# 05 — Boundaries and licensing

## 1. Licensing

**CC BY 4.0** site-wide, stamped and gated with `licence-audit.py --check`. Quoted code is Apache-2.0 — retain notices. The IFD guides and `for_llms` documents are in-repo Apache-2.0 material; republishing them here as pages is fine with attribution, but **keep the repo canonical and generate** — the second-source-of-truth rule applies to methodology guides exactly as it did to the `sg.llm` reference.

## 2. Do not publish

- **Any of the estate's own financial figures.** The budget *discipline* is Tier-0; the numbers around it are Tier-3 everywhere — `library/alchemist/materials/` (whole tree), the payments-platform briefs (pricing, margins, provider detail), the commercial-model briefs (rates, delivery location), the investor briefs.
- `team/roles/grc/reviews/02/19/` — named private individual.
- The appsec review classified as *"an attack roadmap for live code."*
- The villagers brief's **market statistics** — the brief itself flags them as loosely attributed; re-source or soften (same ruling as three prior packs).
- Live hostnames, the AWS account ID, stack FQDNs — the sg-compute redaction list applies wherever its material is quoted.

## 3. Network boundaries — the hub's contract

This site **owns**: the topic map · testing · CI · documentation/reality · IFD · budgets-as-discipline · PM · resilience patterns · the memory thesis · the scorecard.

This site **links and never restates**: security domains (`pki.` `nhi.` `sg-sentinel.` `llms.`) · serverless/platform (`sg-compute.`) · conventions (`coding.`) · grounding/explainability (`risks.` `standards.`) · the villagers *market* argument (`open-source.`) · the lifecycle (`wardley-maps.`) · skills (`skills.`).

**One rule above the table:** when a sibling pack has measured something, this site links the measurement — it never re-measures and never paraphrases numbers. The hub that drifts from its spokes is worse than no hub.

## 4. House style

Every discipline page ends with its counter-evidence · every number generated or dated · the eight-NFR list quoted verbatim wherever the scope is stated · -ise, no em-dashes.

---

This document is released under the Creative Commons Attribution 4.0 International licence (CC BY 4.0).