# MIT License

(with SDuX Clarification Notice)

---

## MIT License (Standard Text)

Copyright (c) 2026 NextGen Luminary

Permission is hereby granted, free of charge, to any person obtaining a copy  
of this software and associated documentation files (the “Software”), to deal  
in the Software without restriction, including without limitation the rights  
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell  
copies of the Software, and to permit persons to whom the Software is  
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all  
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR  
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,  
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE  
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER  
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,  
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE  
SOFTWARE.

---

## SDuX Clarification Notice (Non-License Commentary)

**IMPORTANT:**  
The following sections are **clarifying notices** provided for transparency, auditability, ecosystem boundary clarity, acquisition readiness, and architectural separation within the SDuX ecosystem. They **do not modify, amend, replace, restrict, supersede, or reinterpret** the MIT License above.

If any conflict is perceived between this clarification notice and the MIT License text above, the MIT License text **controls in all cases**.

The MIT License text above applies **only** to the specific SDuX repositories and npm packages explicitly designated as open source by NextGen Luminary.

---

## 1. Scope of This License

This MIT License applies exclusively to the following SDuX components:

### SDuX Framework Source

- @sdux-vault/core
- @sdux-vault/add-ons
- @sdux-vault/shared
- @sdux-vault/devtools/tooling
- @sdux-vault/devtools/ui
- @sdux-vault/ui/web-components

### SDuX Open-Source npm Packages

- Identical package names as listed above when distributed via npm

No other SDuX components are licensed under the MIT License unless explicitly stated in writing by NextGen Luminary.

The MIT License does **not** apply to any repository, package, module, runtime, binary, service, distribution artifact, hosted system, entitlement service, or enforcement subsystem that is not expressly designated as MIT-licensed.

---

## 2. Explicit Exclusion of Proprietary Components

For the avoidance of doubt:

This MIT License **does not apply** to:

- @sdux-vault/engine
- SDuX Vault runtime components
- Persistence modules
- Encryption modules
- Licensing enforcement modules
- Telemetry systems
- Commercial-only features
- Runtime gating mechanisms
- Deterministic license validation infrastructure
- Any proprietary binaries, services, network services, entitlement servers, or internal source code

Use of proprietary SDuX components is governed exclusively by their applicable commercial or community licenses.

No rights—express or implied—are granted to proprietary components by virtue of this MIT License.

In particular, this MIT License does **not** grant rights to:

- Proprietary runtime enforcement systems
- Deterministic gating or validation logic
- License timeout mechanisms
- Runtime license tokens
- Production-gating systems
- Commercial entitlement APIs
- Proprietary network services or validation endpoints
- Internal orchestration engines not explicitly released under MIT

---

## 3. No Transitive or Implied Licensing

This MIT License:

- Does **not** grant rights to dependencies that are not themselves MIT-licensed
- Does **not** extend rights to runtime engines, orchestrators, execution layers, or enforcement systems
- Does **not** create any obligation for NextGen Luminary to open-source additional components
- Does **not** grant rights to use proprietary licensing APIs, enforcement surfaces, runtime validation endpoints, or commercial network services outside their intended licensed boundaries

Each SDuX package is licensed independently and must be evaluated on its own terms.

No transitive, derivative, architectural, structural, or implied licensing rights arise merely because MIT-licensed components may interoperate with proprietary components.

Interoperability does not imply relicensing, source disclosure obligations, or any grant of rights to non-MIT components.

---

## 4. Use in Commercial and Enterprise Environments

The MIT-licensed SDuX framework components:

- May be used in commercial, enterprise, and production environments
- May be modified and redistributed in accordance with the MIT License
- May be included in proprietary products, subject to MIT attribution requirements

This permissive licensing is intentional and designed to:

- Encourage adoption
- Support long-term maintainability
- Reduce legal friction during audits and acquisitions

No additional enterprise license is required for the MIT-designated components themselves.

---

## 5. Separation From Third-Party Extensions

Third-party extensions, add-ons, Behaviors, Controllers, integrations, or other modules developed by independent Vendors are **independently licensed**.

This MIT License:

- Does **not** apply to third-party extensions unless explicitly stated by their respective authors
- Does **not** grant rights to any Vendor-developed Licensed Extension
- Does **not** modify, override, validate, or enforce any Vendor commercial license

MIT-licensed SDuX components may be used to build extensions.  
However:

- Any proprietary enforcement components used by such extensions remain separately licensed
- Runtime gating systems remain governed by their applicable community or commercial licenses
- Validation, entitlement, or enforcement behavior implemented outside MIT-designated repositories remains subject to its own governing license

No open-source contamination, copyleft effect, reciprocal licensing obligation, or forced disclosure requirement is created by virtue of integrating MIT-licensed SDuX components with proprietary or third-party components.

---

## 6. No Grant of Rights to Commercial Services or APIs

For clarity:

This MIT License does **not** grant rights to:

- Access proprietary commercial APIs
- Access proprietary network services
- Access entitlement servers
- Access validation infrastructure
- Access hosted SDuX services
- Bypass production-gating or enforcement systems

Any such rights, if available, are governed exclusively by their respective commercial or community licenses.

---

## 7. Trademark and Branding Clarification

This MIT License does **not** grant any trademark rights in the names, logos, product branding, or service marks of NextGen Luminary or SDuX, except as required for reasonable and customary attribution consistent with the MIT License.

Use of SDuX or NextGen Luminary trademarks in product names, marketplace listings, or marketing materials may require separate permission.

Nothing in this clarification notice modifies the trademark rights (or lack thereof) under the MIT License; it is provided solely for clarity and avoidance of confusion.

---

## 8. Relationship to Other SDuX Licenses

This MIT License operates independently from:

- NGL Commercial License 1.0
- SDuX / Vault Community License
- Any enterprise or custom licensing agreements

Possession or use of MIT-licensed SDuX components does **not** grant access to or rights under those other licenses.

Likewise, possession of proprietary SDuX licenses does not alter the terms of the MIT License for designated open-source components.

Each license operates independently and must be interpreted separately.

---

## 9. Assignment and Acquisition Clarity

The MIT License is inherently **assignable** and **transferable**.

Accordingly:

- Use of MIT-licensed SDuX components **does not prevent acquisition**
- No special approval is required to transfer ownership of products containing these components
- Auditors and acquiring entities may rely on standard MIT interpretations without exception

This aligns with industry-standard expectations for permissive open-source frameworks.

---

## 10. Audit and Due-Diligence Statement

During security reviews, license audits, or acquisition due diligence:

- MIT-licensed SDuX components should be reviewed as standard permissive open-source software
- No copyleft, reciprocity, source disclosure, or distribution obligations apply beyond standard MIT attribution
- No viral or contaminating license effects exist
- No patent retaliation, field-of-use restrictions, sublicense limitations, or production-gating obligations exist beyond those inherent in MIT

These characteristics are intentional and designed to be acquisition-safe and enterprise-friendly.

---

## 11. No Modification of License Terms

Nothing in this clarification notice:

- Modifies the MIT License text
- Adds restrictions to the MIT License
- Removes rights granted by the MIT License
- Expands rights beyond those granted by the MIT License

If any conflict is perceived between this clarification notice and the MIT License text above, the MIT License text **controls**.

---

## 12. Entire Notice

This document consists of:

1. The unmodified MIT License text
2. A non-binding clarification notice for transparency, architectural boundary clarity, compliance certainty, and acquisition readiness

Together, they provide a complete and accurate description of how MIT licensing is applied within the SDuX ecosystem.

---

**END OF MIT LICENSE (WITH SDUX CLARIFICATION NOTICE)**


---

# SDuX / Vault Community License

**Copyright © 2026 NextGen Luminary (“NGL”)**  
All rights reserved.

This **SDuX / Vault Community License** (“**License**”) is a legal agreement between **NextGen Luminary**, its affiliates, or licensors (“**Licensor**”), and the individual or legal entity exercising rights under this License (“**Licensee**”).

This License governs the use of the **SDuX Vault Runtime** and related community-distributed runtime components provided by Licensor under a **community-first, production-gated licensing model**.

By installing, accessing, or using the Software, Licensee agrees to be bound by the terms of this License.

---

## 1. Purpose and Intent

The SDuX Vault Community License is designed to:

- Enable unrestricted **development, evaluation, and non-production use** of the SDuX Vault Runtime;
- Provide a **clear, enforceable boundary** between community usage and commercial production usage;
- Protect Licensor’s proprietary runtime, enforcement mechanisms, and commercial interests;
- Remain **audit-friendly**, **acquisition-safe**, and **legally unambiguous**.

This License is intentionally structured to remove implied rights, hidden obligations, or ambiguous usage assumptions.

---

## 2. Definitions

For purposes of this License:

- **“Software”** means the SDuX Vault Runtime and related runtime packages distributed by Licensor under this License, including but not limited to runtime modules, persistence modules, and encryption modules.
- **“Community Use”** means use of the Software for local development, testing, evaluation, proof-of-concept work, education, or non-commercial internal experimentation.
- **“Production Use”** means deployment of the Software in live, customer-facing, revenue-generating, regulated, or operational environments.
- **“Commercial License”** means a separate, paid license agreement issued by Licensor authorizing Production Use.
- **“Object Code”** means compiled or executable forms of the Software.
- **“Change of Control”** means a merger, acquisition, reorganization, or sale of substantially all assets of Licensee.
- **“Licensed Extension”** means a Behavior, Controller, module, add-on, or other software component that integrates with the Software and declares a runtime license requirement or gating behavior through SDuX Vault or related enforcement mechanisms.
- **“Extension Author”** or **“Vendor”** means any third party that develops, distributes, licenses, or otherwise makes available a Licensed Extension for use with the Software.
- **“License Payload”** means vendor-defined data supplied at runtime for purposes of validating a Licensed Extension, including but not limited to tokens, cryptographic signatures, entitlement metadata, headers, or other opaque validation artifacts.
- **“Validation Result”** means the boolean approval or denial outcome reported by a Licensed Extension to SDuX Vault runtime enforcement mechanisms.
- **“FeatureCell”** means a discrete execution unit, pipeline element, or runtime-bound functional component within the Software that may be subject to license validation or gating behavior.
- **“Terminal State”** means a non-recoverable runtime condition entered following denial or failed validation, which requires full reinitialization of affected components.
- **“Validation Timeout”** or **“License Timeout Window”** means the configured period during which a Validation Result must be reported before automatic denial occurs.
- **“Deterministic Enforcement”** means the intentional, programmatic license validation behavior whereby activation, denial, or terminal state transitions occur based on defined runtime rules without discretionary override.
- **“Runtime License Token”** means any token, key, or structured data used to represent runtime licensing state or entitlement within the Software.

---

## 3. Grant of License (Community Use)

Subject to the terms and conditions of this License, Licensor grants Licensee a **non-exclusive**, **non-transferable**, **non-sublicensable**, **revocable** license to:

- Install and use the Software solely in **Object Code form**;
- Use the Software solely for **Community Use**;
- Reproduce the Software only as reasonably necessary for permitted use.

No rights are granted for Production Use under this License.

---

## 4. Production Use and Commercial Licensing

Production Use of the Software **is not permitted** under this License.

To deploy, operate, or rely on the Software in Production Use, Licensee must obtain and maintain a valid **Commercial License** from Licensor. Production Use without a valid Commercial License constitutes a material breach of this License.

Nothing in this License obligates Licensor to offer or continue offering Commercial Licenses.

---

## 5. Third-Party Extensions and Vendor Licensing Separation

The Software may permit integration with Licensed Extensions developed or distributed by Vendors.

Licensee acknowledges and agrees that:

- Any Vendor’s commercial license, subscription, entitlement, or validation approval for a Licensed Extension is separate from, and does not modify, this License.
- A valid Vendor license for a Licensed Extension does **not** authorize any Production Use of the Software.
- Production Use of the Software **still requires** a separate Commercial License from Licensor, regardless of any Vendor license status, payment, or entitlement.

Licensor:

1. Does not license, distribute, control, or warrant any Licensed Extension unless expressly identified as being distributed by Licensor under this License or a Commercial License;
2. Does not validate, issue, manage, or enforce any Vendor’s commercial license, and does not guarantee entitlement correctness for any Licensed Extension;
3. Has no obligation to provide support, billing services, entitlement tracking, dispute resolution, revenue processing, or marketplace operation services for Vendor licensing or activation issues.

All commercial relationships between Licensee and any Vendor are solely between those parties, and use of Vendor Licensed Extensions is at Licensee’s sole risk.

Nothing in this License creates a partnership, joint venture, agency relationship, revenue-sharing obligation, or marketplace operator duty between Licensor and any Vendor.

---

## 6. Restrictions

Except as expressly permitted by this License, Licensee shall not, and shall not permit any third party to:

- Use the Software in Production Use without a Commercial License;
- Modify, adapt, translate, or create derivative works of the Software;
- Reverse engineer, decompile, disassemble, or attempt to derive source code;
- Redistribute, sublicense, rent, lease, or make the Software available to third parties;
- Offer the Software as part of a hosted service, managed service, or platform;
- Remove or alter proprietary notices, license notices, or technical safeguards;
- Circumvent or interfere with licensing, telemetry, or enforcement mechanisms;
- Interfere with, spoof, or manipulate runtime license validation flows for Licensed Extensions, including any call paths that report a Validation Result;
- Inject, fabricate, or tamper with License Payload data, Runtime License Tokens, or validation inputs for the purpose of bypassing enforcement or causing unauthorized activation;
- Attempt to alter, disable, or circumvent Deterministic Enforcement, Validation Timeout behavior, License Timeout Windows, Terminal State transitions, or other defined runtime gating mechanisms;
- Extract, reuse, or repurpose proprietary licensing, telemetry, enforcement subsystems, or FeatureCell gating logic outside the scope of authorized use under this License;
- Use the Software to operate, enable, or provide a competing licensing enforcement infrastructure, marketplace, or platform that integrates with, depends on, or derives from proprietary enforcement components of the Software, except as expressly permitted in writing by Licensor.

Any use outside the scope of this License is expressly prohibited.

---

## 7. Ownership and Intellectual Property

The Software is **licensed, not sold**.

All right, title, and interest in and to the Software, including all intellectual property rights, remain exclusively with Licensor. Licensee acquires no ownership interest in the Software under this License.

No implied licenses are granted under any patents, copyrights, trademarks, or trade secrets.

Nothing in this License grants any right to use Licensor’s trademarks, service marks, trade names, or branding except as necessary for truthful, nominative reference consistent with Community Use.

---

## 8. Assignment and Change of Control

This License **is assignable in its entirety**, without the consent of Licensor, solely in connection with a Change of Control, provided that:

1. The successor entity agrees in writing to be bound by all terms of this License; and
2. The assignment includes all copies of the Software in Licensee’s possession.

This License does **not** permit sublicensing, redistribution, or transfer outside a Change of Control.

---

## 9. Compliance and Verification

Licensor may reasonably verify compliance with this License, including confirmation that Production Use is not occurring without a Commercial License. Such verification shall be limited in scope and designed to minimize disruption.

Nothing in this section shall be construed as creating any service-level agreement, uptime commitment, or validation response-time obligation.

---

## 10. Platform Enforcement and Deterministic Operation

Licensee acknowledges that the Software includes Deterministic Enforcement mechanisms and runtime gating behavior.

Where the Software enforces licensing and gating (including for Licensed Extensions and any associated FeatureCell activation decisions):

- A Licensed Extension may be denied if it reports a negative Validation Result;
- If a Validation Result is not reported within the configured Validation Timeout or License Timeout Window, the Software may deny activation automatically;
- Late Validation Results may be ignored;
- Denial may cause affected FeatureCells, runtime components, execution units, or pipeline elements to enter a Terminal State;
- Terminal State conditions may not be reversible without full reinitialization.

Licensee agrees that such behavior constitutes intended license enforcement and gating functionality and shall not be deemed a defect, failure of performance, service interruption, or breach of warranty.

Licensor does not guarantee validation latency, entitlement response time, network availability, or successful completion of any validation process.

Licensor shall not be liable for denial, suspension, non-activation, Terminal State outcomes, or related execution impacts resulting from Vendor validation outcomes, Vendor service unavailability, Vendor misconfiguration, License Payload errors, Runtime License Token corruption, Validation Result failures, timeout behavior, or cryptographic implementation errors by Vendors.

---

## 11. Vendor Responsibilities and Validation Separation

Licensee acknowledges that:

- The Software does not validate, parse, decrypt, or verify License Payloads for any Licensed Extension;
- The Software does not guarantee Vendor uptime, network availability, entitlement service responsiveness, or cryptographic correctness;
- The Software does not retry, recover, or compensate for Vendor validation failures;
- Vendor misconfiguration, malformed payloads, insecure key management, or cryptographic implementation errors may cause denial or Terminal State outcomes under the Software’s Deterministic Enforcement rules;
- Vendors are solely responsible for the security, correctness, and lawful implementation of their licensing, cryptographic, and entitlement systems.

Licensor assumes no responsibility for the security posture, cryptographic integrity, or operational availability of any Vendor system.

---

## 12. Extension Policies and Certification Reservation

Licensor reserves the right, at its sole discretion, to publish compatibility guidelines, extension certification programs, security policies, or distribution standards applicable to Licensed Extensions.

Nothing in this License obligates Licensor to approve, certify, host, distribute, or continue supporting any Licensed Extension.

---

## 13. Termination

This License is effective until terminated.

Licensor may terminate this License immediately upon Licensee’s breach of any term, including unauthorized Production Use. Upon termination:

- All rights granted under this License immediately cease;
- Licensee must discontinue all use of the Software;
- All copies of the Software must be destroyed or permanently deleted.

Sections relating to ownership, restrictions, disclaimers, limitation of liability, and governing law shall survive termination.

---

## 14. Disclaimer of Warranties

**THE SOFTWARE IS PROVIDED “AS IS” AND “AS AVAILABLE.”**  
LICENSOR DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

LICENSOR DOES NOT WARRANT THAT ANY LICENSED EXTENSION, VALIDATION SYSTEM, ENTITLEMENT SERVICE, RUNTIME LICENSE TOKEN, OR CRYPTOGRAPHIC IMPLEMENTATION WILL OPERATE WITHOUT INTERRUPTION, ERROR, DENIAL, LATENCY, OR TERMINATION. LICENSOR DISCLAIMS ALL RESPONSIBILITY FOR VENDOR ENTITLEMENT SERVICES, CRYPTOGRAPHIC VALIDATION SYSTEMS, OR REMOTE LICENSE VERIFICATION INFRASTRUCTURE, AND FOR ANY EXECUTION IMPACTS RESULTING FROM VALIDATION FAILURES, TIMEOUTS, OR TERMINAL STATE TRANSITIONS.

---

## 15. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL LICENSOR BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR EXEMPLARY DAMAGES, INCLUDING LOSS OF DATA, LOSS OF PROFITS, LOSS OF GOODWILL, OR BUSINESS INTERRUPTION.

LICENSOR’S TOTAL LIABILITY ARISING UNDER THIS LICENSE SHALL NOT EXCEED THE AMOUNT PAID BY LICENSEE TO LICENSOR FOR THE SOFTWARE, IF ANY, IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

LICENSOR SHALL NOT BE LIABLE FOR ANY DAMAGES ARISING FROM THIRD-PARTY LICENSE VALIDATION FAILURE, VALIDATION TIMEOUT, ENTITLEMENT REVOCATION, LICENSE PAYLOAD MISCONFIGURATION, RUNTIME LICENSE TOKEN CORRUPTION, CRYPTOGRAPHIC IMPLEMENTATION ERRORS, OR LICENSED-EXTENSION-RELATED TERMINAL STATE EVENTS.

---

## 16. Governing Law and Venue

This License shall be governed by and construed in accordance with the laws of the jurisdiction in which Licensor is incorporated, without regard to conflict-of-law principles.

Any legal action arising out of or relating to this License shall be brought exclusively in the courts located within that jurisdiction, and the parties consent to personal jurisdiction and venue therein.

---

## 17. Entire Agreement

This License constitutes the entire agreement between the parties regarding the Software and supersedes all prior or contemporaneous agreements, understandings, or communications relating to the Software.

No amendment or waiver of this License shall be effective unless in writing and signed by Licensor.

---

**END OF SDuX / VAULT COMMUNITY LICENSE**

---

# NGL Commercial License 1.0

**Copyright © 2026 NextGen Luminary (“NGL”)**  
All rights reserved.

This NGL Commercial License 1.0 (“**License**”) is a legal agreement between **NextGen Luminary**, its affiliates, or licensors (“**Licensor**”), and the individual or legal entity exercising rights under this License (“**Licensee**”).

This License governs the use of proprietary SDuX software components, including but not limited to the SDuX Engine, SDuX Engine npm distributions, SDuX Vault runtime components, and related proprietary source code, as identified and distributed by Licensor.

By installing, accessing, or using the Software, Licensee agrees to be bound by the terms of this License.

---

## 1. Definitions

For purposes of this License:

- **“Software”** means the proprietary SDuX components provided by Licensor under this License, in source code form, object code form, or binary distribution, as applicable.
- **“Object Code”** means compiled or executable versions of the Software, including npm-distributed binaries.
- **“Source Code”** means the human-readable form of the Software, where access is explicitly granted.
- **“Internal Use”** means use of the Software solely within Licensee’s organization for its own internal business purposes.
- **“Production Use”** means deployment of the Software in live, customer-facing, revenue-generating, or operational environments.
- **“Change of Control”** means a merger, acquisition, reorganization, or sale of substantially all assets of Licensee.
- **“Licensed Extension”** means a Behavior, Controller, module, or other software component that integrates with the Software and declares a runtime license requirement through SDuX Vault or related enforcement mechanisms.
- **“Extension Author”** or **“Vendor”** means any third party that develops, distributes, or licenses a Licensed Extension for use with the Software.
- **“License Payload”** means vendor-defined data supplied at runtime for purposes of validating a Licensed Extension, including but not limited to tokens, cryptographic signatures, entitlement metadata, or other opaque validation artifacts.
- **“Validation Result”** means the boolean approval or denial outcome reported by a Licensed Extension to SDuX Vault runtime enforcement mechanisms.
- **“FeatureCell”** means a discrete execution unit, pipeline element, or runtime-bound functional component within the Software that may be subject to license validation or gating behavior.
- **“Terminal State”** means a non-recoverable runtime condition entered following denial or failed validation that requires full reinitialization of affected components.
- **“Validation Timeout”** or **“License Timeout Window”** means the configured period during which a Validation Result must be reported before automatic denial occurs.
- **“Deterministic Enforcement”** means the intentional, programmatic license validation behavior whereby activation, denial, suspension, or terminal state transitions occur based on defined runtime rules without discretionary override.
- **“Runtime License Token”** means any token, key, credential, or structured data representing runtime licensing state or entitlement within the Software.

---

## 2. Grant of License

Subject to the terms and conditions of this License, Licensor hereby grants Licensee a **non-exclusive**, **non-transferable**, **non-sublicensable** license to:

- Use the Software solely in **Object Code form** (unless Source Code access is explicitly granted by Licensor);
- Use the Software solely for **Internal Use** and, where applicable, **Production Use** in accordance with Licensor’s commercial terms;
- Install and execute the Software only on systems owned or controlled by Licensee.

No rights are granted except as expressly stated in this License.

---

## 3. Third-Party Extensions and Ecosystem Separation

The Software may permit integration with Licensed Extensions developed or distributed by third parties.

Licensor:

1. Does not license, distribute, or control any Licensed Extension unless expressly identified as such;
2. Makes no representations or warranties regarding compatibility, functionality, entitlement correctness, security, or operational availability of any third-party Licensed Extension;
3. Does not validate, issue, manage, or enforce third-party commercial licenses;
4. Has no obligation to provide support, billing services, entitlement tracking, revenue processing, dispute resolution, or marketplace operation services for third-party Licensed Extensions.

All commercial relationships between Licensee and any Extension Author are solely between those parties.

Use of third-party Licensed Extensions is at Licensee’s sole risk.

Nothing in this License creates a partnership, joint venture, agency relationship, revenue-sharing obligation, fiduciary duty, or marketplace operator responsibility between Licensor and any Extension Author or Vendor.

---

## 4. Restrictions

Except as expressly permitted by this License, Licensee shall not, and shall not permit any third party to:

- Modify, adapt, translate, or create derivative works of the Software;
- Reverse engineer, decompile, disassemble, or otherwise attempt to derive source code from the Software;
- Redistribute, resell, lease, sublicense, or make the Software available to any third party;
- Use the Software to provide hosted, managed, or service-bureau offerings;
- Circumvent, disable, or interfere with license enforcement mechanisms or technical safeguards;
- Remove or alter proprietary notices, labels, or marks;
- Interfere with, spoof, or manipulate runtime license validation flows, including any call paths that report a Validation Result;
- Inject, fabricate, tamper with, or misrepresent License Payload data or Runtime License Tokens for the purpose of bypassing enforcement or causing unauthorized activation;
- Attempt to alter, disable, or circumvent Deterministic Enforcement, Validation Timeout behavior, License Timeout Windows, Terminal State transitions, or other defined runtime gating mechanisms;
- Extract, reuse, reverse engineer, or repurpose proprietary enforcement logic, telemetry systems, FeatureCell gating logic, or validation infrastructure outside the scope of authorized use under this License;
- Use the Software to operate, enable, or provide a competing licensing enforcement infrastructure or marketplace that derives from proprietary enforcement components of the Software.

Any use of the Software outside the scope of this License constitutes a material breach.

---

## 5. Ownership and Intellectual Property

The Software is **licensed, not sold**.

All right, title, and interest in and to the Software, including all intellectual property rights therein, are and shall remain exclusively with Licensor. Licensee acquires no ownership interest in the Software by virtue of this License.

No implied licenses are granted under any patents, copyrights, trademarks, or trade secrets of Licensor.

Nothing in this License grants any right to use Licensor’s trademarks, service marks, trade names, or branding except as necessary for truthful reference consistent with authorized use.

---

## 6. Assignment and Change of Control

This License **is assignable in its entirety**, without the consent of Licensor, **solely** in connection with a Change of Control, provided that:

1. The successor entity agrees in writing to be bound by all terms of this License; and
2. The assignment includes all copies of the Software in Licensee’s possession.

Any other assignment, delegation, or transfer without Licensor’s prior written consent is void.

Nothing in this section grants any right to sublicense, redistribute, or relicense the Software.

---

## 7. Compliance and Audit

Licensee agrees to use the Software in compliance with this License and all applicable laws. Licensor may, upon reasonable notice, request written certification of compliance or usage scope solely to verify adherence to this License.

Nothing in this section creates any service-level agreement, uptime commitment, validation latency guarantee, or operational availability obligation.

---

## 8. Platform Enforcement and Deterministic Operation

Licensee acknowledges that the Software includes Deterministic Enforcement mechanisms and runtime gating behavior.

Where a Licensed Extension requires runtime validation:

- Failure to report a Validation Result within the configured Validation Timeout or License Timeout Window may result in automatic denial;
- A negative Validation Result may cause affected runtime components, FeatureCells, or execution units to enter a Terminal State;
- Late Validation Results may be ignored;
- Terminal denial states may not be reversible without full reinitialization.

Licensee agrees that such behavior constitutes intended license enforcement and gating functionality and shall not be deemed a defect, failure of performance, service interruption, or breach of warranty.

Licensor does not guarantee validation latency, entitlement response time, network availability, or successful completion of any third-party validation process.

Licensor shall not be liable for denial, suspension, non-activation, Terminal State outcomes, or related execution impacts resulting from third-party license validation outcomes, Vendor service unavailability, License Payload errors, Runtime License Token corruption, or cryptographic implementation errors by Vendors.

Vendors are solely responsible for the secure design, implementation, and operation of their cryptographic, entitlement, and validation systems.

---

## 9. Security and Ecosystem Integrity

Licensor reserves the right, where reasonably necessary to address a material security risk, platform integrity concern, legal compliance requirement, or system stability issue, to:

1. Suspend distribution of proprietary components that present material security risk;
2. Issue updates that modify enforcement behavior or security posture;
3. Restrict compatibility with extensions that compromise security, violate documented platform policies, or materially degrade system stability.

Nothing in this section shall be interpreted as granting Licensor arbitrary termination rights unrelated to breach, nor as creating an obligation to monitor or police third-party extensions.

---

## 10. API Evolution and Compatibility

Licensor may modify internal APIs, enforcement mechanisms, runtime integration points, or compatibility requirements in future versions of the Software.

Licensor does not guarantee backward compatibility with any third-party Licensed Extension unless expressly agreed in writing.

Licensor reserves the right to publish compatibility guidelines, extension certification programs, or security requirements applicable to integrations with the Software.

---

## 11. Termination

This License shall remain in effect until terminated.

Licensor may terminate this License immediately if Licensee breaches any term of this License. Upon termination:

- All rights granted to Licensee shall immediately cease;
- Licensee must discontinue all use of the Software;
- All copies of the Software must be destroyed or permanently deleted.

Sections relating to ownership, restrictions, disclaimers, limitation of liability, governing law, and ecosystem separation shall survive termination.

---

## 12. Disclaimer of Warranties

**THE SOFTWARE IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTY OF ANY KIND.**  
LICENSOR DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

LICENSOR DOES NOT WARRANT THAT THIRD-PARTY LICENSED EXTENSIONS, VALIDATION SYSTEMS, ENTITLEMENT SERVICES, RUNTIME LICENSE TOKENS, OR CRYPTOGRAPHIC IMPLEMENTATIONS WILL OPERATE WITHOUT INTERRUPTION, ERROR, DENIAL, LATENCY, OR TERMINATION. LICENSOR DISCLAIMS ALL RESPONSIBILITY FOR THIRD-PARTY ENTITLEMENT SERVICES, CRYPTOGRAPHIC VALIDATION SYSTEMS, OR REMOTE LICENSE VERIFICATION INFRASTRUCTURE.

---

## 13. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL LICENSOR BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR EXEMPLARY DAMAGES, INCLUDING LOST PROFITS, LOSS OF DATA, LOSS OF GOODWILL, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

LICENSOR’S TOTAL LIABILITY UNDER THIS LICENSE SHALL NOT EXCEED THE AMOUNT PAID BY LICENSEE FOR THE SOFTWARE, IF ANY, IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

LICENSOR SHALL NOT BE LIABLE FOR ANY DAMAGES ARISING FROM THIRD-PARTY LICENSE VALIDATION FAILURE, VALIDATION TIMEOUT, ENTITLEMENT REVOCATION, LICENSE PAYLOAD MISCONFIGURATION, RUNTIME LICENSE TOKEN CORRUPTION, CRYPTOGRAPHIC IMPLEMENTATION ERRORS, OR EXTENSION-RELATED TERMINAL DENIAL EVENTS.

---

## 14. Governing Law and Venue

This License shall be governed by and construed in accordance with the laws of the jurisdiction in which Licensor is incorporated, without regard to conflict-of-law principles.

Any legal action arising out of or relating to this License shall be brought exclusively in the courts located within that jurisdiction, and the parties hereby consent to personal jurisdiction and venue therein.

---

## 15. Entire Agreement

This License constitutes the entire agreement between the parties regarding the Software and supersedes all prior or contemporaneous agreements, understandings, or communications, whether written or oral, relating to the Software.

No amendment or waiver of this License shall be effective unless in writing and signed by Licensor.

---

**END OF NGL COMMERCIAL LICENSE 1.0**