secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 22:07:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
dec01bb952
secubox-deb/LICENSING.md
CyberMind-FR 0556b13ae4 license: Add CMSD-1.0 (CyberMind Source-Disclosed) license 
Replace Apache-2.0 with CMSD-1.0, a source-available license designed
for transparency and ANSSI CSPN certification compatibility while
preserving all commercial rights.

New files:
- LICENCE-CMSD-1.0.md: French authoritative version
- LICENSE-CMSD-1.0.en.md: English informative translation
- LICENSING.md: License documentation and SPDX guidance

Updated README.md with prominent license notice showing:
- What users CAN do (study, audit, research, cite)
- What users CANNOT do (production use, redistribution, derivatives)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-06 09:49:17 +02:00

2.5 KiB
Raw Blame History

Licensing — SecuBox-DEB

Main License: CMSD-1.0

This repository is licensed under the CyberMind Source-Disclosed License v1.0 (CMSD-1.0).

File Language Status
LICENCE-CMSD-1.0.md French Authoritative
LICENSE-CMSD-1.0.en.md English Informative

License Summary

CMSD-1.0 is a source-available license that:

  1. Discloses the full source code publicly for transparency and audit
  2. Reserves all commercial, production, and derivative rights
  3. Permits security research, academic study, and certification audits
  4. Requires coordinated vulnerability disclosure (90/30 day policy)

Key Points

What This License Allows

  • Reading, studying, and analyzing the source code
  • Compiling in isolated environments for security research
  • Publishing audit results and academic citations
  • ANSSI CSPN / Common Criteria audits by accredited labs

What This License Prohibits (without written authorization)

  • Production use (commercial, institutional, or regular personal)
  • Redistribution of source or binaries
  • Creation of derivative works
  • Integration into other products or services
  • Provision as SaaS/PaaS/IaaS

IP Reservations

Patents

The GK·HAM-HASH cryptographic family and related algorithms are patent-pending. Industrial exploitation requires a separate patent license.

Trademarks

The names CyberMind, SecuBox, Gondwana, and GK·HAM-HASH are registered trademarks and may only be used for identification purposes.

Third-Party Components

Some subdirectories may contain components under different licenses (Apache 2.0, AGPLv3, etc.). These are clearly marked with their own LICENSE files.

Directory License Notes
common/ CMSD-1.0 Core SecuBox libraries
packages/ CMSD-1.0 SecuBox modules
docs/ CMSD-1.0 Documentation

Contact

SPDX Identifier

SPDX-License-Identifier: LicenseRef-CMSD-1.0

Use this identifier in source file headers:

# SPDX-License-Identifier: LicenseRef-CMSD-1.0
# Copyright (c) 2026 CyberMind — Gérald Kerma
# Source-Disclosed License — All rights reserved except as expressly granted.
# See LICENCE-CMSD-1.0.md for terms.

CyberMind — Notre-Dame-du-Cruet, Savoie, France SIREN 409 743 275