PAPER XI FREEZE LICENSE AND FONT AUDIT | PASS | 21 October 2026

The accepted baseline has no original-project root grant or current PDF license
sidecars. Under the author's October 20 authorization, the additive staging tree
supplies MIT for original software/machine-readable material/code listings and
CC BY4.0 for original writing/figures/available editable writing. Earlier
original-project unassigned/restricted statements are superseded. Third-party
terms and source attributions remain separate and unchanged.

Copy license_additions/ contents into the release root: 36 new paths, no
baseline overwrites. This includes two full project grant texts, LICENSE.md,
LICENSE_STATUS.json, five PDF sidecars, 25 font notice payloads and their
provenance. Two font notices copy already supplied baseline notices exactly;
23 are additional current-family notice texts. The five full/current reader
PDFs and all baseline source, evidence and existing license bytes are unchanged.

All 32 current resource names / 237 distinct font-program records were parsed.
Each has an installed-name candidate with at least three matching listed
metadata fields. No current Type3/name-only record remains. This does not assert
exact whole-font/source-build byte identity for subset programs. Current faces
include modern and older URW, Pazo, AMS/Euler, Latin Modern Mono10, DejaVu/Arev,
STIX and BaKoMa Cmsy10. Existing URW/DejaVu notices are retained; the additional
Matplotlib DejaVu notice preserves Tavmjong Bah/Arev permissions. Generic GPL2
text is reference only; no unstated GPL version is assigned to old URW/Pazo.

All 44 loose PDFs and 173 historical PDF members parse. Their bounded family
inventory has no additional resource name. No standalone font binary is bundled,
including the preserved historical archive. Exact historical font origins and
missing Block02 editable source remain explicitly outside this audit.

Reader ZIP: include the whole staged LICENSES tree, LICENSE.md/status and all
five PDF sidecars. Notice inventory paths are relative to the package root and
resolve. Detailed audit-evidence references explicitly point to the full ZIP.
No external dependency cache or original third-party source is relabeled under
the original-project grants.

The first metadata pass needed wider current installed-font candidate coverage
and compact PostScript syntax handling. The first license staging failed with
FileNotFoundError from an incorrect Matplotlib license parent path; corrected,
then regenerated and verified every additive path/hash. No baseline file changed.
Unresolved findings: none within this bounded notice/inventory scope.
