PAPER VIII BOUNDED LICENSING AND THIRD-PARTY NOTICE REVIEW
21 October 2026

Baseline read only. 2,711 baseline files inventoried. All three current PDFs parsed; 12 unique font resource names. Existing URW (with PDF embedding exception), Latin Modern (GUST/LPPL-based) and DejaVu (Bitstream Vera/public-domain changes) notices retained. No standalone font binaries found in baseline or its three embedded ZIPs. No current STIX font resource.

Current traditional PDF additionally embeds MSAM10. The installed primary TeX Live PFB explicitly grants SIL OFL 1.1 and identifies AMS copyright 1997, 2009 and reserved name MSAM10. Actual embedded CFF retains identical copyright/reserved name, version 003.002 and full name. Exact primary header copied to AMS-FONT-NOTICE.txt. Exact generic OFL 1.1 text copied from installed Matplotlib notice to SIL-OFL-1.1.txt; no STIX copyright was attributed to AMS. Source paths, hashes and embedded metadata are in LICENSE_AUDIT.json and EMBEDDED_AMS_METADATA.json.

No conflicting original-material grant identified. The authorized MIT original-code/machine-readable and CC BY 4.0 original-writing/figures/editable-writing split excludes fonts, dependencies and third-party cited material. Add the prepared notices and root grants in the new freeze, preserving current PDF/scientific bytes.

Outer delivery grant scope: original delivery/START_HERE.md under CC BY 4.0; original delivery/DELIVERY_MANIFEST.json under MIT; original material within retained delivery/Komorebi_Paper_VIII_Final_2026-10-10.zip under the same split, with third-party exclusions and original ZIP bytes preserved.

Current root README.txt:69 says no new license grant. Supersede it in new freeze. Preserve dated provenance/closure_2026-10-10/preclosure_sources/README.txt:62 unchanged, explicitly historical.

Of 151 PDF paths, 150 nonempty PDFs were parsed for resource inventory. The retained zero-byte historical QA diagnostic editable/traditional/qa/font_diagnostic/diagnostic.pdf cannot parse and is explicitly excluded from current reader certification. Historical PDFs contain additional AMS/CM/CM-Super/Yhcmex/Pazo/olderURW resources; their full origin was not certified in this current-reader audit. They remain third-party.

Lookup history: Debian Licenses.gz had unavailable symlink target; resolved by direct primary PFB/embedded metadata and installed generic OFL text. No unresolved in-scope finding remains. Baseline unchanged.
