PAPER VII BOUNDED LICENSE AND THIRD-PARTY NOTICE AUDIT
21 October 2026

Baseline read only. 3,262 files inventoried; no root LICENSE; no standalone font binaries; both retained ZIPs contain no standalone font binaries or explicit notice members.

The user-authorized MIT original-code/machine-readable and CC BY 4.0 original-writing/figures/editable-writing grant has no conflicting original-material grant identified in this inventory. Third-party resources and notices remain under their own terms. This is a file-based bounded review, not an ownership adjudication.

All three current readers use URW Nimbus Sans/P052, Latin Modern/LMMono, DejaVu, and (traditional reader only) STIXNonUnicode-Italic. Existing notices cover URW with its PDF embedding exception, Latin Modern GUST/LPPL, and DejaVu Bitstream Vera/public-domain changes. The missing STIX notice is repaired by an exact copy from the installed Matplotlib distribution: STIX-FONT-LICENSE.txt, SHA256 bab3d31dfef07f483624f2f65f2711e76065b8e7273278b1c071ede1041c9959. Its copyright/family/style/version/PostScript records match those retained in the current PDF embedded subset. No PDF/font/scientific bytes were modified.

The original projector-seed-quantum 1.0.0 wheel names Komorebi P. and contains its own modules; NumPy/SciPy/Matplotlib are declared external dependencies. No embedded wheel license existed. Apply the root grant explicitly to original material in retained distributions without modifying preserved archives.

Historical no-new-grant text is at provenance/pre_proofread_2026-10-18/README.txt:78. Retain it as dated provenance and explicitly supersede it for original materials in current root notices.

All 150 baseline PDFs were opened for font-resource inventory without errors. Historical PDFs include additional AMS/Computer Modern/CM-Super/Yhcmex resources. Those remain third-party and outside the original-material grant; this review does not claim a comprehensive historical font-source certification.

Evidence: LICENSE_AUDIT.json, PDF_FONT_INVENTORY.json, EMBEDDED_STIX_METADATA.json. Initial broad search output was truncated by duplicate manifest/license hits; targeted inspections completed without unresolved read failures.
