# Licensing — SecuBox-DEB

## Main License: CMSD-1.0

This repository is licensed under the **CyberMind Source-Disclosed License v1.0 (CMSD-1.0)**.

| File | Language | Status |
|------|----------|--------|
| [LICENCE-CMSD-1.0.md](LICENCE-CMSD-1.0.md) | French | **Authoritative** |
| [LICENSE-CMSD-1.0.en.md](LICENSE-CMSD-1.0.en.md) | English | Informative |

## License Summary

**CMSD-1.0** is a *source-available* license that:

1. **Discloses** the full source code publicly for transparency and audit
2. **Reserves** all commercial, production, and derivative rights
3. **Permits** security research, academic study, and certification audits
4. **Requires** coordinated vulnerability disclosure (90/30 day policy)

## Key Points

### What This License Allows

- Reading, studying, and analyzing the source code
- Compiling in isolated environments for security research
- Publishing audit results and academic citations
- ANSSI CSPN / Common Criteria audits by accredited labs

### What This License Prohibits (without written authorization)

- Production use (commercial, institutional, or regular personal)
- Redistribution of source or binaries
- Creation of derivative works
- Integration into other products or services
- Provision as SaaS/PaaS/IaaS

## IP Reservations

### Patents
The GK·HAM-HASH cryptographic family and related algorithms are patent-pending. Industrial exploitation requires a separate patent license.

### Trademarks
The names **CyberMind**, **SecuBox**, **Gondwana**, and **GK·HAM-HASH** are registered trademarks and may only be used for identification purposes.

## Third-Party Components

Some subdirectories may contain components under different licenses (Apache 2.0, AGPLv3, etc.). These are clearly marked with their own LICENSE files.

| Directory | License | Notes |
|-----------|---------|-------|
| `common/` | CMSD-1.0 | Core SecuBox libraries |
| `packages/` | CMSD-1.0 | SecuBox modules |
| `docs/` | CMSD-1.0 | Documentation |

## Contact

- **Security issues:** security@cybermind.fr
- **License inquiries:** legal@cybermind.fr
- **General:** contact@cybermind.fr

## SPDX Identifier

```
SPDX-License-Identifier: LicenseRef-CMSD-1.0
```

Use this identifier in source file headers:

```python
# SPDX-License-Identifier: LicenseRef-CMSD-1.0
# Copyright (c) 2026 CyberMind — Gérald Kerma
# Source-Disclosed License — All rights reserved except as expressly granted.
# See LICENCE-CMSD-1.0.md for terms.
```

---

*CyberMind — Notre-Dame-du-Cruet, Savoie, France*
*SIREN 409 743 275*