Added SPDX

LICENSE

@@ -5,5 +5,14 @@ the associated recipe (.bb file) unless otherwise stated.
 See:
 COPYING.MIT (MIT)
 
+The code in this repository that is not layer metadata is MIT licensed:
+
+  forgetest/    the release acceptance tool (see forgetest/LICENSE)
+  scripts/      the release, install and bench scripts
+  fixture/      the bench actuator firmware, excluding
+                fixture/managed_components/, which carries its own licenses
+
+Every file in those directories states MIT in its own header.
+
 License information for any other files is either explicitly stated
 or defaults to GPL version 2.

fixture/fixture.sh

@@ -1,4 +1,8 @@
 #!/usr/bin/env bash
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
 # forgefixture: build, flash and watch the bench actuator's firmware.
 #
 #   ./fixture.sh env              fixture.env from the example, with a fresh API key

fixture/main/version.h

@@ -1,3 +1,8 @@
+/*
+ * Copyright 2026 514 LLC d/b/a OpenGlow
+ * Written by Scott Wiederhold
+ * SPDX-License-Identifier: MIT
+ */
 /* forgefixture firmware version, reported by GET /. */
 #pragma once
 

fixture/test/run.sh

@@ -1,4 +1,8 @@
 #!/bin/sh
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
 # The host test of the fixture's policy: needs only a C compiler.
 set -e
 cd "$(dirname "$0")"

forgetest/LICENSE

@@ -0,0 +1,23 @@
+ForgeFIRM release acceptance tool (forgetest/) and the bench scripts it
+drives (scripts/bench/).
+
+Copyright 2026 514 LLC d/b/a OpenGlow
+Written by Scott Wiederhold
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished
+to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

forgetest/forgetest.init

@@ -1,4 +1,8 @@
 #!/bin/sh
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
 ### BEGIN INIT INFO
 # Provides:          forgetest
 # Required-Start:    $network forgectrl

forgetest/forgetest/__init__.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """forgetest - the ForgeFIRM release acceptance tool.
 
 A daemon on the dev image (HTTP :8090) that runs the acceptance catalog

forgetest/forgetest/__main__.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """forgetest daemon entry point.
 
   python3 -m forgetest [--port 8090] [--host ::] [--manifest PATH]

forgetest/forgetest/artifact.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The release artifact (acceptance.json / acceptance.md) and its verification.
 
 The exporter serializes the campaign state with, for every catalog test,

forgetest/forgetest/baseline.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The fresh-boot idle state: what every test starts from and leaves behind.
 
 The runner checks the machine against this baseline before a run and

forgetest/forgetest/bench.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The bench diagnostics page: registry of the bench tools and the
 subprocess runner behind the #bench tab.
 

forgetest/forgetest/campaign.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """Campaign rules: which results apply, what is required, and whether a
 release is authorized.
 

forgetest/forgetest/catalog.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The acceptance catalog: test definitions and the registry.
 
 A test is a function decorated with @test(...). The decorator records

forgetest/forgetest/coverage.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """Coverage lint: every source path in the manifest must be selected by
 some test's coverage globs, except the allowlisted non-behavioral paths,
 and every coverage glob must select at least one path of its component.

forgetest/forgetest/fixture.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The bench actuator (forgefixture): the box on the bench network that
 opens the lid loop, pulls the interlock loop and presses the button on
 request, so an operator test can run with nobody in the room.

forgetest/forgetest/hw.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """Hardware and service access for the suite: forgectrl's HTTP API, the
 kernel module's sysfs, the init scripts, and the Grbl TCP port.
 

forgetest/forgetest/log.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The append-only result log (JSONL) and the export helpers.
 
 One JSON object per line under the data directory (default

forgetest/forgetest/manifest.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The image manifest and the domain fingerprint.
 
 /etc/forgefirm-manifest.json (written by forgefirm-image-manifest.bbclass)

forgetest/forgetest/page.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The single page: acceptance tab + bench tab, assembled from ui/ into
 one self-contained response (no external assets). Bootstrap and the
 OpenGlow theme are inlined; theme.css and the vendor/ files are the same

forgetest/forgetest/puls.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """Pulse files for the offline cloud service: a job the machine will run
 without the service having cut it.
 

forgetest/forgetest/runner.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The runner: executes one acceptance test or one bench tool at a time.
 
 Acceptance tests run in a worker thread with a Context: log lines, an

forgetest/forgetest/server.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """HTTP: the page, the JSON API, and the access rules.
 
 Access follows forgectrl's panel (auth.c): the Host header must be an

forgetest/forgetest/suite/__init__.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The acceptance suite: one module per subsystem, imported in display
 order. Each module registers its tests with @catalog.test."""
 

forgetest/forgetest/suite/camera.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """camera.* - the lid camera pipeline through forgectrl."""
 import json
 

forgetest/forgetest/suite/cloud.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """cloud.* - the controller mode switch and the optional Glowforge web-service
 mode (gfcloud daemon, gfhome homing runner). The mode-switch test makes the
 grbl -> cloud -> grbl round trip with the connect-time hunt run lid-open and

forgetest/forgetest/suite/cooling.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """cooling.* - the cooling engine: flow verification through forgectrl's
 diagnostics runner (the same check the fire gate runs), the fan profile
 returning to idle after motion, the gate settings (a value inside the

forgetest/forgetest/suite/forgectrl.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """forgectrl.* - the machine-services daemon's API, access control, and panel."""
 import json
 import os

forgetest/forgetest/suite/image.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """image.* - the post-flash health of the running image (always-required)."""
 import glob
 import gzip

forgetest/forgetest/suite/kernel.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """kernel.* - glowforge.ko safety readbacks and the pulse-engine drills.
 
 The drills are the bench scripts `scripts/bench/gate_a_kernel_drills.py`

forgetest/forgetest/suite/laser.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """laser.* - LIVE laser tests, ported from `scripts/bench/live_fire_drills.py`.
 
 Every test here can emit, except `laser.power-floor`, which only reads

forgetest/forgetest/suite/logs.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """logs.* - unified logging: the log tree, tail, and the sanitized export;
 the routing path (emitters, relays, rendered rules); the level settings."""
 import gzip

forgetest/forgetest/suite/motion.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """motion.* - the motion controller under grblHAL: dry motion, no emission.
 
 Ported from `scripts/bench/pacing_test.py` (protocol-loop pacing) and

forgetest/forgetest/suite/setup.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """setup.* - the first-run setup: the record and the
 controller gate, the advisories, the account and its login, the HTTPS
 boundary, SSH, the cloud switch, the machine's name, and the factory

forgetest/forgetest/suite/setup_dark.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """setup.check-* - the setup's checks (the dark wizards), driven the
 way the page drives them: POST /wiz/<id>/start, GET /wiz/dark polled,
 the prompts answered from here (the bench fixture works the lid and the

forgetest/forgetest/suite/setup_sheet.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """setup.sheet - the setup's sheet (the live wizards) in one run,
 driven the way the page drives them: POST /wiz/<id>/start, GET /wiz/dark
 polled, the prompts answered from here, each burn armed by a press, the

forgetest/forgetest/suite/update.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """update.* - the A/B slot inventory and the firmware verification path."""
 import os
 import re

forgetest/tests/helpers.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """Shared fixtures for the forgetest unit tests: synthetic manifests and
 catalog entries that never touch hardware."""
 import hashlib

forgetest/tests/test_artifact.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 import copy
 import json
 import unittest

forgetest/tests/test_baseline.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The baseline: fixed resting values are restored, preserved values are
 handed back, every deviation is a recorded leftover. Runs against a fake
 sysfs tree; forgectrl is unreachable (service-side checks skip)."""

forgetest/tests/test_bench_registry.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The bench registry against scripts/bench: every python tool is
 registered (or named as not-a-tool), every registered script exists,
 every argument spec builds a command line, every script compiles, and

forgetest/tests/test_campaign.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 import unittest
 
 import helpers

forgetest/tests/test_cloud_needles.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """Every phrase the cloud suite greps for in the gfcloud log must be a
 phrase the pinned cloud app can actually log.
 

forgetest/tests/test_cloud_suite.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The cloud.* job-behavior tests against a fake forgectrl and a replayed
 gfcloud log: the real test functions run under the real runner Context,
 the operator prompts answered - and the standing notices of the machine

forgetest/tests/test_cooling_order.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """cooling.aa-offset-calibrate is registered before the heater tools, so
 a queue runs it first: a heater trial leaves a warm slug circulating past
 the coolant sensors for minutes, and the tool's edges read it as

forgetest/tests/test_cooling_suite.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """cooling.fans-quiet-after-motion and cooling.gate-off replayed host-side
 under the real runner Context against a scripted machine: a fake
 forgectrl (/status fans, /cool/status phase and verdict, /settings with

forgetest/tests/test_fixture.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The bench actuator as the tool sees it.
 
 The fixture is a box on the network that opens the lid loop, pulls the

forgetest/tests/test_image.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 import unittest
 
 from forgetest.suite import image

forgetest/tests/test_kernel_suite.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """wait_hv_off against a scripted charge-pump readback: a chain that
 releases inside the window passes, a chain held past it is the refusal,
 and a chain already off costs no wait."""

forgetest/tests/test_laser_dwell.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The dwell-gap verdict of laser.emission-witness over synthetic trails:
 the button latch judged from the first emission through every sample
 whose readback word shows the laser latch unlocked, both bits from that

forgetest/tests/test_manifest.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 import os
 import unittest
 

forgetest/tests/test_mode.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The controller mode a test declares: the runner puts the machine there
 before the test and the baseline keeps it there afterward.
 

forgetest/tests/test_operator.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The operator channel: notices, `ready`, `act`, and the precheck.
 
 A test asks for the operator's part in a way the page can show before

forgetest/tests/test_page.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The page assembly: the ui/ files inlined in order, the gzipped install
 (what the dev image carries) assembling to the same bytes as a checkout,
 the token placeholder carried exactly once, and a missing marker refused

forgetest/tests/test_queue.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The two queues: what they select, the order they run in, and where
 they stop.
 

forgetest/tests/test_responsiveness.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """What keeps the page answering the operator instead of the timer.
 
 Two things went wrong on the bench and are pinned here:

forgetest/tests/test_server.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """Runner + HTTP API end to end on localhost with a fake catalog and a
 fake bench tool. No hardware, no forgectrl."""
 import json

forgetest/tests/test_setup_dark.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The setup's checks in the catalog: registered as automatic tests with
 no precheck, the takeover ones marked so, every covers map naming the
 check runner; and the check driver itself against the fake daemon: a

forgetest/tests/test_setup_sheet.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The setup's sheet in the catalog: one live test on the button with a
 piece of wood at hand, its covers map naming the live runner, the
 renderer, the sender, the page, and the driver's laser module; and the

forgetest/tests/test_setup_suite.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """The setup.* suite on the host: the registration (ids, kinds, the
 takeover tests, the operator tests' hands), the record builders, the
 machine's name, the cookie parsing, the LED cue, the settle rule for a

forgetest/tests/test_source_bundle.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """scripts/source-bundle.py - the source that a release publishes.
 
 The bundle must hold the source of every recipe of the image whose license

forgetest/tests/test_tree_manifest.py

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 """scripts/manifest-from-tree.py - the workstation/CI mirror of the image
 manifest: recipe pins are read through their pin files, and a layer's
 content hash leaves the pin files out (a component bump is not a platform

meta-forgefirm/classes/forgefirm-image-manifest.bbclass

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # forgefirm-image-manifest.bbclass - assemble /etc/forgefirm-manifest.json
 #
 # Inherited by the ForgeFIRM images. At rootfs postprocess it collects the

meta-forgefirm/classes/forgefirm-manifest.bbclass

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # forgefirm-manifest.bbclass - source fingerprint of one ForgeFIRM component
 #
 # A component recipe that inherits this class records what source it was

meta-forgefirm/conf/distro/forgefirm.conf

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 require conf/distro/include/fslc-base.inc
 
 DISTRO = "forgefirm"

meta-forgefirm/conf/layer.conf

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # We have a conf and classes directory, add to BBPATH
 BBPATH .= ":${LAYERDIR}"
 

meta-forgefirm/recipes-bsp/firmware-imx/firmware-imx_%.bbappend

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # NXP distributes the i.MX VPU/EPDC firmware blobs under its firmware EULA
 # (accepted with ACCEPT_FSL_EULA), so an image carrying those blobs has to
 # carry the license text with them.

meta-forgefirm/recipes-connectivity/openssh/openssh_%.bbappend

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # ForgeFIRM SSH policy, set in the installed files so the release image
 # carries it as built:
 #   PermitRootLogin no          root logs in at the serial console only

meta-forgefirm/recipes-devtools/python/python3-gfhardware.bbappend

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # ForgeFIRM image manifest: source fingerprint of the hardware library
 # (forgefirm-manifest.bbclass in this layer).
 inherit forgefirm-manifest

meta-forgefirm/recipes-devtools/python/python3-gfutilities_%.bbappend

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # ForgeFIRM image manifest: source fingerprint of the cloud-mode service
 # layer (forgefirm-manifest.bbclass in this layer).
 inherit forgefirm-manifest

meta-forgefirm/recipes-devtools/python/python3-urllib3_%.bbappend

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # urllib3's optional pyOpenSSL/cryptography backend is not used here: the cloud
 # client and the machine glue talk TLS through the standard library's ssl
 # module (nothing imports OpenSSL or cryptography). Dropping the two runtime

meta-forgefirm/recipes-extended/fwup/fwup_1.16.0.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 SUMMARY = "Configurable embedded Linux firmware update creator and runner"
 DESCRIPTION = "Applies and creates signed .fw firmware archives. ForgeFIRM \
 uses the factory's own update format: fwup applies ForgeFIRM upgrades and \

meta-forgefirm/recipes-extended/orcania/orcania_2.3.3.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 DESCRIPTION = "Potluck with different functions for C programs (babelouest base library)"
 HOMEPAGE = "https://github.com/babelouest/orcania"
 

meta-forgefirm/recipes-extended/rsyslog/rsyslog/rsyslog.conf

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # /etc/rsyslog.conf - ForgeFIRM
 #
 # rsyslog is the only log writer on the machine. Every ForgeFIRM process

meta-forgefirm/recipes-extended/rsyslog/rsyslog_%.bbappend

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # rsyslog is the ForgeFIRM system logger: the only log writer, one
 # directory per logger under /data/log/forgefirm. This appends the
 # ForgeFIRM /etc/rsyslog.conf (inputs, line format, and the include of

meta-forgefirm/recipes-extended/ulfius/ulfius_2.7.15.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 DESCRIPTION = "Web Framework to build REST APIs, Webservices or any HTTP endpoint in C"
 HOMEPAGE = "https://github.com/babelouest/ulfius"
 

meta-forgefirm/recipes-extended/yder/yder_1.4.20.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 DESCRIPTION = "Logging library for C applications (babelouest)"
 HOMEPAGE = "https://github.com/babelouest/yder"
 

meta-forgefirm/recipes-forgefirm/ffboot/ffboot.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 SUMMARY = "Boot-slot selection and inventory for Glowforge factory hardware"
 DESCRIPTION = "Inventories the bootable partitions (ffboot -l) and switches \
 the boot target by rewriting the saved U-Boot environment with read-back \

meta-forgefirm/recipes-forgefirm/forgectrl/forgectrl-pin.inc

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # forgectrl pin. Bump deliberately after pushing forgectrl changes; keep
 # only SRCREV and PV here - the image manifest leaves *-pin.inc out of the
 # layer content hash because the component entry already identifies the

meta-forgefirm/recipes-forgefirm/forgectrl/forgectrl.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 DESCRIPTION = "System Control Daemon for ForgeFIRM powered Glowforge"
 HOMEPAGE = "https://github.com/openglow-org/forgectrl"
 

meta-forgefirm/recipes-forgefirm/forgefirm-app/forgefirm-app-pin.inc

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # forgefirm-app pin (python3-gfhardware repository, forgefirm-app/ tree).
 # Bump deliberately (AUTOREV is not reproducible); keep only SRCREV and PV
 # here - the image manifest leaves *-pin.inc out of the layer content hash

meta-forgefirm/recipes-forgefirm/forgefirm-app/forgefirm-app.inc

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # Shared fetch for the ForgeFIRM web-service apps (gfhome, python3-ffmachine,
 # gfcloud). Their sources live in the forgefirm-app/ directory of the
 # python3-gfhardware repository.

meta-forgefirm/recipes-forgefirm/forgefirm-app/gfcloud.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 DESCRIPTION = "Full Glowforge web-service controller daemon for ForgeFIRM (cloud mode)"
 
 require forgefirm-app.inc

meta-forgefirm/recipes-forgefirm/forgefirm-app/gfhome.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 DESCRIPTION = "One-shot Glowforge web-service homing for ForgeFIRM"
 
 require forgefirm-app.inc

meta-forgefirm/recipes-forgefirm/forgefirm-app/python3-ffmachine.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 DESCRIPTION = "Shared ForgeFIRM web-service hardware-machine glue (gfhome + gfcloud)"
 
 require forgefirm-app.inc

meta-forgefirm/recipes-forgefirm/forgefirm-banner/files/forgefirm-banner.init

@@ -1,4 +1,8 @@
 #!/bin/sh
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
 ### BEGIN INIT INFO
 # Provides:          forgefirm-banner
 # Required-Start:    $network

meta-forgefirm/recipes-forgefirm/forgefirm-banner/forgefirm-banner.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 SUMMARY = "ForgeFIRM console banner: the control panel addresses in /etc/issue"
 DESCRIPTION = "Keeps an address block in the serial-console login banner \
 (/etc/issue): one control panel URL per global address of wlan0 and eth0. \

meta-forgefirm/recipes-forgefirm/forgefirm-hostname/files/forgefirm-hostname.init

@@ -1,4 +1,8 @@
 #!/bin/sh
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
 ### BEGIN INIT INFO
 # Provides:          forgefirm-hostname
 # Required-Start:    $local_fs

meta-forgefirm/recipes-forgefirm/forgefirm-hostname/forgefirm-hostname.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 SUMMARY = "ForgeFIRM hostname: forgefirm-<xxxx> from the MAC address"
 DESCRIPTION = "Names the machine forgefirm-<xxxx>, where xxxx is the last \
 four hex digits of the wlan0 MAC address (eth0 on a machine with no WiFi). \

meta-forgefirm/recipes-forgefirm/forgefirm-keys/forgefirm-keys.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 SUMMARY = "Firmware verification public keys"
 DESCRIPTION = "Trust anchors for firmware archive verification: the \
 ForgeFIRM release-signing public key (verifies release downloads and \

meta-forgefirm/recipes-forgefirm/forgefirm-logging/files/forgefirm-logging.init

@@ -1,4 +1,8 @@
 #!/bin/sh
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
 ### BEGIN INIT INFO
 # Provides:          forgefirm-logging
 # Required-Start:    $local_fs

meta-forgefirm/recipes-forgefirm/forgefirm-logging/forgefirm-logging.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 SUMMARY = "ForgeFIRM logging tree: rsyslog rules at boot, rotation"
 DESCRIPTION = "Boot-time glue for the ForgeFIRM logging tree \
 (/data/log/forgefirm/<logger>/): renders the per-logger rsyslog rules \

meta-forgefirm/recipes-forgefirm/forgefirm-persist/forgefirm-persist.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 SUMMARY = "ForgeFIRM boot state on /data: the timestamp and the random seed"
 DESCRIPTION = "The two files the poky init scripts keep across boots, \
 pointed at /data/forgefirm because the rootfs is read-only: the boot \

meta-forgefirm/recipes-forgefirm/forgefirm-users/files/forgefirm-root.sh

@@ -1,3 +1,8 @@
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
+
 # ForgeFIRM: an interactive root shell (the serial console, or SSH on
 # the dev image) starts with a warning. Non-interactive shells (scp,
 # rsync, ssh with a command) print nothing.

meta-forgefirm/recipes-forgefirm/forgefirm-users/files/forgefirm-users.init

@@ -1,4 +1,8 @@
 #!/bin/sh
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
 ### BEGIN INIT INFO
 # Provides:          forgefirm-users
 # Required-Start:    $local_fs

meta-forgefirm/recipes-forgefirm/forgefirm-users/forgefirm-users.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 SUMMARY = "ForgeFIRM operator accounts: record render and the root shell warning"
 DESCRIPTION = "Renders the account record (/data/forgefirm/users, written \
 by forgectrl) into the system account files at boot and on reload. The \

meta-forgefirm/recipes-forgefirm/forgetest/forgetest.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 SUMMARY = "ForgeFIRM release acceptance tool (dev image)"
 DESCRIPTION = "Runs the release acceptance catalog against the machine from a \
 self-contained web page (HTTP :8090), keeps the append-only result log under \
@@ -5,7 +7,7 @@ self-contained web page (HTTP :8090), keeps the append-only result log under \
 carries the bench diagnostics page. Installed only on the dev image."
 HOMEPAGE = "https://github.com/openglow-org/forgefirm"
 LICENSE = "MIT"
-LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda2f7b4f302"
+LIC_FILES_CHKSUM = "file://forgetest/LICENSE;md5=6657cce322ff8bed163c02ceffb4c60c"
 
 # The tool's canonical home is forgetest/ in this repo; the bench scripts
 # it drives live in scripts/bench/. Both are packaged from the same tree
@@ -16,6 +18,7 @@ FILESEXTRAPATHS:prepend := "${THISDIR}/../../../:"
 # host unit tests and their caches would otherwise enter the fetch checksum
 # and rebuild the dev image after a workstation test run.
 SRC_URI = " \
+    file://forgetest/LICENSE \
     file://forgetest/forgetest/ \
     file://forgetest/forgetest.init \
     file://scripts/bench/ \

meta-forgefirm/recipes-forgefirm/grblhal-glowforge/grblhal-glowforge-pin.inc

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 # grblHAL-glowforge pin. Bump deliberately after pushing grblHAL-glowforge
 # changes; keep only SRCREV and PV here - the image manifest leaves
 # *-pin.inc out of the layer content hash because the component entry

meta-forgefirm/recipes-forgefirm/grblhal-glowforge/grblhal-glowforge.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 DESCRIPTION = "grblHAL motion controller for the Glowforge factory board"
 HOMEPAGE = "https://github.com/openglow-org/grblHAL-glowforge"
 

meta-forgefirm/recipes-forgefirm/grblhal-glowforge/grblhal-glowforge/grblhal.init

@@ -1,4 +1,8 @@
 #!/bin/sh
+# Copyright 2026 514 LLC d/b/a OpenGlow
+# Written by Scott Wiederhold
+# https://community.openglow.org
+# SPDX-License-Identifier:    MIT
 ### BEGIN INIT INFO
 # Provides:          grblhal
 # Required-Start:    $local_fs

meta-forgefirm/recipes-forgefirm/images/forgefirm-image-dev.bb

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 require forgefirm-image.bb
 
 DESCRIPTION = "OpenGlow/ForgeFIRM development image for Glowforge"