Root LICENSE.md
Explains the package-specific license map instead of falsely applying one blanket license to the whole monorepo.
Licensing
Permissive package licensing designed for adoption
RuleOak v0.1.0 uses package-local licenses, SPDX headers, full license texts, and REUSE linting so developers and scanners can identify the correct license for each package.
| Package | License | Developer purpose |
|---|---|---|
@ruleoak/protocol | MIT | Shared policy, decision, evidence, and replay contracts. Use this when you need stable types across adapters or frameworks. |
@ruleoak/core | Apache-2.0 | Policy evaluator, fail-closed decision model, evidence recorder, approval semantics, and replay primitives. |
@ruleoak/cli | Apache-2.0 | Command-line gate for demos, local checks, scripted workflows, and CI-friendly governance experiments. |
Repository licensing model
Package-local LICENSE files
Each npm package carries its own LICENSE file so package scanners can classify the tarball correctly.
SPDX and REUSE
Source files declare license metadata; CI runs REUSE lint so new files do not silently become ambiguous.
Trademark separation
MIT and Apache-2.0 grant code rights, not RuleOak name or logo rights. Forks must avoid implying endorsement.
Legal status
RuleOak is not yet held by a legal company entity. Copyright uses “The RuleOak Authors”; Sun Shaobin is the initial project steward and current legal owner before any future entity exists.