> **DRAFT TEMPLATE - NOT LEGAL ADVICE.** Prepared as a starting point; have a qualified attorney review and adapt to your jurisdiction and facts before use.

# Process Truth License

Process Truth is distributed as an open-core product. This file governs only the open-source core (the "Core"). It does not govern the proprietary Pro dimension pack, and it does not govern third-party dependencies. Read Sections 3, 4, and 5 below before redistributing, bundling, or building on Process Truth.

---

## 1. MIT License (Open-Core Only)

Copyright (c) 2026 Ellery Wee

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

---

## 2. Scope of the MIT Grant

For the avoidance of doubt, the MIT grant in Section 1 ("Software") covers only the Process Truth open-source core: the source files, modules, and assets distributed under this LICENSE that are not marked or packaged as Pro content and that are not third-party components. The MIT grant does not extend to, and confers no rights in, the items described in Sections 3 and 4.

The phrase "open-core" describes a packaging model in which an MIT-licensed Core is distributed alongside, and may interoperate with, separately licensed proprietary components. Interoperability does not place the proprietary components under the MIT License.

---

## 3. Pro Dimension Pack, NOT Covered by MIT

The Process Truth Pro dimension pack (the "Pro Pack"), including its proprietary discovery dimensions, models, configuration, packaged artifacts, watermarking and per-license cryptographic wrapping, certificate revocation list (CRL) logic, and any documentation distributed specifically for it, is **not** licensed under the MIT License and is **not** part of the "Software" in Section 1.

The Pro Pack is proprietary and is licensed separately and exclusively under the Process Truth Pro End User License Agreement ("EULA-PRO"). No right to use, copy, modify, distribute, sublicense, decompile, reverse engineer, circumvent the license wrapping or watermark, or otherwise exploit the Pro Pack is granted by this LICENSE. All rights in the Pro Pack are reserved by Ellery Wee (the "Author"). Use of the Pro Pack is permitted only under, and subject to, EULA-PRO. If there is any conflict between this LICENSE and EULA-PRO as to the Pro Pack, EULA-PRO controls.

---

## 4. Third-Party Dependencies, Carry Their Own Licenses

Process Truth incorporates or depends on third-party software. Each such component is licensed under its own license terms by its respective copyright holder, not under this LICENSE or EULA-PRO. A listing of those components and their licenses is provided in the file `legal/THIRD-PARTY-LICENSES.md` distributed with Process Truth. You are responsible for reviewing and complying with each third-party license that applies to your use.

### 4.1 Copyleft Notice (pm4py / AGPL-3.0)

One Core dependency, **pm4py**, is licensed under the **GNU Affero General Public License, version 3.0 (AGPL-3.0)**. AGPL-3.0 is a strong copyleft license. Depending on how pm4py is combined, linked, or distributed with other code, AGPL-3.0 obligations (including source-availability and license-compatibility obligations) may attach to the combined or derivative work. AGPL-3.0 goes further than GPL-3.0: it adds a network-use (SaaS) source-disclosure trigger, so making pm4py's functionality available to users over a network can itself require offering the corresponding source, even absent classic distribution. This creates a copyleft-contamination risk that is in tension with both (a) the MIT licensing of the Core and (b) the proprietary licensing of the Pro Pack under EULA-PRO.

In addition, pm4py pulls in a second copyleft transitive dependency, **cvxopt** (licensed **GPL-3.0-or-later**), on Python versions earlier than 3.15. The same isolation analysis applies to cvxopt.

This notice is informational and does not constitute legal advice. The Author and any licensee should obtain qualified legal review and consider mitigation before distributing Process Truth in a form that combines pm4py with MIT-licensed or proprietary code. The subprocess-isolation argument (pm4py invoked only as a separate process owned by the MIT Core, never linked into proprietary code, and never distributed inside the MIT wheel) still holds for the distribution trigger; however, under AGPL-3.0 the network trigger additionally matters if pm4py were ever run as a network service. Mitigation options to evaluate include, without limitation: (i) **process isolation**, invoking pm4py only as a separate process over a defined interface (for example CLI or IPC) rather than linking it into the same program, while ensuring it is not exposed as a network service; (ii) **replacement**, substituting a permissively licensed equivalent; (iii) **dual-sourcing**, structuring the dependency so a permissive path exists; or (iv) **seeking a license exception or commercial relicense** from the pm4py rights holders. The appropriate mitigation depends on the specific build and distribution facts and should be confirmed by counsel.

---

## 5. Relationship to Other Process Truth Legal Documents

This LICENSE is one part of the Process Truth legal suite and is intended to be read together with the other Process Truth documents, including EULA-PRO, the Process Truth Privacy Statement, and `legal/THIRD-PARTY-LICENSES.md`. This LICENSE governs only the open-source Core. It does not modify, waive, or expand any term of EULA-PRO, and it does not create any warranty, support, indemnity, or data-handling obligation on the part of the Author with respect to the Core beyond what the MIT text in Section 1 states.

The MIT warranty disclaimer and limitation of liability in Section 1 apply to the Core "AS IS." Warranties, liability allocation, indemnification, authorized-use and consent conditions, regulatory-compliance allocation, export-control terms, and data-handling provisions for the commercial product are set out in EULA-PRO and the Privacy Statement, not in this file.

---

## 6. Notes for Redistributors

If you redistribute the Core under the MIT License, you must retain the copyright notice and the MIT permission notice from Section 1. You must not represent that the MIT License covers the Pro Pack or any third-party component, and you must not strip, alter, or relicense the Pro Pack, its watermark, or its license wrapping. Distribute the Pro Pack only as permitted by EULA-PRO, and preserve the `legal/THIRD-PARTY-LICENSES.md` file so downstream recipients receive the applicable third-party terms.

---

*End of LICENSE. The Pro Pack is licensed separately under EULA-PRO. Third-party dependencies are licensed under their own terms; see `legal/THIRD-PARTY-LICENSES.md`.*
