Skip to content
Blockchain LabTHE VENTURE STUDIO

Provenance

Every line you ship has to point at a source you are allowed to use.

This release records repository, SPDX status, tier, and the day it was checked. It does not record a commit, because none was pinned.

  • Prefer the project’s own repository. A fork is not the project unless you have a reason you can write down.
  • Pin a commit or a release before you depend on it. Then generate a real SBOM from that lockfile.
  • Label generated scaffolding as generated. Label an adaptation as an adaptation and keep the required notice.
  • Do not train on private repositories or on a customer’s upload.
  • Do not paste large parts of a repository into a blueprint. This site does not.
  • When in doubt, link — do not copy. The rule is the export policy.