Legal and Licensing

This folder centralizes the legal and compliance references for Stella Ops Suite. For distributions, treat the root LICENSE and NOTICE.md as the authoritative artifacts.

Canonical documents

Core License Files (Repository Root)

• Project license (BUSL-1.1 + Additional Use Grant): LICENSE
• Community Plugin Grant Addendum: LICENSE-ADDENDUM-COMMUNITY-PLUGIN-GRANT.md
• Third-party notices: NOTICE.md

Compliance & Compatibility

• Full dependency inventory: docs/legal/THIRD-PARTY-DEPENDENCIES.md
• License compatibility guidance: docs/legal/LICENSE-COMPATIBILITY.md
• Additional Use Grant summary and quotas: docs/legal/LEGAL_FAQ_QUOTA.md
• Regulator-grade threat and evidence model: docs/legal/LEGAL_COMPLIANCE.md
• Cryptography compliance notes: docs/legal/crypto-compliance-review.md

Plugin & Distribution Guidance

• Plugin developer FAQ: docs/legal/PLUGIN_DEVELOPER_FAQ.md
• SaaS and MSP licensing guidance: docs/legal/SAAS_MSP_GUIDANCE.md
• Enforcement and telemetry policy: docs/legal/ENFORCEMENT_TELEMETRY_POLICY.md
• Compliance attestation process: docs/legal/COMPLIANCE_ATTESTATION_FORM.md
• Self-attestation form template: docs/legal/templates/self-attestation-form.md

Regulatory posture (per-regime)

• eIDAS / QTSP posture (single-page narrative; reference-only-no-vendoring canonical model): docs/legal/eidas-qtsp-posture.md
• DORA / eIDAS / QTSP customer deployment flow (sales / customer success / customer-facing): docs/legal/dora-eidas-customer-deployment-flow.md
• CRA product classification: docs/legal/cra-product-classification.md
• CRA product-placement anchor: docs/legal/cra-product-placement-anchor.md
• End-of-life policy: docs/legal/eol-policy.md
• Product support policy: docs/legal/product-support-policy.md
• Regulatory asset intake process: docs/legal/regulatory-asset-intake.md

Decision records and counsel correspondence

• Index + lifecycle guide: docs/legal/decisions/README.md
• EXEC (PM binding decisions), REG (regulatory asset records), VENDOR-BRIEF (vendor-facing artifacts), and lawyer-request* / lawyer-response* correspondence all live under docs/legal/decisions/.

Operator-supplied attestation templates

• eIDAS operator agreement attestation skeleton (operator-side, not Stella-Ops-signed): docs/legal/operator-attestations/eidas-operator-agreement-attestation.template.md