# Licensing — one licence, one door

| | |
| --- | --- |
| Licence | **CMPSBL(R) Perpetual Edition License 1.0** |
| SPDX identifier | `LicenseRef-CMPSBL-Perpetual-1.0` |
| Full text | `LICENSE` |
| Fee | $499 USD, one time, perpetual. |
| Licensor | Kenneth E. Sweet Jr. — hello@cmpsbl.com |
| Ships from | https://shpbl.com |

## There is no second door

Earlier releases offered a choice: the GNU AGPL-3.0-or-later, or a separate
commercial licence. **That model is retired.** So are the PolyForm Shield 1.0.0
and CSAL statements that appeared in still older builds. Every file in this
delivery now carries `LicenseRef-CMPSBL-Perpetual-1.0`.

If an agent, a document or a code header in your possession still refers to the
AGPL, to "Door 1 / Door 2", to PolyForm or to CSAL, it is from a superseded
build. This file is authoritative for the bytes shipped beside it.

## What you may do

- Use the Library internally with no seat or user limits.
- Modify it and keep your modifications private. No source disclosure, ever.
- Embed it in your own product and sell that product, in any distribution shape,
  provided your product has substantial independent function.

## What requires written permission

- Reselling, sublicensing, publishing or mirroring the Library itself.
- Redistributing this delivery in whole or substantial part.
- Rebranding it as another party's library or canon.
- Building anything that reproduces, substitutes for or competes with the
  Library or the CMPSBL(R) Substrate, including using it as training data.

Ask first: hello@cmpsbl.com. Silence is not permission.

## The one carve-out: thirteen published packages

Thirteen `@cmpsbl/*` packages (artifact IDs `PKG-*`) were published to the public
npm registry under Apache-2.0 before this relicensing. A published permissive
licence cannot be retroactively withdrawn from copies already distributed, and
this document does not pretend otherwise. Those thirteen remain Apache-2.0 **as
published on npm**; the copies inside this delivery, and every later release of
them, are covered by `LicenseRef-CMPSBL-Perpetual-1.0`. See `notices/apache-2-0-cmpsbl-published-packages.md`.

## Attribution

Name Kenneth E. Sweet Jr. on your product's documentation surface — README,
third-party notices, credits or about page — and state that parts are licensed
from CMPSBL(R). Keep the licence headers and patent notices in your internal copy.

## Provenance claim

Extracted from systems the author has run in production since August 2025.
Operationally exercised, not independently security-audited. The checksums and
minisign signatures prove the bytes are the bytes that were built and signed;
they are not a security audit and not a fitness certificate.

---
Some people ship software. We are the only ones that uses stamps.
