the convention Ethereum uses for EIPs, and it is a wider grant
than MIT, so it takes nothing away from a reader of `LICENSE`. It is recorded here because a reader
who sees only `LICENSE` would otherwise not know these documents are freer than the rest.
## What `bench/` is
`bench/AereFalcon512VerifierHTP.sol` is `MIT`, the repository default. It is listed only so the
count below adds up.
## Counts, as measured
| SPDX identifier | Files carrying the header |
| --- | ---: |
| `Apache-2.0` | 5 |
| `MIT` | 1 |
Files without an SPDX header, which is most of this repository, are covered by `LICENSE`, except
the `aips/` documents described above.