Split license: preserve upstream MIT, reserve rights on fork-original files - #6
Merged
Merged
Conversation
… files Upstream code (obra/superpowers) remains MIT-licensed under Jesse Vincent's original notice, unmodified and intact, as required by its own terms. Adds NOTICE documenting the three content tiers (unmodified upstream, upstream files edited by this fork, and files created new by this fork) and LICENSE-FORK covering only the 58 files with no upstream original, Copyright Minhyeok Kim, all rights reserved.
skills/codebase-design/ and skills/domain-modeling/ were adapted from https://github.com/mattpocock/skills (MIT, Copyright Matt Pocock), not authored by this fork or inherited from obra/superpowers. They were incorrectly listed as fork-original all-rights-reserved content. Adds THIRD-PARTY-LICENSES with Matt Pocock's MIT notice and moves those 6 files out of LICENSE-FORK's scope into that third category.
SSFSKIM
commented
Jul 8, 2026
SSFSKIM
left a comment
SSFSKIM
left a comment
Owner
Author
There was a problem hiding this comment.
Correct and legally valid sub-licensing separating upstream, third-party, and my license, thus making this repository all right reserved, source-available project.
SSFSKIM
added a commit
that referenced
this pull request
Jul 10, 2026
Two-tier trust (review #1, human design call): developer feedback — the server-resolved role snapshot in TRIAGE_TRUSTED_ROLES (default admin), or a stripped .env #TRIAGE_DEV_CODE body prefix — is read as instruction (R1/R4 waived: dev ideas can be born ready-for-agent, labeled source:dev-feedback); user feedback keeps the conservative gate, residual risk explicitly accepted in the Decision Log. The dev code is stripped before the body reaches the prompt or ticket so it never leaks into a public issue. The rest of the review, all fixed: - #2 R2 requires a REAL file citation (path-shaped after :line strip; unknown:12 no longer counts) - #3 R3 scans risk SYMBOLS (assertStudentAccess, supabaseAdmin, RLS, generate-plan layout fns, past_exam_problems, SUPABASE_SERVICE_ROLE_KEY) in addition to paths - #4 claim issues a lease token; writeback is lease-conditional (late writeback after reclaim throws instead of clobbering); reclaim window validated at config load; second idempotency check right before registerTicket - #5 findExisting fails closed on gh search errors - #6 ticket body temp files: mkdtemp dir, mode 0600, removed in finally - #7 TRIAGE_ENABLED checked before config parsing - #8 spec drift fixed (feedback-dispatch.ts references, two-kill-switches) p86 DDL note gains triage_lease UUID. New src/trust.ts. 91 tests green, tsc clean.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Upstream code (obra/superpowers) remains MIT-licensed under Jesse
Vincent's original notice, unmodified and intact, as required by its
own terms. Adds NOTICE documenting the three content tiers (unmodified
upstream, upstream files edited by this fork, and files created new by
this fork) and LICENSE-FORK covering only the 58 files with no upstream
original, Copyright Minhyeok Kim, all rights reserved.