From e9fb90bc7d9a451d08d076a2646251bf0ecdff27 Mon Sep 17 00:00:00 2001 From: Richard Abrich Date: Thu, 27 Aug 2026 23:54:18 -0400 Subject: [PATCH] docs: stop claiming a pull request signs the CLA The CLA this file points at is published in openadapt-flow#420. Assent is by signature, never by implication, so drop the sentence that says opening a pull request agrees to it. Add the corporate CLA link and state what governs a contribution until the CLA check is enabled. Requires review by qualified legal counsel before it is relied upon. Co-Authored-By: Claude Opus 5 Signed-off-by: Richard Abrich --- CONTRIBUTING.md | 41 +++++++++++++++++++++++++++-------------- 1 file changed, 27 insertions(+), 14 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index b603c72..8df2e36 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -5,26 +5,39 @@ keep the company able to steward it. ## Licensing of your contributions -This repository's code is MIT-licensed. So that OpenAdapt (MLDSAI Inc.) can -continue to steward and, if ever necessary, relicense the combined work, every -contribution must be covered by BOTH of the following: +This repository's code is MIT-licensed, and your contribution goes in under the +MIT License. Two things cover it. -1. **Developer Certificate of Origin (DCO) sign-off (required now).** Add a - `Signed-off-by` line to every commit certifying you wrote the change or have - the right to submit it under the project license: +1. **Developer Certificate of Origin (required now).** Add a `Signed-off-by` + line to every commit, certifying you wrote the change or that you have the + right to submit it under the project license: ``` git commit -s -m "fix: ..." ``` - This produces `Signed-off-by: Your Name `. See - https://developercertificate.org for the full DCO text. - -2. **Contributor License Agreement (CLA).** By opening a pull request you agree - to the OpenAdapt Contributor License Agreement. The canonical CLA text lives - at [`openadapt-flow/CLA.md`](https://github.com/OpenAdaptAI/openadapt-flow/blob/main/CLA.md). - When the CLA Assistant check is enabled on this repository, first-time - contributors sign it once by commenting on their PR. + This produces `Signed-off-by: Your Name `. The full text is + at https://developercertificate.org. + +2. **Contributor License Agreement (published, not yet enforced).** The + canonical text is + [`openadapt-flow/CLA.md`](https://github.com/OpenAdaptAI/openadapt-flow/blob/main/CLA.md) + for individuals, and + [`openadapt-flow/CCLA.md`](https://github.com/OpenAdaptAI/openadapt-flow/blob/main/CCLA.md) + for companies whose employees contribute on company time. It gives MLDSAI + Inc. an explicit copyright and patent license, which the MIT License alone + doesn't provide, and it keeps the option of relicensing the combined work + later. + + You don't agree to the CLA by opening a pull request. Nothing is implied. + You agree when you sign, either through the automated CLA check once that + check is turned on for this repository, or by email. Until the check is on, + the DCO sign-off and the MIT License are what govern your contribution. + +OpenAdapt is open-core. MLDSAI Inc. sells proprietary products built on this +code, including a hosted control plane, and your contribution may end up in +them. The MIT License already permits that. The CLA says it out loud so nobody +is surprised. ## Pull request guidelines