Standalone Portal Open-Source Licence

Pre-publication draft: this document is not an approved public-beta contract. Publication and open registration remain disabled.

Document: portal-oss-license

Version: 2026-08-29-public-beta-draft-1

Effective date: 2026-08-29

Canonical localized-content SHA-256: a57d2e4dd4d5d85a537ceff4ce3d6406595b970cbdb5fb1111d58a377ef40f9e

Approved multilingual document SHA-256: 174854c1f3b5b63b1874e9937e03eabe885ec57866bbf5d1d1faec6b765ce464

Licensing: Will be added later

Controlling licence

The exact LICENSE.txt shipped with the standalone Portal source and binary package is the Apache License, Version 2.0. That licence text controls the copyright grant and conditions.

• The source export and binary package must contain the same verified Apache-2.0 text.
• Required copyright, attribution, NOTICE, and modified-file obligations remain with every recipient and redistributor.
• Third-party components remain governed by their own included licences and notices.

Exact scope

Apache-2.0 covers only the standalone Portal and wrappers expressly included in the approved public-source inventory. It does not cover GutMask Community, Corporate, SaaS, private monorepo history, signing or licence keys, GutMask trademarks, or unrelated assets.

• A history-free source export is still the real source for the published Portal files.
• GitHub is source storage only and is not binary, signing, build, release, or admission authority.
• A Portal package cannot authorize or unlock Community or Corporate product features.

Binaries, verification, and no trademark grant

Official standalone binaries require the exact Portal-specific public-beta signing profile, offline verification, checksums, SBOM, notices, and admission route. Apache-2.0 permission alone is not proof that a binary came from GutMask.

• No right to use GutMask names, logos, or domains to imply endorsement is granted.
• Modified distributions must not misrepresent origin, security review, or official support.
• Windows may show Unknown publisher without a separately trusted Authenticode certificate.

Consumers and immediate delivery

Where mandatory consumer law applies to the delivery relationship, the applicable 14-day right is preserved. Before immediate delivery during that period, the admission flow separately records the request to begin supply and acknowledgement of any lawful loss of withdrawal right.

• The Apache-2.0 licence itself is not replaced by website terms.
• The acknowledgement is not cookie consent, Privacy Notice consent, or acceptance of proprietary product terms.
• Questions: Will be added later

Draft publication boundary

This page is a draft summary, not a substitute for the full Apache-2.0 text. Publication still requires a completed Portal rights audit, exact source and binary inventories, licence parity, owner approval, and live readback.

• Governing-law basis for the delivery relationship: Will be added later
• Mandatory consumer and copyright law remains controlling.
• No present public binary availability is claimed.