PAPER XII LICENSE AND FONT AUDIT | PASS | 21 October 2026

Forty additive wrapper files are staged. They include full original-author MIT
and CC BY 4.0 texts, three PDF notices, twenty-seven current font notice payloads
(two exact copies of already present full notices), three bounded historical
supplements and an exact copy of existing Mathlib Apache 2.0 terms.

Five inherited project LICENSE notices explicitly assign no new manuscript
license. Their bytes remain unchanged. The author's current grant supersedes
that original-project status only. Five Mathlib Apache license copies and all
DejaVu/Latin Modern notices retain their original hashes. Project grants do not
relicense fonts, dependencies, quotations or third-party articles.

All thirty current font names / sixty-three distinct program records parsed.
Every program has an installed name candidate and at least three exact listed
metadata matches, with explicit octal unescaping where noted. There are no
current Type3/name-only records. Metadata matches are not exact whole-font
source/build identity. The current face set needed three additional installed
candidates (URW bold italic, EUFM7 and LMMono9); the first coverage gap and its
resolution are retained as harness history, not a baseline defect.

The wider selected baseline has 426 loose PDF paths and 668 recursively retained
ZIP PDF occurrences, all parsed. Twenty-three ZIP occurrences contain no
standalone font binaries. Repeated extracted/container copies remain distinct
occurrences. The nine inherited font exclusions are preserved exactly.

Historical CM-Super and Yhcmex are not current-reader faces. Their observed
headers and primary CTAN family metadata are supplied with full LPPL reference
text and explicit lineage/access limits. Original CM-Super README/COPYING and
Yhmath package-specific LICENSE retrievals failed; no missing permission text,
GPL version, font embedding exception or old font license lineage is invented.
Current package metadata does not certify those historical embedded programs.

Copy the whole license_additions tree to the frozen wrapper root. Its forty
paths do not overwrite core/. Copy LICENSE.md/status and the complete LICENSES
tree into the smaller reader package. Copy the three LICENSES/PDF_NOTICES files
unchanged adjacent to their PDFs. Their references say distribution root and
work for both layouts. Detailed audit paths are explicitly full-ZIP-only.
No baseline, PDF, embedded-font or scientific bytes were changed. No current
extraction/candidate-match issue remains unresolved; historical limits are
listed separately in LICENSE_AUDIT.json and the family source-limit notice.
