Add RootFS license/NOTICE candidate bundle

.github/workflows/ci.yml

@@ -39,21 +39,29 @@ jobs:
           ruby -c Scripts/prepare-rootfs-smoke-manifest.rb
           ruby -c Scripts/rootfs-license-review.rb
           ruby -c Scripts/rootfs-license-review-results.rb
+          ruby -c Scripts/rootfs-license-notice-candidates.rb
           ruby -c Scripts/prepare-rootfs-license-review.rb
+          ruby -c Scripts/prepare-rootfs-license-notice-bundle.rb
           ruby -c Scripts/rootfs-source-acquisition.rb
           ruby -c Scripts/prepare-rootfs-source-bundle.rb
           bash -n Tests/Scripts/RuntimeSmokeScriptTests.sh
           bash -n Tests/Scripts/RootFSCandidateSmokeManifestTests.sh
           ruby -c Tests/Scripts/RootFSLicenseReviewTests.rb
           ruby -c Tests/Scripts/RootFSLicenseReviewResultsTests.rb
+          ruby -c Tests/Scripts/RootFSLicenseNoticeCandidatesTests.rb
+          ruby -c Tests/Scripts/RootFSLicenseNoticeBundleTests.rb
           ruby -c Tests/Scripts/RootFSSourceBundleTests.rb
           bash Tests/Scripts/RuntimeSmokeScriptTests.sh
           bash Tests/Scripts/RootFSCandidateSmokeManifestTests.sh
           ruby Tests/Scripts/RootFSLicenseReviewTests.rb
           ruby Tests/Scripts/RootFSLicenseReviewResultsTests.rb
+          ruby Tests/Scripts/RootFSLicenseNoticeCandidatesTests.rb
+          ruby Tests/Scripts/RootFSLicenseNoticeBundleTests.rb
           ruby Tests/Scripts/RootFSSourceBundleTests.rb
           ruby Scripts/prepare-rootfs-license-review.rb --validate-only
           ruby Scripts/rootfs-license-review-results.rb
+          ruby Scripts/rootfs-license-notice-candidates.rb
+          ruby Scripts/prepare-rootfs-license-notice-bundle.rb --validate-only
           ruby Scripts/prepare-rootfs-source-bundle.rb --validate-only
 
       - name: Report Apple toolchain

CHANGELOG.en.md

@@ -36,6 +36,11 @@ All notable PocketRoot changes are recorded here. Semantic Versioning begins wit
   pinned RootFS license/NOTICE candidates have engineering review results;
   eight source origins retain package-level open items, and legal and
   redistribution gates remain closed.
+- A checksum-bound `LICENSE-NOTICE-CANDIDATES.json`, strict validator, and
+  outside-repository atomic materializer for the eight remaining RootFS source
+  origins. It indexes 8 remote license/attribution payloads, 46 aports files,
+  and the 21 existing evidence files for complete re-verification without
+  committing payloads or opening engineering, legal, or redistribution gates.
 - arm64 Simulator and unsigned-device final-link gates for the full Experimental graph.
 - Repository iOS 18 native smoke covering 17 preparation, boot, guest, 8 MiB sustained binary-output, stdout/stderr overflow, command, cancellation, recovery, shutdown, and 256 MiB Simulator lifecycle peak-memory checks.
 - A repository-external, unapproved RootFS double-build candidate path for the

CHANGELOG.md

@@ -33,6 +33,10 @@ PocketRoot 的重要变化记录在这里。首个公开版本发布后遵循 Se
 - 加入 checksum-bound `LICENSE-REVIEW-RESULTS.json` 和严格验证器；21/21 个固定
   RootFS license/NOTICE 候选已完成工程复核，8 个 source origin 仍有包级未决项，
   法律与再分发门禁保持关闭。
+- 为剩余 8 个 RootFS source origin 加入 checksum-bound
+  `LICENSE-NOTICE-CANDIDATES.json`、严格验证器和仓库外原子 materializer；索引
+  8 份远端许可证/attribution 材料、46 份 aports 文件与 21 份既有证据，支持完整
+  复验，但不提交 payload，也不解除工程、法律或再分发门禁。
 - 加入完整 Experimental graph 的 arm64 Simulator 与 unsigned device final-link gate。
 - 加入 repository-owned iOS 18 native smoke App 和 runner，覆盖 17 项 prepare、boot、guest、8 MiB 持续二进制输出、stdout/stderr 超限、command、取消、recovery、shutdown 与 256 MiB Simulator 生命周期峰值内存门禁。
 - native smoke 新增仓库外、未授权 RootFS 双构建候选入口：校验候选 provenance、

Compliance/RootFS/v0.3.3/EVIDENCE.json

@@ -41,7 +41,10 @@
     "licenseOrNoticeFilesInGuestTemplate": 0,
     "indexedExternalLicenseReviewCandidates": 21,
     "engineeringReviewedLicenseCandidates": 21,
-    "sourceOriginsWithRemainingLicenseReviewItems": 8
+    "sourceOriginsWithRemainingLicenseReviewItems": 8,
+    "indexedLicenseNoticeCandidateOrigins": 8,
+    "pinnedRemoteLicenseNoticePayloads": 8,
+    "supplementalAportsCandidateFiles": 46
   },
   "engineeringStatus": {
     "completeInstalledPackageInventory": true,
@@ -50,6 +53,9 @@
     "completeSourceAcquisitionManifest": true,
     "completeLicenseReviewCandidateIndex": true,
     "licenseCandidateEngineeringReviewCompleted": true,
+    "completeLicenseNoticeCandidateBundleIndex": true,
+    "licenseNoticeCandidatePayloadCommitted": false,
+    "licenseNoticeCandidateEngineeringReviewApproved": false,
     "completeLicenseAndNoticeBundle": false,
     "correspondingSourceBundleCollected": false,
     "redistributionApproved": false

Compliance/RootFS/v0.3.3/LICENSE-INVENTORY.json

@@ -30,6 +30,11 @@
   "engineeringReviewedCandidates": 21,
   "sourceOriginsWithOpenReviewItems": 10,
   "sourceOriginsWithRemainingReviewItems": 8,
+  "indexedOpenSourceOrigins": 8,
+  "pinnedRemoteReferencePayloads": 8,
+  "supplementalAportsFiles": 46,
+  "candidateBundleIndexComplete": true,
+  "candidatePayloadCommitted": false,
   "engineeringReviewCompleted": true,
   "completeLicenseTextBundlePresent": false,
   "completePackageNoticeSetPresent": false,