diff --git a/.changeset/config.json b/.changeset/config.json
index 14a4764..ee41aa8 100644
--- a/.changeset/config.json
+++ b/.changeset/config.json
@@ -3,10 +3,10 @@
   "changelog": false,
   "commit": false,
   "fixed": [
-    ["@devslab-kr/dds-tokens", "@devslab-kr/dds-css", "@devslab-kr/dds-icons", "@devslab-kr/dds-solid", "@devslab-kr/site-kit"]
+    ["@devslab/dds-tokens", "@devslab/dds-css", "@devslab/dds-icons", "@devslab/dds-solid", "@devslab/site-kit"]
   ],
   "linked": [],
-  "access": "restricted",
+  "access": "public",
   "baseBranch": "main",
   "updateInternalDependencies": "patch",
   "ignore": ["@devslab/compatibility-canary"]
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1a5934a..559fa38 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,4 +1,4 @@
-name: Release restricted packages
+name: Release public packages
 
 on:
   push:
@@ -7,7 +7,7 @@ on:
 
 permissions:
   contents: read
-  packages: write
+  id-token: write
 
 jobs:
   publish:
@@ -18,8 +18,8 @@ jobs:
       - uses: actions/setup-node@v7
         with:
           node-version: 24
-          registry-url: https://npm.pkg.github.com
-          scope: "@devslab-kr"
+          registry-url: https://registry.npmjs.org
+          scope: "@devslab"
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm exec playwright install --with-deps chromium
@@ -38,17 +38,5 @@ jobs:
       - run: pnpm run verify:site-kit:release
       - run: pnpm release
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Check package visibility
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        shell: bash
-        run: |
-          packages=(dds-tokens dds-css dds-icons dds-solid site-kit)
-          for package in "${packages[@]}"; do
-            visibility="$(gh api "orgs/devslab-kr/packages/npm/${package}" --jq '.visibility')"
-            if [[ "${visibility}" != "internal" ]]; then
-              echo "::warning title=Package visibility::@devslab-kr/${package} is ${visibility}; change it to Internal in package settings."
-              echo "- [ ] Set \`@devslab-kr/${package}\` visibility to **Internal**: https://github.com/orgs/devslab-kr/packages/npm/${package}/settings" >> "$GITHUB_STEP_SUMMARY"
-            fi
-          done
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
diff --git a/.npmrc.example b/.npmrc.example
index b9d99b5..71b9bac 100644
--- a/.npmrc.example
+++ b/.npmrc.example
@@ -1,2 +1 @@
-@devslab-kr:registry=https://npm.pkg.github.com
-//npm.pkg.github.com/:_authToken=${GITHUB_TOKEN}
+@devslab:registry=https://registry.npmjs.org
diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..6ee9f10
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,74 @@
+DevsLab Source-Available License 1.0
+
+Copyright (c) 2026 DevsLab. All rights reserved.
+
+This license governs the DDS software, design tokens, components, icons,
+documentation, and other materials distributed with this license (the
+"Software").
+
+1. Permitted use
+
+Subject to this license, DevsLab grants you a limited, worldwide,
+non-exclusive, non-transferable, revocable, royalty-free right to:
+
+- download and install unmodified copies of the Software;
+- use and execute the Software for internal or commercial applications;
+- compile, minify, tree-shake, and bundle unmodified Software solely as a
+  technical part of building an application; and
+- distribute the resulting object code only as an inseparable part of that
+  application and not as a standalone library, design system, component kit,
+  template, or asset collection.
+
+Normal application configuration through documented public APIs, design-token
+overrides, CSS custom properties, and component properties is permitted and is
+not considered modification of the Software.
+
+2. Restrictions
+
+Except where applicable law does not allow the restriction, you may not:
+
+- modify, adapt, translate, reverse engineer, or create derivative works of the
+  Software itself;
+- publish, republish, sublicense, sell, rent, host, or redistribute the
+  Software or any modified version as a standalone package or downloadable
+  collection;
+- use the Software or a substantial portion of it to create or operate a
+  competing general-purpose design system, UI kit, component library, icon
+  library, token library, template marketplace, or hosted equivalent;
+- remove or alter copyright, license, attribution, or provenance notices; or
+- use DevsLab names, logos, product marks, or trade dress except to make a
+  truthful statement that an application uses the Software.
+
+No patent, trademark, design, or branding rights are granted except the
+copyright permissions stated in Section 1.
+
+3. Ownership and feedback
+
+The Software is licensed, not sold. DevsLab and its licensors retain all
+right, title, and interest in the Software. You grant DevsLab a perpetual,
+worldwide, irrevocable, royalty-free right to use feedback you voluntarily
+provide about the Software.
+
+4. Termination
+
+This license terminates automatically if you breach it. Upon termination, you
+must stop using and distributing the Software and delete all copies under your
+control. Sections 2, 3, 5, and 6 survive termination.
+
+5. Disclaimer and limitation of liability
+
+THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE, TITLE, AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY LAW,
+DEVSLAB WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL,
+CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS,
+REVENUE, OR BUSINESS, ARISING FROM OR RELATED TO THE SOFTWARE.
+
+6. Governing law
+
+This license is governed by the laws of the Republic of Korea, excluding
+conflict-of-law rules. The Seoul Central District Court has exclusive
+jurisdiction over disputes arising from this license.
+
+This is a source-available license, not an open-source license approved by the
+Open Source Initiative.
diff --git a/README.ko.md b/README.ko.md
index 395584d..440c9a5 100644
--- a/README.ko.md
+++ b/README.ko.md
@@ -3,10 +3,8 @@
 🌐 [English](README.md)
 
 데브스랩 제품군 (devslab.kr, Linq 패밀리, 이후의 앱들) 을 위한 디자인 언어 —
-웹과 모바일이 공유하는 하나의 토큰·규칙 세트.
-구조는 [토스 디자인 시스템 (TDS)](https://tossmini-docs.toss.im/tds-react-native/)
-를 참조 모델로 하되 프레임워크 중립적이다: 코어는 토큰 + CSS 이고
-React · Vue · Ionic · React Native 는 소비자다.
+웹과 모바일이 공유하는 프레임워크 중립적 토큰·컴포넌트·규칙 세트다.
+코어는 토큰 + CSS 이고 React · Vue · Ionic · React Native 는 소비자다.
 
 ## 구성
 
@@ -15,11 +13,11 @@ React · Vue · Ionic · React Native 는 소비자다.
 | [`docs/design-system.ko.md`](docs/design-system.ko.md) | 규칙 명세 (v0): 원칙, 아키텍처, 파운데이션, 컴포넌트 계약, 거버넌스 |
 | [`docs/decisions.md`](docs/decisions.md) | 결정 로그 — 파운데이션·아키텍처 결정과 근거 |
 | [`tokens/`](tokens/) | 디자인 토큰 소스 ([W3C 포맷](https://design-tokens.github.io/community-group/format/)): 원시 팔레트, 라이트/다크 시맨틱 매핑, 타이포·간격·라운드·그림자·모션 |
-| [`packages/dds-tokens/`](packages/dds-tokens/) | `@devslab-kr/dds-tokens` — 토큰 빌드 파이프라인: `tokens.css`, Tailwind v4 `@theme` + v3 preset, `tokens.ts` (RN·런타임), `ionic.css` |
-| [`packages/dds-css/`](packages/dds-css/) | `@devslab-kr/dds-css` — CSS 컴포넌트 레이어, 스펙 §4.3 v1 인벤토리 (Button, IconButton, TextField, Textarea, Select, Checkbox/Radio, Switch, Badge, Chip, Avatar, Spinner/Skeleton, Divider, Card, ListRow, Tabs, Dialog, Toast, Tooltip, EmptyState); 가이드는 [`docs/components.ko.md`](docs/components.ko.md) |
-| [`packages/dds-icons/`](packages/dds-icons/) | `@devslab-kr/dds-icons` — 아이콘 세트: 코어 40종(24 그리드·1.6 스트로크) + devslab.kr `site-` 7종. SVG 파일·스프라이트·path 데이터 맵 3형태 출하 |
-| [`packages/dds-solid/`](packages/dds-solid/) | `@devslab-kr/dds-solid` — controlled/uncontrolled 상태, SSR·hydration, 키보드, 포커스, 수명주기 계약을 갖춘 SolidJS 접근성 primitive |
-| [`packages/site-kit/`](packages/site-kit/) | `@devslab-kr/site-kit` — 엄격한 14개 로케일 i18n, SEO/GEO 생성기, TanStack Start 메타데이터 어댑터, 접근 가능한 SolidJS 공통 셸을 담은 restricted 내부용 공개 사이트 인프라 |
+| [`packages/dds-tokens/`](packages/dds-tokens/) | `@devslab/dds-tokens` — 토큰 빌드 파이프라인: `tokens.css`, Tailwind v4 `@theme` + v3 preset, `tokens.ts` (RN·런타임), `ionic.css` |
+| [`packages/dds-css/`](packages/dds-css/) | `@devslab/dds-css` — CSS 컴포넌트 레이어, 스펙 §4.3 v1 인벤토리 (Button, IconButton, TextField, Textarea, Select, Checkbox/Radio, Switch, Badge, Chip, Avatar, Spinner/Skeleton, Divider, Card, ListRow, Tabs, Dialog, Toast, Tooltip, EmptyState); 가이드는 [`docs/components.ko.md`](docs/components.ko.md) |
+| [`packages/dds-icons/`](packages/dds-icons/) | `@devslab/dds-icons` — 아이콘 세트: 코어 40종(24 그리드·1.6 스트로크) + devslab.kr `site-` 7종. SVG 파일·스프라이트·path 데이터 맵 3형태 출하 |
+| [`packages/dds-solid/`](packages/dds-solid/) | `@devslab/dds-solid` — controlled/uncontrolled 상태, SSR·hydration, 키보드, 포커스, 수명주기 계약을 갖춘 SolidJS 접근성 primitive |
+| [`packages/site-kit/`](packages/site-kit/) | `@devslab/site-kit` — 엄격한 14개 로케일 i18n, SEO/GEO 생성기, TanStack Start 메타데이터 어댑터, 접근 가능한 SolidJS 공통 셸을 담은 공개 제품 사이트 인프라 |
 | [`preview/index.html`](preview/index.html) | 파운데이션·컴포넌트 미리보기 (단일 파일, 브라우저에서 바로 열림 — `components.html`, `icons.html`도 함께) |
 | [`brand/index.html`](brand/index.html) | 브랜드 아이덴티티 가이드: 로고 규정, Electric Cyan, 모티프, 보이스 & 톤 |
 
@@ -39,7 +37,7 @@ pnpm 워크스페이스. `pnpm install` 후:
 - `pnpm verify` — 빌드 + 토큰 검증 + 문서·preview↔토큰 불일치 검사 (CI와 동일)
 - `pnpm storybook` — 컴포넌트·파운데이션 스토리 (:6006, 툴바에서 테마 전환);
   정적 사이트는 `pnpm build-storybook` (CI에서도 빌드 검증)
-- `pnpm verify:names` — 비공개 `@devslab-kr/*` 스코프에서 벗어난 패키지명을 거부
+- `pnpm verify:names` — 패키지명·라이선스·공개 레지스트리 설정 드리프트를 거부
 - `pnpm verify:foundation` — 코어 검사와 Storybook 빌드, CJK·RTL·키보드,
   200% 확대, 고대비 모드, 모션 감소, 터치 타깃, axe 브라우저 검사
 - `pnpm verify:release` — 패키지를 실제로 묶어 임시 신규 소비자에서 불러오고
@@ -50,20 +48,18 @@ pnpm 워크스페이스. `pnpm install` 후:
   `verify:site-kit:release` — 정확한 로케일·카탈로그 계약, 공통 UI 동작,
   다국어 검색 문서, 패키징·신규 소비자·publish dry-run 게이트
 
-다섯 internal 패키지는 restricted이며 Changesets의 lockstep 그룹으로 릴리스한다. 방향성
+다섯 공개 패키지는 Changesets의 lockstep 그룹으로 릴리스한다. 방향성
 아이콘에는 `dds-icon--directional`을 사용하며 mirror/유지 목록은
-`@devslab-kr/dds-icons/direction-policy.json`으로 함께 배포한다.
+`@devslab/dds-icons/direction-policy.json`으로 함께 배포한다.
 
-JavaScript 패키지 이름은 조직 공통 규칙을 따른다. 공개 패키지는 npmjs의
-`@devslab/*`, restricted 내부 패키지는 GitHub Packages의 `@devslab-kr/*`를
-사용한다. 로컬 설치는 `.npmrc.example`을 복사하고 `read:packages` 권한의
-GitHub 토큰을 제공한다. 릴리스 워크플로는 저장소 `GITHUB_TOKEN`을 사용하며,
-최초 배포 후 GitHub 설정에서 패키지 가시성을 Private에서 Internal로 바꾼다.
+배포 가능한 DDS 패키지는 모두 공개 npm의 `@devslab/*`를 사용하며 DevsLab
+Source-Available License 1.0을 따른다. compatibility canary는 비공개·미배포로
+유지한다. 릴리스는 npm provenance와 저장소 `NPM_TOKEN` 시크릿을 사용한다.
 
 ## 로드맵
 
 우선순위는 [`docs/backlog.md`](docs/backlog.md)에. 패키지는 소비자가 생길
 때만 만든다 (명세 §8):
-`@devslab-kr/dds-tokens` (✅ 2026-08-13) → `dds-css` v1 인벤토리 (Core 6종 ✅ 2026-08-13, +13종 ✅ 2026-08-15) →
+`@devslab/dds-tokens` (✅ 2026-08-13) → `dds-css` v1 인벤토리 (Core 6종 ✅ 2026-08-13, +13종 ✅ 2026-08-15) →
 AskLinq 적용 → `dds-icons` (✅ 2026-08-15) → `dds-solid` + `site-kit` → 모바일 방향에 따라 `dds-native` (RN) 또는 Ionic
 테마 매핑.
diff --git a/README.md b/README.md
index 25bc9b5..b939c2f 100644
--- a/README.md
+++ b/README.md
@@ -3,9 +3,8 @@
 🌐 [한국어](README.ko.md)
 
 The design language for DevsLab products (devslab.kr, the Linq family, and
-future apps): one set of tokens and rules shared by web and mobile.
-Structurally modeled on [Toss Design System (TDS)](https://tossmini-docs.toss.im/tds-react-native/),
-but framework-neutral — the core is tokens + CSS; React, Vue, Ionic, and
+future apps): one framework-neutral set of tokens, components, and rules
+shared by web and mobile. The core is tokens + CSS; React, Vue, Ionic, and
 React Native are consumers.
 
 ## What's here
@@ -15,11 +14,11 @@ React Native are consumers.
 | [`docs/design-system.md`](docs/design-system.md) | The rules spec (v0): principles, architecture, foundations, component contract, governance |
 | [`docs/decisions.md`](docs/decisions.md) | Decision log — foundation/architecture decisions with rationale |
 | [`tokens/`](tokens/) | Design token source ([W3C format](https://design-tokens.github.io/community-group/format/)): raw palette, light/dark semantic mappings, typography/spacing/radius/elevation/motion |
-| [`packages/dds-tokens/`](packages/dds-tokens/) | `@devslab-kr/dds-tokens` — token build pipeline: `tokens.css`, Tailwind v4 `@theme` + v3 preset, `tokens.ts` (RN/runtime), `ionic.css` |
-| [`packages/dds-css/`](packages/dds-css/) | `@devslab-kr/dds-css` — CSS component layer, the spec §4.3 v1 inventory (Button, IconButton, TextField, Textarea, Select, Checkbox/Radio, Switch, Badge, Chip, Avatar, Spinner/Skeleton, Divider, Card, ListRow, Tabs, Dialog, Toast, Tooltip, EmptyState); guide in [`docs/components.md`](docs/components.md) |
-| [`packages/dds-icons/`](packages/dds-icons/) | `@devslab-kr/dds-icons` — the icon set: 40 core (24 grid, 1.6 stroke) + 7 devslab.kr `site-` icons, shipped as SVG files, a sprite and a path-data map |
-| [`packages/dds-solid/`](packages/dds-solid/) | `@devslab-kr/dds-solid` — SolidJS accessible primitives with controlled/uncontrolled state, SSR/hydration, keyboard, focus, and lifecycle contracts |
-| [`packages/site-kit/`](packages/site-kit/) | `@devslab-kr/site-kit` — restricted internal infrastructure for public sites: strict 14-locale i18n, SEO/GEO builders, TanStack Start metadata adapter, and accessible SolidJS shared shells |
+| [`packages/dds-tokens/`](packages/dds-tokens/) | `@devslab/dds-tokens` — token build pipeline: `tokens.css`, Tailwind v4 `@theme` + v3 preset, `tokens.ts` (RN/runtime), `ionic.css` |
+| [`packages/dds-css/`](packages/dds-css/) | `@devslab/dds-css` — CSS component layer, the spec §4.3 v1 inventory (Button, IconButton, TextField, Textarea, Select, Checkbox/Radio, Switch, Badge, Chip, Avatar, Spinner/Skeleton, Divider, Card, ListRow, Tabs, Dialog, Toast, Tooltip, EmptyState); guide in [`docs/components.md`](docs/components.md) |
+| [`packages/dds-icons/`](packages/dds-icons/) | `@devslab/dds-icons` — the icon set: 40 core (24 grid, 1.6 stroke) + 7 devslab.kr `site-` icons, shipped as SVG files, a sprite and a path-data map |
+| [`packages/dds-solid/`](packages/dds-solid/) | `@devslab/dds-solid` — SolidJS accessible primitives with controlled/uncontrolled state, SSR/hydration, keyboard, focus, and lifecycle contracts |
+| [`packages/site-kit/`](packages/site-kit/) | `@devslab/site-kit` — public infrastructure for product sites: strict 14-locale i18n, SEO/GEO builders, TanStack Start metadata adapter, and accessible SolidJS shared shells |
 | [`preview/index.html`](preview/index.html) | Self-contained foundations & components preview — open in a browser (`components.html`, `icons.html` alongside) |
 | [`brand/index.html`](brand/index.html) | Brand identity guide: logo rules, Electric Cyan, motifs, voice & tone |
 
@@ -40,7 +39,7 @@ pnpm workspace. `pnpm install`, then:
   (what CI runs)
 - `pnpm storybook` — component/foundation stories at :6006 (theme switch in
   the toolbar); `pnpm build-storybook` for the static site (also CI-checked)
-- `pnpm verify:names` — reject package-name drift from the private `@devslab-kr/*` scope
+- `pnpm verify:names` — reject package-name, license, or public-registry drift
 - `pnpm verify:foundation` — core checks, Storybook build, CJK/RTL/keyboard,
   200% zoom, forced-colors, reduced-motion, touch-target, and axe browser checks
 - `pnpm verify:release` — build artifacts are packed, exercised from a fresh
@@ -51,20 +50,18 @@ pnpm workspace. `pnpm install`, then:
   `verify:site-kit:release` — exact locale/catalog contracts, shared UI behavior,
   localized discovery documents, pack, fresh-consumer and publish dry-run gates
 
-The five restricted internal packages release in lockstep through Changesets. Directional
+The five public packages release in lockstep through Changesets. Directional
 icons use `dds-icon--directional`; the authoritative mirror/keep lists ship as
-`@devslab-kr/dds-icons/direction-policy.json`.
+`@devslab/dds-icons/direction-policy.json`.
 
-JavaScript package naming follows one organization-wide rule: public packages use
-`@devslab/*` on npmjs, while restricted internal packages use `@devslab-kr/*` on
-GitHub Packages. Copy `.npmrc.example` and provide a GitHub token with `read:packages`
-for local installation. Release workflows use the repository `GITHUB_TOKEN`; after a
-first publish, package visibility is changed from Private to Internal in GitHub settings.
+All distributable DDS packages use `@devslab/*` on the public npm registry under the
+DevsLab Source-Available License 1.0. The compatibility canary remains private and
+unpublished. Releases use npm provenance and the repository `NPM_TOKEN` secret.
 
 ## Roadmap
 
 Priorities live in [`docs/backlog.md`](docs/backlog.md). Packages are created
 only when a consumer exists (spec §8):
-`@devslab-kr/dds-tokens` (✅ 2026-08-13) → `dds-css` v1 inventory (Core 6 ✅ 2026-08-13, +13 ✅ 2026-08-15) →
+`@devslab/dds-tokens` (✅ 2026-08-13) → `dds-css` v1 inventory (Core 6 ✅ 2026-08-13, +13 ✅ 2026-08-15) →
 AskLinq adoption → `dds-icons` (✅ 2026-08-15) → `dds-solid` + `site-kit` → `dds-native` (RN) or an Ionic
 theme mapping, depending on how mobile goes.
diff --git a/brand/index.html b/brand/index.html
index f23963d..0a0f43e 100644
--- a/brand/index.html
+++ b/brand/index.html
@@ -468,6 +468,31 @@ <h4>당신의 SaaS,<br>우리가 만듭니다.</h4>
     </div>
   </section>
 
+  <!-- ============ 07 open source identity ============ -->
+  <section>
+    <p class="idx mono">[07] open source</p>
+    <h2>Q-line은 공개 프로젝트의 공통 서명</h2>
+    <p class="lead">
+      DevsLab OSS는 어긋난 두 사각형의 Q 프레임을 공유하고, 프로젝트의 기능을
+      내부 한 줄로 구별합니다. 프레임의 비례와 선 굵기는 고정하며 제품별 경로를
+      임의로 다시 그리지 않습니다.
+    </p>
+    <div class="grid2">
+      <div class="card">
+        <p class="idx mono">canonical rules</p>
+        <h3>공식 OSS 브랜드 규칙</h3>
+        <p class="cap">접근성, 작은 아이콘, 라이트·다크, 금지 사례와 제품별 적용 규칙은 공식 페이지를 따릅니다.</p>
+        <p><a href="https://devslab.kr/brand/open-source/">devslab.kr/brand/open-source/</a></p>
+      </div>
+      <div class="card">
+        <p class="idx mono">asset source · v0.2.0</p>
+        <h3>버전이 고정된 원본 자산</h3>
+        <p class="cap">사이트와 README에는 중앙 생성물의 버전 URL을 사용합니다. DDS는 프로젝트별 경로를 복제하지 않습니다.</p>
+        <p><a href="https://github.com/devslab-kr/oss-brand/releases/tag/v0.2.0">oss-brand v0.2.0</a></p>
+      </div>
+    </div>
+  </section>
+
   <footer class="site">
     <span class="mono">© 2026 DevsLab</span>
     <span>토큰 규격: DDS 규칙 명세 (devslab-kr/dds · docs/design-system.ko.md)</span>
diff --git a/docs/backlog.md b/docs/backlog.md
index 8e4fe40..1e19206 100644
--- a/docs/backlog.md
+++ b/docs/backlog.md
@@ -9,7 +9,7 @@
 
 ## P1 — Phase 1: 토큰 파이프라인과 첫 소비자
 
-### 1. 토큰 빌드 파이프라인 (`@devslab-kr/dds-tokens`) — `완료` (2026-08-13)
+### 1. 토큰 빌드 파이프라인 (`@devslab/dds-tokens`) — `완료` (2026-08-13)
 스펙 §2. 레포를 pnpm 워크스페이스로 전환하고 `packages/dds-tokens` 생성.
 [Style Dictionary](https://styledictionary.com/) v4로 `tokens/*.json`에서
 한 소스 → 전 산출물 생성:
@@ -24,7 +24,7 @@
 - 완료 기준 충족: `pnpm build` 한 번으로 4개 산출물, CI 초록. 결정 기록
   D-001~D-005 (`docs/decisions.md`).
 
-### 2. CSS 컴포넌트 레이어 (`@devslab-kr/dds-css`) Core 6종 — `완료` (2026-08-13)
+### 2. CSS 컴포넌트 레이어 (`@devslab/dds-css`) Core 6종 — `완료` (2026-08-13)
 스펙 §2, §4. `preview/index.html`에 프로토타입된 스타일을 클래스 기반
 패키지로 정식화. 토큰 CSS 변수만 참조(하드코딩 금지 — `check-css.mjs`가
 hex/rgb/hsl/color-mix를 CI에서 기계 차단, D-007).
@@ -92,7 +92,7 @@ hex/rgb/hsl/color-mix를 CI에서 기계 차단, D-007).
 devslab.kr과 동일한 `localStorage 'theme'` 키 + `data-theme` 속성 패턴을
 `dds-css`의 공식 스니펫으로 문서화 (허브 README에 기존 구현 있음).
 
-### 6. 아이콘 파이프라인 (`@devslab-kr/dds-icons`) — `완료` (2026-08-15)
+### 6. 아이콘 파이프라인 (`@devslab/dds-icons`) — `완료` (2026-08-15)
 스펙 §3.7(D-013으로 개정). 단일 SVG 소스 → 파일·스프라이트·path 데이터 맵.
 - [x] `packages/dds-icons` 신설. 코어 40종(업스트림 22 + 내비 글리프 18종
       신규 제작: chevron/arrow 4+2, close, search, plus, minus, menu,
@@ -180,5 +180,4 @@ Geist/Geist Mono 셀프호스팅 여부, Pretendard 서브셋, RN 번들 전략.
 ## 참고 링크
 
 - 미리보기 아티팩트: 파운데이션 https://claude.ai/code/artifact/0df45005-15d3-4567-a61d-71d0419498b9 · 브랜드 https://claude.ai/code/artifact/05925654-5d02-4f80-a58a-3b1e171f0eab
-- 구조 참조: [TDS React Native](https://tossmini-docs.toss.im/tds-react-native/)
 - 토큰 포맷: [W3C Design Tokens](https://design-tokens.github.io/community-group/format/)
diff --git a/docs/components.ko.md b/docs/components.ko.md
index 784d56a..d18ce5c 100644
--- a/docs/components.ko.md
+++ b/docs/components.ko.md
@@ -1,10 +1,10 @@
-# DDS 컴포넌트 — v1 인벤토리 (`@devslab-kr/dds-css`)
+# DDS 컴포넌트 — v1 인벤토리 (`@devslab/dds-css`)
 
 🌐 [English](components.md)
 
 클래스 기반·프레임워크 중립 CSS 컴포넌트. 전부 시맨틱 토큰(`var(--dds-*)`)만
-참조합니다 — `@devslab-kr/dds-tokens/tokens.css`를 먼저 로드하고
-`@devslab-kr/dds-css/dds.css`(또는 `components/`의 개별 파일)를 로드하세요.
+참조합니다 — `@devslab/dds-tokens/tokens.css`를 먼저 로드하고
+`@devslab/dds-css/dds.css`(또는 `components/`의 개별 파일)를 로드하세요.
 다크 모드에 컴포넌트 변경은 없습니다: `<html>` 또는 임의 서브트리에
 `data-theme="dark"` (`data-theme="light"`로 되고정 가능).
 
diff --git a/docs/components.md b/docs/components.md
index fa3bf9f..fe1ce33 100644
--- a/docs/components.md
+++ b/docs/components.md
@@ -1,10 +1,10 @@
-# DDS Components — v1 inventory (`@devslab-kr/dds-css`)
+# DDS Components — v1 inventory (`@devslab/dds-css`)
 
 🌐 [한국어](components.ko.md)
 
 Class-based, framework-neutral CSS components. Everything references semantic
 tokens only (`var(--dds-*)`) — load
-`@devslab-kr/dds-tokens/tokens.css` first, then `@devslab-kr/dds-css/dds.css`
+`@devslab/dds-tokens/tokens.css` first, then `@devslab/dds-css/dds.css`
 (or per-component files from `components/`). Dark mode needs no component
 change: set `data-theme="dark"` on `<html>` or any subtree
 (`data-theme="light"` pins a subtree back).
diff --git a/docs/decisions.md b/docs/decisions.md
index a97eafd..5cbef3f 100644
--- a/docs/decisions.md
+++ b/docs/decisions.md
@@ -5,11 +5,25 @@
 
 ---
 
+## D-015 — DDS 배포 패키지는 공개 npm + source-available (2026-08-31)
+
+**결정.** `dds-tokens`, `dds-css`, `dds-icons`, `dds-solid`, `site-kit`은 공개
+npm의 `@devslab/*`로 lockstep 배포한다. 설치·컴파일·제품 번들은 허용하지만
+패키지 수정·재배포·재판매·경쟁 디자인 시스템 제작은 금지하는 DevsLab
+Source-Available License 1.0을 적용한다. 이는 OSI 오픈소스가 아니다.
+
+`compatibility-canary`는 내부 검증 애플리케이션이므로 계속 private·미배포다.
+릴리스는 npm provenance와 `NPM_TOKEN`을 사용한다. 이 결정은 D-014의 비공개
+GitHub Packages 배포 결정을 대체한다.
+
+**근거.** 소비와 검증은 공개적으로 단순화하면서, DDS 자체와 브랜드 자산의
+변형·재상품화를 허용하지 않는다.
+
 ## D-014 — JavaScript 패키지 스코프는 공개 여부로 구분 (2026-08-29)
 
-**결정.** npmjs에 공개하는 JavaScript 패키지는 `@devslab/*`, 사내에서만
-사용하는 restricted 패키지는 GitHub Packages의 `@devslab-kr/*`를 사용한다.
-DDS의 다섯 패키지와 Site Kit은 내부 공통 인프라이므로 `@devslab-kr/*`이며,
+**과거 결정(대체됨).** npmjs에 공개하는 JavaScript 패키지는 `@devslab/*`, 사내에서만
+사용하는 restricted 패키지는 GitHub Packages의 별도 private scope를 사용한다.
+DDS의 다섯 패키지와 Site Kit은 당시 내부 공통 인프라로 분류했으며,
 최초 발행 뒤 GitHub 패키지 가시성을 Private에서 Internal로 변경한다.
 
 **인증.** 릴리스는 저장소가 자동 발급하는 `GITHUB_TOKEN`과
@@ -20,11 +34,11 @@ DDS의 다섯 패키지와 Site Kit은 내부 공통 인프라이므로 `@devsla
 **근거.** 공개 SDK와 내부 UI 인프라의 배포·권한 경계를 패키지 이름만으로
 식별할 수 있고, 내부 패키지를 npmjs 공개 릴리스와 혼동하지 않게 한다.
 
-**재검토 시점.** DDS 또는 Site Kit을 외부 개발자에게 지원 대상으로 공개할 때.
+**상태.** D-015로 대체됨.
 
 ## D-013 — dds-icons: 세트는 둘, 컴포넌트는 아직 없음 (2026-08-15)
 
-**결정.** `@devslab-kr/dds-icons` 를 만들면서 세 가지를 정한다.
+**결정.** `@devslab/dds-icons` 를 만들면서 세 가지를 정한다.
 
 1. **스트로크는 1.6(코어) / 1.8(site)** — 스펙 §3.7 의 "1.5px" 는 에셋이
    존재하기 전에 쓴 숫자다. 실제로 그려진 세트는 1.6 이고, AskLinq 위젯이
diff --git a/docs/design-system.ko.md b/docs/design-system.ko.md
index 6151ca2..19a253f 100644
--- a/docs/design-system.ko.md
+++ b/docs/design-system.ko.md
@@ -2,11 +2,9 @@
 
 🌐 [English](design-system.md)
 
-데브스랩 제품군 (AskLinq, BookLinq, FlowLinq — Linq 패밀리) 의 **웹과 모바일 앱을
-하나의 디자인 언어로 묶는 규칙**. [토스 디자인 시스템 (TDS)](https://tossmini-docs.toss.im/tds-react-native/)
-의 구조 — 토큰 기반 파운데이션 + 플랫폼별 컴포넌트 패키지 — 를 참조 모델로 삼되,
-특정 프레임워크에 종속되지 않게 설계한다 (TDS 2.x 는 토스 자체 RN 프레임워크인
-Granite 에 종속된다 — 우리는 그 종속을 만들지 않는다).
+데브스랩 제품군의 **웹과 모바일 앱을 하나의 디자인 언어로 묶는 규칙**이다.
+토큰 기반 파운데이션과 플랫폼별 컴포넌트 패키지를 결합하되, 진실의 원천은
+특정 프레임워크에 종속되지 않게 설계한다.
 
 > **위치에 대한 노트.** 이 문서는 스펙이 확정될 때까지 asklinq 레포에 둔다.
 > 구현이 시작되면 [linq-kit](https://github.com/devslab-kr/linq-kit) 레벨의
@@ -45,10 +43,10 @@ Granite 에 종속된다 — 우리는 그 종속을 만들지 않는다).
 
 | 패키지 | 내용 | 소비자 |
 | --- | --- | --- |
-| `@devslab-kr/dds-tokens` | 토큰 JSON + 빌드 산출물 (아래 표) | 모든 곳 |
-| `@devslab-kr/dds-css` | CSS 컴포넌트 레이어 (클래스 기반, 프레임워크 무관) | SSR 페이지, 바닐라 위젯, Vue, React, Ionic |
+| `@devslab/dds-tokens` | 토큰 JSON + 빌드 산출물 (아래 표) | 모든 곳 |
+| `@devslab/dds-css` | CSS 컴포넌트 레이어 (클래스 기반, 프레임워크 무관) | SSR 페이지, 바닐라 위젯, Vue, React, Ionic |
 | `@devslab/dds-native` | React Native 컴포넌트 | 모바일 앱 (RN 선택 시) |
-| `@devslab-kr/dds-icons` | 아이콘 (SVG 단일 소스 → 플랫폼별 코드 생성) | 모든 곳 |
+| `@devslab/dds-icons` | 아이콘 (SVG 단일 소스 → 플랫폼별 코드 생성) | 모든 곳 |
 
 토큰 빌드는 [Style Dictionary](https://styledictionary.com/) 계열 도구로
 **한 소스에서** 모든 플랫폼 산출물을 생성한다. 웹과 네이티브가 각자 값을 들고
@@ -339,7 +337,7 @@ RN 은 같은 숫자를 pt 로 쓴다. 숫자가 같으므로 표는 하나다.
   아이콘 세트가 아니라 별도 에셋으로 관리.
 - 웹·RN 컴포넌트는 같은 SVG 소스에서 코드 생성한다. 손으로 두 벌 만들지 않는다.
   해당 프레임워크의 제품이 생기기 전까지 출하 형태는 소스 자체 + path 데이터
-  맵이다 (`@devslab-kr/dds-icons`).
+  맵이다 (`@devslab/dds-icons`).
 
 ---
 
@@ -456,8 +454,5 @@ Phase 3 이전에 모바일 패키지를 만들지 않는다 — 소비자 없
 
 ## 참고
 
-- [TDS React Native 문서](https://tossmini-docs.toss.im/tds-react-native/) — 구조 참조 모델
-- [토스 디자인 시스템 소개 (앱인토스)](https://developers-apps-in-toss.toss.im/design/components.html)
-- [디자인 시스템 다시 생각해보기 — Toss Tech](https://toss.tech/article/rethinking-design-system)
 - [W3C Design Tokens Format](https://design-tokens.github.io/community-group/format/)
 - [Pretendard](https://github.com/orioncactus/pretendard)
diff --git a/docs/design-system.md b/docs/design-system.md
index 01add6d..92f4f8b 100644
--- a/docs/design-system.md
+++ b/docs/design-system.md
@@ -3,11 +3,8 @@
 🌐 [한국어](design-system.ko.md)
 
 The rules that bind **web and mobile apps into one design language** across the
-DevsLab product family (AskLinq, BookLinq, FlowLinq — the Linq family). We use
-[Toss Design System (TDS)](https://tossmini-docs.toss.im/tds-react-native/) as
-the reference model — token-based foundations + per-platform component
-packages — while staying framework-neutral (TDS 2.x depends on Toss's own RN
-framework, Granite — we do not create that kind of dependency).
+DevsLab product family. DDS combines token-based foundations with per-platform
+component packages while keeping the source of truth framework-neutral.
 
 > **A note on location.** This document lives in the asklinq repo until the
 > spec settles. Once implementation starts it graduates to a shared package at
@@ -48,10 +45,10 @@ Three layers. The lower, the more platform-neutral.
 
 | Package | Contents | Consumers |
 | --- | --- | --- |
-| `@devslab-kr/dds-tokens` | Token JSON + build outputs (table below) | everywhere |
-| `@devslab-kr/dds-css` | CSS component layer (class-based, framework-agnostic) | SSR pages, vanilla widget, Vue, React, Ionic |
+| `@devslab/dds-tokens` | Token JSON + build outputs (table below) | everywhere |
+| `@devslab/dds-css` | CSS component layer (class-based, framework-agnostic) | SSR pages, vanilla widget, Vue, React, Ionic |
 | `@devslab/dds-native` | React Native components | mobile apps (if RN is chosen) |
-| `@devslab-kr/dds-icons` | Icons (single SVG source → per-platform codegen) | everywhere |
+| `@devslab/dds-icons` | Icons (single SVG source → per-platform codegen) | everywhere |
 
 Token builds use a [Style Dictionary](https://styledictionary.com/)-class tool
 to generate every platform output **from one source**. The moment web and
@@ -357,7 +354,7 @@ instantly instead.
   Brand logos are separate assets, not part of the icon set.
 - Web and RN components are code-generated from the same SVG source. Never
   hand-maintain two copies. Until a framework's product exists, the shipped
-  form is the source itself plus a path-data map (`@devslab-kr/dds-icons`).
+  form is the source itself plus a path-data map (`@devslab/dds-icons`).
 
 ---
 
@@ -479,8 +476,5 @@ implementation work, not a redesign.
 
 ## References
 
-- [TDS React Native docs](https://tossmini-docs.toss.im/tds-react-native/) — structural reference model
-- [Toss Design System intro (Apps in Toss)](https://developers-apps-in-toss.toss.im/design/components.html)
-- [Rethinking design systems — Toss Tech](https://toss.tech/article/rethinking-design-system)
 - [W3C Design Tokens Format](https://design-tokens.github.io/community-group/format/)
 - [Pretendard](https://github.com/orioncactus/pretendard)
diff --git a/docs/plans/2026-08-29-web-platform-7stage.md b/docs/plans/2026-08-29-web-platform-7stage.md
index c58056f..0dd02db 100644
--- a/docs/plans/2026-08-29-web-platform-7stage.md
+++ b/docs/plans/2026-08-29-web-platform-7stage.md
@@ -26,7 +26,7 @@ Acceptance: clean offline-or-normal install, test, typecheck, build, and workerd
 
 Repository: implementation/dds
 
-Rename the existing packages to @devslab-kr/dds-tokens, @devslab-kr/dds-css, and @devslab-kr/dds-icons before first publish. Add changesets, lockstep versioning, pack and fresh-consumer verification, publish dry-run, and TypeScript 7.0.2. Fix CJK button wrapping, 44x44 touch targets, logical RTL properties, forced-colors, reduced motion, and direction-aware icon policy. Preserve framework neutrality.
+Rename the existing packages to @devslab/dds-tokens, @devslab/dds-css, and @devslab/dds-icons before first publish. Add changesets, lockstep versioning, pack and fresh-consumer verification, publish dry-run, and TypeScript 7.0.2. Fix CJK button wrapping, 44x44 touch targets, logical RTL properties, forced-colors, reduced motion, and direction-aware icon policy. Preserve framework neutrality.
 
 Acceptance: verify, Storybook, pack, fresh consumer, long-label/CJK, Arabic RTL, keyboard, axe, zoom, forced-colors, and package-name scans pass.
 
@@ -34,7 +34,7 @@ Acceptance: verify, Storybook, pack, fresh consumer, long-label/CJK, Arabic RTL,
 
 Repository: implementation/dds
 
-Create @devslab-kr/dds-solid using the exact canary matrix. Implement accessible Solid primitives for Button, IconButton, Field, Select, Checkbox, Radio, Switch, Dialog, Tabs, Toast, Tooltip, and Icon. Consume existing token/CSS contracts. Cover controlled/uncontrolled state, native semantics, accessible naming, keyboard behavior, focus trap/return, lifecycle, SSR, and hydration.
+Create @devslab/dds-solid using the exact canary matrix. Implement accessible Solid primitives for Button, IconButton, Field, Select, Checkbox, Radio, Switch, Dialog, Tabs, Toast, Tooltip, and Icon. Consume existing token/CSS contracts. Cover controlled/uncontrolled state, native semantics, accessible naming, keyboard behavior, focus trap/return, lifecycle, SSR, and hydration.
 
 Acceptance: red-green tests, typecheck, build, package dry-run, fresh consumer SSR/hydration, keyboard and axe checks all pass.
 
@@ -42,7 +42,7 @@ Acceptance: red-green tests, typecheck, build, package dry-run, fresh consumer S
 
 Repository: implementation/dds
 
-Create @devslab-kr/site-kit with runtime-neutral core and explicit Solid/TanStack Start adapter. Implement the exact 14-locale manifest, resolver precedence, html lang/dir, strict catalog key and placeholder validation, locale-aware metadata, canonical, hreflang plus x-default, sitemap, robots policy, fact-validated JSON-LD, SiteHeader, LocaleMenu, ThemeToggle, marketing shells, SiteFooter, LegalLayout, StatusBanner, RequestAccessForm shell, and not-found/error layouts. Product copy and facts are injected.
+Create @devslab/site-kit with runtime-neutral core and explicit Solid/TanStack Start adapter. Implement the exact 14-locale manifest, resolver precedence, html lang/dir, strict catalog key and placeholder validation, locale-aware metadata, canonical, hreflang plus x-default, sitemap, robots policy, fact-validated JSON-LD, SiteHeader, LocaleMenu, ThemeToggle, marketing shells, SiteFooter, LegalLayout, StatusBanner, RequestAccessForm shell, and not-found/error layouts. Product copy and facts are injected.
 
 Acceptance: missing/extra/placeholder mismatch tests fail correctly; all 14 locale fixtures pass; Arabic RTL desktop/mobile, metadata/schema snapshots, SSR/hydration, accessibility, and Worker fixture pass.
 
diff --git a/package.json b/package.json
index d8dea38..339f82f 100644
--- a/package.json
+++ b/package.json
@@ -19,14 +19,14 @@
     "verify:foundation:core": "node --test tests/foundation-contracts.test.mjs && node packages/dds-tokens/build.mjs && node packages/dds-tokens/scripts/validate-tokens.mjs && node --test tests/token-build.test.mjs && node packages/dds-css/build.mjs && node packages/dds-css/scripts/check-css.mjs && node packages/dds-icons/build.mjs && node packages/dds-icons/scripts/check-icons.mjs",
     "verify:foundation": "pnpm run verify:foundation:core && pnpm run build-storybook && playwright test --config playwright.foundation.config.ts",
     "verify:release": "node scripts/verify-release.mjs",
-    "verify:solid:test": "node --test tests/dds-solid-contracts.test.mjs && pnpm --filter @devslab-kr/dds-solid run test && pnpm --filter @devslab-kr/dds-solid run check && pnpm --filter @devslab-kr/dds-solid run build",
-    "verify:solid:a11y": "pnpm --filter @devslab-kr/dds-solid run test:a11y",
-    "verify:solid:release": "pnpm run verify:foundation:core && pnpm --filter @devslab-kr/dds-solid run build && node scripts/verify-solid-release.mjs",
+    "verify:solid:test": "node --test tests/dds-solid-contracts.test.mjs && pnpm --filter @devslab/dds-solid run test && pnpm --filter @devslab/dds-solid run check && pnpm --filter @devslab/dds-solid run build",
+    "verify:solid:a11y": "pnpm --filter @devslab/dds-solid run test:a11y",
+    "verify:solid:release": "pnpm run verify:foundation:core && pnpm --filter @devslab/dds-solid run build && node scripts/verify-solid-release.mjs",
     "verify:site-kit:i18n": "node --test tests/site-kit-core.test.mjs",
-    "verify:site-kit:ui": "node --test tests/site-kit-contracts.test.mjs tests/site-kit-worker.test.mjs && pnpm --filter @devslab-kr/site-kit run test && pnpm --filter @devslab-kr/site-kit run check && pnpm --filter @devslab-kr/site-kit run build && pnpm --filter @devslab-kr/site-kit run test:worker",
+    "verify:site-kit:ui": "node --test tests/site-kit-contracts.test.mjs tests/site-kit-worker.test.mjs && pnpm --filter @devslab/site-kit run test && pnpm --filter @devslab/site-kit run check && pnpm --filter @devslab/site-kit run build && pnpm --filter @devslab/site-kit run test:worker",
     "verify:site-kit:seo": "node --test tests/site-kit-core.test.mjs",
     "verify:site-kit:browser": "playwright test --config playwright.site-kit.config.ts",
-    "verify:site-kit:release": "pnpm run verify:foundation:core && pnpm --filter @devslab-kr/dds-solid run build && pnpm --filter @devslab-kr/site-kit run build && node scripts/verify-site-kit-release.mjs",
+    "verify:site-kit:release": "pnpm run verify:foundation:core && pnpm --filter @devslab/dds-solid run build && pnpm --filter @devslab/site-kit run build && node scripts/verify-site-kit-release.mjs",
     "changeset": "changeset",
     "version-packages": "changeset version",
     "release": "changeset publish"
diff --git a/packages/dds-css/LICENSE b/packages/dds-css/LICENSE
new file mode 100644
index 0000000..6ee9f10
--- /dev/null
+++ b/packages/dds-css/LICENSE
@@ -0,0 +1,74 @@
+DevsLab Source-Available License 1.0
+
+Copyright (c) 2026 DevsLab. All rights reserved.
+
+This license governs the DDS software, design tokens, components, icons,
+documentation, and other materials distributed with this license (the
+"Software").
+
+1. Permitted use
+
+Subject to this license, DevsLab grants you a limited, worldwide,
+non-exclusive, non-transferable, revocable, royalty-free right to:
+
+- download and install unmodified copies of the Software;
+- use and execute the Software for internal or commercial applications;
+- compile, minify, tree-shake, and bundle unmodified Software solely as a
+  technical part of building an application; and
+- distribute the resulting object code only as an inseparable part of that
+  application and not as a standalone library, design system, component kit,
+  template, or asset collection.
+
+Normal application configuration through documented public APIs, design-token
+overrides, CSS custom properties, and component properties is permitted and is
+not considered modification of the Software.
+
+2. Restrictions
+
+Except where applicable law does not allow the restriction, you may not:
+
+- modify, adapt, translate, reverse engineer, or create derivative works of the
+  Software itself;
+- publish, republish, sublicense, sell, rent, host, or redistribute the
+  Software or any modified version as a standalone package or downloadable
+  collection;
+- use the Software or a substantial portion of it to create or operate a
+  competing general-purpose design system, UI kit, component library, icon
+  library, token library, template marketplace, or hosted equivalent;
+- remove or alter copyright, license, attribution, or provenance notices; or
+- use DevsLab names, logos, product marks, or trade dress except to make a
+  truthful statement that an application uses the Software.
+
+No patent, trademark, design, or branding rights are granted except the
+copyright permissions stated in Section 1.
+
+3. Ownership and feedback
+
+The Software is licensed, not sold. DevsLab and its licensors retain all
+right, title, and interest in the Software. You grant DevsLab a perpetual,
+worldwide, irrevocable, royalty-free right to use feedback you voluntarily
+provide about the Software.
+
+4. Termination
+
+This license terminates automatically if you breach it. Upon termination, you
+must stop using and distributing the Software and delete all copies under your
+control. Sections 2, 3, 5, and 6 survive termination.
+
+5. Disclaimer and limitation of liability
+
+THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE, TITLE, AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY LAW,
+DEVSLAB WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL,
+CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS,
+REVENUE, OR BUSINESS, ARISING FROM OR RELATED TO THE SOFTWARE.
+
+6. Governing law
+
+This license is governed by the laws of the Republic of Korea, excluding
+conflict-of-law rules. The Seoul Central District Court has exclusive
+jurisdiction over disputes arising from this license.
+
+This is a source-available license, not an open-source license approved by the
+Open Source Initiative.
diff --git a/packages/dds-css/README.ko.md b/packages/dds-css/README.ko.md
index d85eb0d..c894f44 100644
--- a/packages/dds-css/README.ko.md
+++ b/packages/dds-css/README.ko.md
@@ -1,4 +1,4 @@
-# @devslab-kr/dds-css
+# @devslab/dds-css
 
 🌐 [English](README.md)
 
@@ -19,7 +19,7 @@ EmptyState** (BottomSheet은 Dialog의 네이티브 짝 — Phase 3).
   리뷰가 아니라 CI에서 실패합니다.
 - 다크 모드는 공짜: `<html>` 또는 임의 서브트리에 `data-theme="dark"`
   (`data-theme="light"`로 되고정). 어떤 컴포넌트에도 다크 분기가 없습니다.
-- 개별 임포트: `@devslab-kr/dds-css/components/button.css` 등.
+- 개별 임포트: `@devslab/dds-css/components/button.css` 등.
 - 컴포넌트별 마크업 계약·상태·접근성 체크리스트·do/don't:
   [`docs/components.ko.md`](../../docs/components.ko.md).
   라이브 레퍼런스: `preview/components.html` (먼저 `pnpm build`).
diff --git a/packages/dds-css/README.md b/packages/dds-css/README.md
index 48fcd40..1931171 100644
--- a/packages/dds-css/README.md
+++ b/packages/dds-css/README.md
@@ -1,4 +1,4 @@
-# @devslab-kr/dds-css
+# @devslab/dds-css
 
 🌐 [한국어](README.ko.md)
 
@@ -20,7 +20,7 @@ the native counterpart of Dialog — Phase 3).
   so a hardcoded color fails CI, not review.
 - Dark mode is free: `data-theme="dark"` on `<html>` or any subtree
   (`data-theme="light"` pins back). No component has a dark branch.
-- Per-component imports: `@devslab-kr/dds-css/components/button.css` etc.
+- Per-component imports: `@devslab/dds-css/components/button.css` etc.
 - Markup contracts, states, accessibility checklists and do/don't per
   component: [`docs/components.md`](../../docs/components.md).
   Live reference: `preview/components.html` (run `pnpm build` first).
diff --git a/packages/dds-css/build.mjs b/packages/dds-css/build.mjs
index 9373e57..0332eba 100644
--- a/packages/dds-css/build.mjs
+++ b/packages/dds-css/build.mjs
@@ -38,8 +38,8 @@ export const FILES = [
   "emptystate.css",
 ];
 
-const banner = `/* @devslab-kr/dds-css — generated bundle, do not edit. Source: src/*.css
- * Requires @devslab-kr/dds-tokens/tokens.css to be loaded first. */
+const banner = `/* @devslab/dds-css — generated bundle, do not edit. Source: src/*.css
+ * Requires @devslab/dds-tokens/tokens.css to be loaded first. */
 `;
 
 const isMain = process.argv[1] === fileURLToPath(import.meta.url);
diff --git a/packages/dds-css/package.json b/packages/dds-css/package.json
index 4f64f92..8878e16 100644
--- a/packages/dds-css/package.json
+++ b/packages/dds-css/package.json
@@ -1,18 +1,18 @@
 {
-  "name": "@devslab-kr/dds-css",
-  "version": "0.2.8",
+  "name": "@devslab/dds-css",
+  "version": "0.3.0",
   "description": "DDS CSS component layer — class-based, framework-neutral, semantic-token-only (spec §4.3 v1 inventory, 20 components)",
   "type": "module",
-  "license": "UNLICENSED",
+  "license": "SEE LICENSE IN LICENSE",
   "repository": {
     "type": "git",
     "url": "https://github.com/devslab-kr/dds.git",
     "directory": "packages/dds-css"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com",
-    "access": "restricted",
-    "provenance": false
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "dist"
diff --git a/packages/dds-icons/LICENSE b/packages/dds-icons/LICENSE
new file mode 100644
index 0000000..6ee9f10
--- /dev/null
+++ b/packages/dds-icons/LICENSE
@@ -0,0 +1,74 @@
+DevsLab Source-Available License 1.0
+
+Copyright (c) 2026 DevsLab. All rights reserved.
+
+This license governs the DDS software, design tokens, components, icons,
+documentation, and other materials distributed with this license (the
+"Software").
+
+1. Permitted use
+
+Subject to this license, DevsLab grants you a limited, worldwide,
+non-exclusive, non-transferable, revocable, royalty-free right to:
+
+- download and install unmodified copies of the Software;
+- use and execute the Software for internal or commercial applications;
+- compile, minify, tree-shake, and bundle unmodified Software solely as a
+  technical part of building an application; and
+- distribute the resulting object code only as an inseparable part of that
+  application and not as a standalone library, design system, component kit,
+  template, or asset collection.
+
+Normal application configuration through documented public APIs, design-token
+overrides, CSS custom properties, and component properties is permitted and is
+not considered modification of the Software.
+
+2. Restrictions
+
+Except where applicable law does not allow the restriction, you may not:
+
+- modify, adapt, translate, reverse engineer, or create derivative works of the
+  Software itself;
+- publish, republish, sublicense, sell, rent, host, or redistribute the
+  Software or any modified version as a standalone package or downloadable
+  collection;
+- use the Software or a substantial portion of it to create or operate a
+  competing general-purpose design system, UI kit, component library, icon
+  library, token library, template marketplace, or hosted equivalent;
+- remove or alter copyright, license, attribution, or provenance notices; or
+- use DevsLab names, logos, product marks, or trade dress except to make a
+  truthful statement that an application uses the Software.
+
+No patent, trademark, design, or branding rights are granted except the
+copyright permissions stated in Section 1.
+
+3. Ownership and feedback
+
+The Software is licensed, not sold. DevsLab and its licensors retain all
+right, title, and interest in the Software. You grant DevsLab a perpetual,
+worldwide, irrevocable, royalty-free right to use feedback you voluntarily
+provide about the Software.
+
+4. Termination
+
+This license terminates automatically if you breach it. Upon termination, you
+must stop using and distributing the Software and delete all copies under your
+control. Sections 2, 3, 5, and 6 survive termination.
+
+5. Disclaimer and limitation of liability
+
+THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE, TITLE, AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY LAW,
+DEVSLAB WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL,
+CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS,
+REVENUE, OR BUSINESS, ARISING FROM OR RELATED TO THE SOFTWARE.
+
+6. Governing law
+
+This license is governed by the laws of the Republic of Korea, excluding
+conflict-of-law rules. The Seoul Central District Court has exclusive
+jurisdiction over disputes arising from this license.
+
+This is a source-available license, not an open-source license approved by the
+Open Source Initiative.
diff --git a/packages/dds-icons/README.ko.md b/packages/dds-icons/README.ko.md
index f4f5f7a..8635107 100644
--- a/packages/dds-icons/README.ko.md
+++ b/packages/dds-icons/README.ko.md
@@ -1,4 +1,4 @@
-# @devslab-kr/dds-icons
+# @devslab/dds-icons
 
 방향성 아이콘 소비자는 `dds-icon--directional` 클래스를 추가한다. 패키지의
 `direction-policy.json`이 RTL에서 미러링할 아이콘과 물리 방향을 유지할
@@ -12,12 +12,12 @@ DDS 아이콘 세트 — 아이콘당 SVG 소스 하나(24 그리드, `currentCo
 
 | 산출물 | 임포트 | 용도 |
 | --- | --- | --- |
-| `dist/svg/*.svg` | `@devslab-kr/dds-icons/svg/phone.svg` | 빌드 파이프라인, `<img>`, 디자인 툴 |
-| `dist/icons.svg` | `@devslab-kr/dds-icons/icons.svg` | 웹 스프라이트 — `<use href="…/icons.svg#dds-phone">` |
-| `dist/icons.js` (+ `.d.ts`) | `@devslab-kr/dds-icons` | 요소를 직접 만드는 런타임(RN, `createElementNS` 렌더러, SSR) |
+| `dist/svg/*.svg` | `@devslab/dds-icons/svg/phone.svg` | 빌드 파이프라인, `<img>`, 디자인 툴 |
+| `dist/icons.svg` | `@devslab/dds-icons/icons.svg` | 웹 스프라이트 — `<use href="…/icons.svg#dds-phone">` |
+| `dist/icons.js` (+ `.d.ts`) | `@devslab/dds-icons` | 요소를 직접 만드는 런타임(RN, `createElementNS` 렌더러, SSR) |
 
 ```js
-import { icons } from "@devslab-kr/dds-icons";
+import { icons } from "@devslab/dds-icons";
 
 const i = icons.phone; // { viewBox, strokeWidth, set, body }
 ```
diff --git a/packages/dds-icons/README.md b/packages/dds-icons/README.md
index 6da331b..2833f24 100644
--- a/packages/dds-icons/README.md
+++ b/packages/dds-icons/README.md
@@ -1,4 +1,4 @@
-# @devslab-kr/dds-icons
+# @devslab/dds-icons
 
 Directional consumers add `dds-icon--directional`; the packaged
 `direction-policy.json` is the source of truth for icons that mirror in RTL
@@ -12,12 +12,12 @@ amended by [D-013](../../docs/decisions.md).
 
 | Artifact | Import | For |
 | --- | --- | --- |
-| `dist/svg/*.svg` | `@devslab-kr/dds-icons/svg/phone.svg` | build pipelines, `<img>`, design tools |
-| `dist/icons.svg` | `@devslab-kr/dds-icons/icons.svg` | web sprite — `<use href="…/icons.svg#dds-phone">` |
-| `dist/icons.js` (+ `.d.ts`) | `@devslab-kr/dds-icons` | any runtime that builds its own element (RN, `createElementNS` renderers, SSR) |
+| `dist/svg/*.svg` | `@devslab/dds-icons/svg/phone.svg` | build pipelines, `<img>`, design tools |
+| `dist/icons.svg` | `@devslab/dds-icons/icons.svg` | web sprite — `<use href="…/icons.svg#dds-phone">` |
+| `dist/icons.js` (+ `.d.ts`) | `@devslab/dds-icons` | any runtime that builds its own element (RN, `createElementNS` renderers, SSR) |
 
 ```js
-import { icons } from "@devslab-kr/dds-icons";
+import { icons } from "@devslab/dds-icons";
 
 const i = icons.phone; // { viewBox, strokeWidth, set, body }
 ```
diff --git a/packages/dds-icons/build.mjs b/packages/dds-icons/build.mjs
index 15bb736..19a8b44 100644
--- a/packages/dds-icons/build.mjs
+++ b/packages/dds-icons/build.mjs
@@ -21,7 +21,7 @@ const svgDir = join(pkgDir, "svg");
 const dist = join(pkgDir, "dist");
 const directionPolicy = JSON.parse(readFileSync(join(pkgDir, "direction-policy.json"), "utf8"));
 
-const HEADER = "/* Generated by @devslab-kr/dds-icons — do not edit. Source: svg/*.svg */";
+const HEADER = "/* Generated by @devslab/dds-icons — do not edit. Source: svg/*.svg */";
 
 /** Icon sources: core set in svg/, the devslab.kr-only set in svg/site/.
  *  The `site-` prefix stays part of the name (the folder is organization,
@@ -71,7 +71,7 @@ if (isMain) {
     .join("\n");
   writeFileSync(
     join(dist, "icons.svg"),
-    `<svg xmlns="http://www.w3.org/2000/svg" style="display:none">\n<!-- Generated by @devslab-kr/dds-icons — do not edit. -->\n${symbols}\n</svg>\n`,
+    `<svg xmlns="http://www.w3.org/2000/svg" style="display:none">\n<!-- Generated by @devslab/dds-icons — do not edit. -->\n${symbols}\n</svg>\n`,
   );
 
   const entries = icons
diff --git a/packages/dds-icons/package.json b/packages/dds-icons/package.json
index 1ed42f0..493a608 100644
--- a/packages/dds-icons/package.json
+++ b/packages/dds-icons/package.json
@@ -1,18 +1,18 @@
 {
-  "name": "@devslab-kr/dds-icons",
-  "version": "0.2.8",
+  "name": "@devslab/dds-icons",
+  "version": "0.3.0",
   "description": "DDS icon set — one SVG source (24 grid, currentColor), shipped as files, a sprite and a path-data map",
   "type": "module",
-  "license": "UNLICENSED",
+  "license": "SEE LICENSE IN LICENSE",
   "repository": {
     "type": "git",
     "url": "https://github.com/devslab-kr/dds.git",
     "directory": "packages/dds-icons"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com",
-    "access": "restricted",
-    "provenance": false
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "dist",
diff --git a/packages/dds-solid/LICENSE b/packages/dds-solid/LICENSE
new file mode 100644
index 0000000..6ee9f10
--- /dev/null
+++ b/packages/dds-solid/LICENSE
@@ -0,0 +1,74 @@
+DevsLab Source-Available License 1.0
+
+Copyright (c) 2026 DevsLab. All rights reserved.
+
+This license governs the DDS software, design tokens, components, icons,
+documentation, and other materials distributed with this license (the
+"Software").
+
+1. Permitted use
+
+Subject to this license, DevsLab grants you a limited, worldwide,
+non-exclusive, non-transferable, revocable, royalty-free right to:
+
+- download and install unmodified copies of the Software;
+- use and execute the Software for internal or commercial applications;
+- compile, minify, tree-shake, and bundle unmodified Software solely as a
+  technical part of building an application; and
+- distribute the resulting object code only as an inseparable part of that
+  application and not as a standalone library, design system, component kit,
+  template, or asset collection.
+
+Normal application configuration through documented public APIs, design-token
+overrides, CSS custom properties, and component properties is permitted and is
+not considered modification of the Software.
+
+2. Restrictions
+
+Except where applicable law does not allow the restriction, you may not:
+
+- modify, adapt, translate, reverse engineer, or create derivative works of the
+  Software itself;
+- publish, republish, sublicense, sell, rent, host, or redistribute the
+  Software or any modified version as a standalone package or downloadable
+  collection;
+- use the Software or a substantial portion of it to create or operate a
+  competing general-purpose design system, UI kit, component library, icon
+  library, token library, template marketplace, or hosted equivalent;
+- remove or alter copyright, license, attribution, or provenance notices; or
+- use DevsLab names, logos, product marks, or trade dress except to make a
+  truthful statement that an application uses the Software.
+
+No patent, trademark, design, or branding rights are granted except the
+copyright permissions stated in Section 1.
+
+3. Ownership and feedback
+
+The Software is licensed, not sold. DevsLab and its licensors retain all
+right, title, and interest in the Software. You grant DevsLab a perpetual,
+worldwide, irrevocable, royalty-free right to use feedback you voluntarily
+provide about the Software.
+
+4. Termination
+
+This license terminates automatically if you breach it. Upon termination, you
+must stop using and distributing the Software and delete all copies under your
+control. Sections 2, 3, 5, and 6 survive termination.
+
+5. Disclaimer and limitation of liability
+
+THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE, TITLE, AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY LAW,
+DEVSLAB WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL,
+CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS,
+REVENUE, OR BUSINESS, ARISING FROM OR RELATED TO THE SOFTWARE.
+
+6. Governing law
+
+This license is governed by the laws of the Republic of Korea, excluding
+conflict-of-law rules. The Seoul Central District Court has exclusive
+jurisdiction over disputes arising from this license.
+
+This is a source-available license, not an open-source license approved by the
+Open Source Initiative.
diff --git a/packages/dds-solid/README.ko.md b/packages/dds-solid/README.ko.md
index b69739f..406bb16 100644
--- a/packages/dds-solid/README.ko.md
+++ b/packages/dds-solid/README.ko.md
@@ -1,8 +1,8 @@
-# @devslab-kr/dds-solid
+# @devslab/dds-solid
 
-DDS의 restricted internal SolidJS 2 primitive 패키지다. 애플리케이션 셸에서
-`@devslab-kr/dds-solid/styles.css`를 한 번 불러오고, 컴포넌트는
-`@devslab-kr/dds-solid`에서 사용한다.
+DDS의 공개 SolidJS 2 primitive 패키지다. 애플리케이션 셸에서
+`@devslab/dds-solid/styles.css`를 한 번 불러오고, 컴포넌트는
+`@devslab/dds-solid`에서 사용한다.
 
 상태형 컴포넌트는 controlled(`value`/`open`/`checked`)와
 uncontrolled(`defaultValue`/`defaultOpen`/`defaultChecked`) 방식을 모두
diff --git a/packages/dds-solid/README.md b/packages/dds-solid/README.md
index 4f78256..84f20e2 100644
--- a/packages/dds-solid/README.md
+++ b/packages/dds-solid/README.md
@@ -1,8 +1,8 @@
-# @devslab-kr/dds-solid
+# @devslab/dds-solid
 
-Restricted internal SolidJS 2 primitives for DDS. Import `@devslab-kr/dds-solid/styles.css`
+Public SolidJS 2 primitives for DDS. Import `@devslab/dds-solid/styles.css`
 once in the application shell, then consume the native-semantic components from
-`@devslab-kr/dds-solid`.
+`@devslab/dds-solid`.
 
 Stateful components accept both controlled (`value`/`open`/`checked`) and
 uncontrolled (`defaultValue`/`defaultOpen`/`defaultChecked`) forms. Dialog owns
diff --git a/packages/dds-solid/package.json b/packages/dds-solid/package.json
index 632986a..03424a7 100644
--- a/packages/dds-solid/package.json
+++ b/packages/dds-solid/package.json
@@ -1,9 +1,9 @@
 {
-  "name": "@devslab-kr/dds-solid",
-  "version": "0.2.8",
+  "name": "@devslab/dds-solid",
+  "version": "0.3.0",
   "description": "Accessible SolidJS primitives for the DevsLab Design System",
   "type": "module",
-  "license": "UNLICENSED",
+  "license": "SEE LICENSE IN LICENSE",
   "sideEffects": [
     "./styles.css"
   ],
@@ -13,9 +13,9 @@
     "directory": "packages/dds-solid"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com",
-    "access": "restricted",
-    "provenance": false
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "dist",
@@ -43,9 +43,9 @@
     "test:a11y": "vitest run --config vitest.config.ts src/__tests__/a11y.test.tsx"
   },
   "dependencies": {
-    "@devslab-kr/dds-css": "workspace:0.2.8",
-    "@devslab-kr/dds-icons": "workspace:0.2.8",
-    "@devslab-kr/dds-tokens": "workspace:0.2.8"
+    "@devslab/dds-css": "workspace:0.3.0",
+    "@devslab/dds-icons": "workspace:0.3.0",
+    "@devslab/dds-tokens": "workspace:0.3.0"
   },
   "peerDependencies": {
     "solid-js": "1.9.15"
diff --git a/packages/dds-solid/src/icon.tsx b/packages/dds-solid/src/icon.tsx
index 6ed9b25..1c94dbb 100644
--- a/packages/dds-solid/src/icon.tsx
+++ b/packages/dds-solid/src/icon.tsx
@@ -1,4 +1,4 @@
-import { directionPolicy, icons, type DdsIconName } from "@devslab-kr/dds-icons";
+import { directionPolicy, icons, type DdsIconName } from "@devslab/dds-icons";
 import { splitProps, type JSX } from "solid-js";
 
 import { classes } from "./utils";
diff --git a/packages/dds-solid/styles.css b/packages/dds-solid/styles.css
index d0b83ea..5ac3922 100644
--- a/packages/dds-solid/styles.css
+++ b/packages/dds-solid/styles.css
@@ -1,2 +1,2 @@
-@import "@devslab-kr/dds-tokens/tokens.css";
-@import "@devslab-kr/dds-css/dds.css";
+@import "@devslab/dds-tokens/tokens.css";
+@import "@devslab/dds-css/dds.css";
diff --git a/packages/dds-solid/vite.config.ts b/packages/dds-solid/vite.config.ts
index 0c07f1d..5d7dcd1 100644
--- a/packages/dds-solid/vite.config.ts
+++ b/packages/dds-solid/vite.config.ts
@@ -7,7 +7,7 @@ export default defineConfig({
     lib: { entry: "src/index.ts", formats: ["es"], fileName: "index" },
     sourcemap: true,
     rollupOptions: {
-      external: [/^solid-js(?:\/|$)/, /^@solidjs\/web(?:\/|$)/, /^@devslab-kr\//],
+      external: [/^solid-js(?:\/|$)/, /^@solidjs\/web(?:\/|$)/, /^@devslab\//],
     },
   },
 });
diff --git a/packages/dds-solid/vite.server.config.ts b/packages/dds-solid/vite.server.config.ts
index 808029e..2274f1b 100644
--- a/packages/dds-solid/vite.server.config.ts
+++ b/packages/dds-solid/vite.server.config.ts
@@ -9,7 +9,7 @@ export default defineConfig({
     emptyOutDir: false,
     sourcemap: true,
     rollupOptions: {
-      external: [/^solid-js(?:\/|$)/, /^@devslab-kr\//],
+      external: [/^solid-js(?:\/|$)/, /^@devslab\//],
       output: { entryFileNames: "server.js" },
     },
   },
diff --git a/packages/dds-tokens/LICENSE b/packages/dds-tokens/LICENSE
new file mode 100644
index 0000000..6ee9f10
--- /dev/null
+++ b/packages/dds-tokens/LICENSE
@@ -0,0 +1,74 @@
+DevsLab Source-Available License 1.0
+
+Copyright (c) 2026 DevsLab. All rights reserved.
+
+This license governs the DDS software, design tokens, components, icons,
+documentation, and other materials distributed with this license (the
+"Software").
+
+1. Permitted use
+
+Subject to this license, DevsLab grants you a limited, worldwide,
+non-exclusive, non-transferable, revocable, royalty-free right to:
+
+- download and install unmodified copies of the Software;
+- use and execute the Software for internal or commercial applications;
+- compile, minify, tree-shake, and bundle unmodified Software solely as a
+  technical part of building an application; and
+- distribute the resulting object code only as an inseparable part of that
+  application and not as a standalone library, design system, component kit,
+  template, or asset collection.
+
+Normal application configuration through documented public APIs, design-token
+overrides, CSS custom properties, and component properties is permitted and is
+not considered modification of the Software.
+
+2. Restrictions
+
+Except where applicable law does not allow the restriction, you may not:
+
+- modify, adapt, translate, reverse engineer, or create derivative works of the
+  Software itself;
+- publish, republish, sublicense, sell, rent, host, or redistribute the
+  Software or any modified version as a standalone package or downloadable
+  collection;
+- use the Software or a substantial portion of it to create or operate a
+  competing general-purpose design system, UI kit, component library, icon
+  library, token library, template marketplace, or hosted equivalent;
+- remove or alter copyright, license, attribution, or provenance notices; or
+- use DevsLab names, logos, product marks, or trade dress except to make a
+  truthful statement that an application uses the Software.
+
+No patent, trademark, design, or branding rights are granted except the
+copyright permissions stated in Section 1.
+
+3. Ownership and feedback
+
+The Software is licensed, not sold. DevsLab and its licensors retain all
+right, title, and interest in the Software. You grant DevsLab a perpetual,
+worldwide, irrevocable, royalty-free right to use feedback you voluntarily
+provide about the Software.
+
+4. Termination
+
+This license terminates automatically if you breach it. Upon termination, you
+must stop using and distributing the Software and delete all copies under your
+control. Sections 2, 3, 5, and 6 survive termination.
+
+5. Disclaimer and limitation of liability
+
+THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE, TITLE, AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY LAW,
+DEVSLAB WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL,
+CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS,
+REVENUE, OR BUSINESS, ARISING FROM OR RELATED TO THE SOFTWARE.
+
+6. Governing law
+
+This license is governed by the laws of the Republic of Korea, excluding
+conflict-of-law rules. The Seoul Central District Court has exclusive
+jurisdiction over disputes arising from this license.
+
+This is a source-available license, not an open-source license approved by the
+Open Source Initiative.
diff --git a/packages/dds-tokens/README.ko.md b/packages/dds-tokens/README.ko.md
index 64f148d..94efac4 100644
--- a/packages/dds-tokens/README.ko.md
+++ b/packages/dds-tokens/README.ko.md
@@ -1,4 +1,4 @@
-# @devslab-kr/dds-tokens
+# @devslab/dds-tokens
 
 🌐 [English](README.md)
 
@@ -7,11 +7,11 @@
 
 | 산출물 | 임포트 | 소비자 |
 | --- | --- | --- |
-| `dist/tokens.css` | `@devslab-kr/dds-tokens/tokens.css` | 모든 웹 표면. `--dds-*` 커스텀 프로퍼티 — 라이트는 `:root`, 다크는 `[data-theme="dark"]` |
-| `dist/tailwind/theme.css` | `@devslab-kr/dds-tokens/tailwind/theme.css` | Tailwind v4 (`@theme`) |
-| `dist/tailwind/preset.js` / `.cjs` | `@devslab-kr/dds-tokens/tailwind/preset` | Tailwind v3 (`presets: [...]`) |
-| `dist/tokens.ts` (+ `tokens.js` / `tokens.d.ts`) | `@devslab-kr/dds-tokens` | RN·런타임 코드 — 단위 없는 숫자 (웹 px, RN pt) |
-| `dist/ionic.css` | `@devslab-kr/dds-tokens/ionic.css` | Ionic 앱 — `--ion-*`를 `--dds-*`에 매핑: 브랜드색(`primary` + `-rgb`/`-shade`/`-tint`/`-contrast`), 상태색 3종 + 각 `-contrast`, 페이지 배경·텍스트·보더, 폰트, 앱 크롬(`item`·`toolbar`·`tab-bar`·`card`) |
+| `dist/tokens.css` | `@devslab/dds-tokens/tokens.css` | 모든 웹 표면. `--dds-*` 커스텀 프로퍼티 — 라이트는 `:root`, 다크는 `[data-theme="dark"]` |
+| `dist/tailwind/theme.css` | `@devslab/dds-tokens/tailwind/theme.css` | Tailwind v4 (`@theme`) |
+| `dist/tailwind/preset.js` / `.cjs` | `@devslab/dds-tokens/tailwind/preset` | Tailwind v3 (`presets: [...]`) |
+| `dist/tokens.ts` (+ `tokens.js` / `tokens.d.ts`) | `@devslab/dds-tokens` | RN·런타임 코드 — 단위 없는 숫자 (웹 px, RN pt) |
+| `dist/ionic.css` | `@devslab/dds-tokens/ionic.css` | Ionic 앱 — `--ion-*`를 `--dds-*`에 매핑: 브랜드색(`primary` + `-rgb`/`-shade`/`-tint`/`-contrast`), 상태색 3종 + 각 `-contrast`, 페이지 배경·텍스트·보더, 폰트, 앱 크롬(`item`·`toolbar`·`tab-bar`·`card`) |
 
 ## 사용 노트
 
diff --git a/packages/dds-tokens/README.md b/packages/dds-tokens/README.md
index 2018721..2a48753 100644
--- a/packages/dds-tokens/README.md
+++ b/packages/dds-tokens/README.md
@@ -1,4 +1,4 @@
-# @devslab-kr/dds-tokens
+# @devslab/dds-tokens
 
 🌐 [한국어](README.ko.md)
 
@@ -8,11 +8,11 @@ DDS design tokens, built from the single source at the repo root
 
 | Artifact | Import | Consumer |
 | --- | --- | --- |
-| `dist/tokens.css` | `@devslab-kr/dds-tokens/tokens.css` | Every web surface. `--dds-*` custom properties — light on `:root`, dark on `[data-theme="dark"]` |
-| `dist/tailwind/theme.css` | `@devslab-kr/dds-tokens/tailwind/theme.css` | Tailwind v4 (`@theme`) |
-| `dist/tailwind/preset.js` / `.cjs` | `@devslab-kr/dds-tokens/tailwind/preset` | Tailwind v3 (`presets: [...]`) |
-| `dist/tokens.ts` (+ `tokens.js` / `tokens.d.ts`) | `@devslab-kr/dds-tokens` | RN and any runtime code — raw numbers (px on web, pt on RN) |
-| `dist/ionic.css` | `@devslab-kr/dds-tokens/ionic.css` | Ionic apps — `--ion-*` mapped onto `--dds-*`: brand color (`primary` + `-rgb`/`-shade`/`-tint`/`-contrast`), the three status colors with their `-contrast`, page background/text/border, font, and app chrome (`item`, `toolbar`, `tab-bar`, `card`) |
+| `dist/tokens.css` | `@devslab/dds-tokens/tokens.css` | Every web surface. `--dds-*` custom properties — light on `:root`, dark on `[data-theme="dark"]` |
+| `dist/tailwind/theme.css` | `@devslab/dds-tokens/tailwind/theme.css` | Tailwind v4 (`@theme`) |
+| `dist/tailwind/preset.js` / `.cjs` | `@devslab/dds-tokens/tailwind/preset` | Tailwind v3 (`presets: [...]`) |
+| `dist/tokens.ts` (+ `tokens.js` / `tokens.d.ts`) | `@devslab/dds-tokens` | RN and any runtime code — raw numbers (px on web, pt on RN) |
+| `dist/ionic.css` | `@devslab/dds-tokens/ionic.css` | Ionic apps — `--ion-*` mapped onto `--dds-*`: brand color (`primary` + `-rgb`/`-shade`/`-tint`/`-contrast`), the three status colors with their `-contrast`, page background/text/border, font, and app chrome (`item`, `toolbar`, `tab-bar`, `card`) |
 
 ## Usage notes
 
diff --git a/packages/dds-tokens/build.mjs b/packages/dds-tokens/build.mjs
index 41fbb9f..09c8359 100644
--- a/packages/dds-tokens/build.mjs
+++ b/packages/dds-tokens/build.mjs
@@ -24,7 +24,7 @@ const pkgDir = dirname(fileURLToPath(import.meta.url));
 const tokensDir = join(pkgDir, "..", "..", "tokens");
 const dist = join(pkgDir, "dist");
 
-const HEADER = `/* Generated by @devslab-kr/dds-tokens — do not edit. Source: tokens/*.json */`;
+const HEADER = `/* Generated by @devslab/dds-tokens — do not edit. Source: tokens/*.json */`;
 
 // ---------------------------------------------------------------------------
 // Resolve both themes without a build-time framework dependency
@@ -316,7 +316,7 @@ const tsExports = {
   motion: treeFrom(lightTokens, "motion"),
 };
 
-const tsHeader = `// Generated by @devslab-kr/dds-tokens — do not edit. Source: tokens/*.json
+const tsHeader = `// Generated by @devslab/dds-tokens — do not edit. Source: tokens/*.json
 // Numbers are unitless: web treats them as px (rem-equivalent at 16px root), RN as pt.`;
 const entries = Object.entries(tsExports);
 const tokensTs = `${tsHeader}
diff --git a/packages/dds-tokens/package.json b/packages/dds-tokens/package.json
index f9eaf0b..6400757 100644
--- a/packages/dds-tokens/package.json
+++ b/packages/dds-tokens/package.json
@@ -1,18 +1,18 @@
 {
-  "name": "@devslab-kr/dds-tokens",
-  "version": "0.2.8",
+  "name": "@devslab/dds-tokens",
+  "version": "0.3.0",
   "description": "DDS (DevsLab Design System) design tokens — one JSON source, built for CSS, Tailwind, TypeScript/RN and Ionic",
   "type": "module",
-  "license": "UNLICENSED",
+  "license": "SEE LICENSE IN LICENSE",
   "repository": {
     "type": "git",
     "url": "https://github.com/devslab-kr/dds.git",
     "directory": "packages/dds-tokens"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com",
-    "access": "restricted",
-    "provenance": false
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "dist"
diff --git a/packages/site-kit/LICENSE b/packages/site-kit/LICENSE
new file mode 100644
index 0000000..6ee9f10
--- /dev/null
+++ b/packages/site-kit/LICENSE
@@ -0,0 +1,74 @@
+DevsLab Source-Available License 1.0
+
+Copyright (c) 2026 DevsLab. All rights reserved.
+
+This license governs the DDS software, design tokens, components, icons,
+documentation, and other materials distributed with this license (the
+"Software").
+
+1. Permitted use
+
+Subject to this license, DevsLab grants you a limited, worldwide,
+non-exclusive, non-transferable, revocable, royalty-free right to:
+
+- download and install unmodified copies of the Software;
+- use and execute the Software for internal or commercial applications;
+- compile, minify, tree-shake, and bundle unmodified Software solely as a
+  technical part of building an application; and
+- distribute the resulting object code only as an inseparable part of that
+  application and not as a standalone library, design system, component kit,
+  template, or asset collection.
+
+Normal application configuration through documented public APIs, design-token
+overrides, CSS custom properties, and component properties is permitted and is
+not considered modification of the Software.
+
+2. Restrictions
+
+Except where applicable law does not allow the restriction, you may not:
+
+- modify, adapt, translate, reverse engineer, or create derivative works of the
+  Software itself;
+- publish, republish, sublicense, sell, rent, host, or redistribute the
+  Software or any modified version as a standalone package or downloadable
+  collection;
+- use the Software or a substantial portion of it to create or operate a
+  competing general-purpose design system, UI kit, component library, icon
+  library, token library, template marketplace, or hosted equivalent;
+- remove or alter copyright, license, attribution, or provenance notices; or
+- use DevsLab names, logos, product marks, or trade dress except to make a
+  truthful statement that an application uses the Software.
+
+No patent, trademark, design, or branding rights are granted except the
+copyright permissions stated in Section 1.
+
+3. Ownership and feedback
+
+The Software is licensed, not sold. DevsLab and its licensors retain all
+right, title, and interest in the Software. You grant DevsLab a perpetual,
+worldwide, irrevocable, royalty-free right to use feedback you voluntarily
+provide about the Software.
+
+4. Termination
+
+This license terminates automatically if you breach it. Upon termination, you
+must stop using and distributing the Software and delete all copies under your
+control. Sections 2, 3, 5, and 6 survive termination.
+
+5. Disclaimer and limitation of liability
+
+THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE, TITLE, AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY LAW,
+DEVSLAB WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL,
+CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS,
+REVENUE, OR BUSINESS, ARISING FROM OR RELATED TO THE SOFTWARE.
+
+6. Governing law
+
+This license is governed by the laws of the Republic of Korea, excluding
+conflict-of-law rules. The Seoul Central District Court has exclusive
+jurisdiction over disputes arising from this license.
+
+This is a source-available license, not an open-source license approved by the
+Open Source Initiative.
diff --git a/packages/site-kit/README.ko.md b/packages/site-kit/README.ko.md
index fd8cecb..300d274 100644
--- a/packages/site-kit/README.ko.md
+++ b/packages/site-kit/README.ko.md
@@ -1,13 +1,13 @@
-# @devslab-kr/site-kit
+# @devslab/site-kit
 
-DevsLab 제품의 공개 웹사이트를 위한 restricted internal 인프라 패키지다. 엄격한 14개 로케일 카탈로그, 로케일 협상, SEO/GEO 문서 생성기, 접근 가능한 SolidJS 2 사이트 셸을 제공한다. 제품명·주장·내비게이션·번역 문구는 항상 소비 앱이 소유한다.
+DevsLab 제품의 공개 웹사이트를 위한 공개 인프라 패키지다. 엄격한 14개 로케일 카탈로그, 로케일 협상, SEO/GEO 문서 생성기, 접근 가능한 SolidJS 2 사이트 셸을 제공한다. 제품명·주장·내비게이션·번역 문구는 항상 소비 앱이 소유한다.
 
 ## 진입점
 
-- `@devslab-kr/site-kit` — 런타임 중립 로케일·카탈로그·SEO·사이트맵·robots·검증된 사실 유틸리티
-- `@devslab-kr/site-kit/solid` — 헤더·푸터·언어/테마 컨트롤·마케팅/법률/상태/오류 레이아웃·접근 요청 폼
-- `@devslab-kr/site-kit/tanstack-start` — 중립 메타데이터를 TanStack Start head descriptor로 변환
-- `@devslab-kr/site-kit/styles.css` — 논리 속성과 RTL을 지원하는 공통 사이트 스타일
+- `@devslab/site-kit` — 런타임 중립 로케일·카탈로그·SEO·사이트맵·robots·검증된 사실 유틸리티
+- `@devslab/site-kit/solid` — 헤더·푸터·언어/테마 컨트롤·마케팅/법률/상태/오류 레이아웃·접근 요청 폼
+- `@devslab/site-kit/tanstack-start` — 중립 메타데이터를 TanStack Start head descriptor로 변환
+- `@devslab/site-kit/styles.css` — 논리 속성과 RTL을 지원하는 공통 사이트 스타일
 
 카탈로그 생성은 의도적으로 엄격하다. 14개 로케일 모두 동일한 키와 이름 기반 placeholder를 가져야 하며 런타임 문구 폴백은 없다.
 
diff --git a/packages/site-kit/README.md b/packages/site-kit/README.md
index f538046..edbd09b 100644
--- a/packages/site-kit/README.md
+++ b/packages/site-kit/README.md
@@ -1,13 +1,13 @@
-# @devslab-kr/site-kit
+# @devslab/site-kit
 
-Restricted internal public-site infrastructure for DevsLab products. It provides strict 14-locale catalogs, locale negotiation, SEO/GEO document builders, and accessible SolidJS 2 site shells. Product names, claims, navigation, and translated copy always remain in the consuming application.
+Public product-site infrastructure for DevsLab products. It provides strict 14-locale catalogs, locale negotiation, SEO/GEO document builders, and accessible SolidJS 2 site shells. Product names, claims, navigation, and translated copy always remain in the consuming application.
 
 ## Entry points
 
-- `@devslab-kr/site-kit` — runtime-neutral locale, catalog, SEO, sitemap, robots, and verified-fact utilities.
-- `@devslab-kr/site-kit/solid` — header, footer, locale/theme controls, marketing/legal/status/error layouts, and request-access form.
-- `@devslab-kr/site-kit/tanstack-start` — conversion of neutral metadata to TanStack Start head descriptors.
-- `@devslab-kr/site-kit/styles.css` — logical-property, RTL-aware shared site styles.
+- `@devslab/site-kit` — runtime-neutral locale, catalog, SEO, sitemap, robots, and verified-fact utilities.
+- `@devslab/site-kit/solid` — header, footer, locale/theme controls, marketing/legal/status/error layouts, and request-access form.
+- `@devslab/site-kit/tanstack-start` — conversion of neutral metadata to TanStack Start head descriptors.
+- `@devslab/site-kit/styles.css` — logical-property, RTL-aware shared site styles.
 
 Catalog construction is intentionally strict: all 14 locales must have exactly the same keys and named placeholders. There is no runtime copy fallback.
 
diff --git a/packages/site-kit/fixtures/worker/src/index.tsx b/packages/site-kit/fixtures/worker/src/index.tsx
index 48f6f04..f53395b 100644
--- a/packages/site-kit/fixtures/worker/src/index.tsx
+++ b/packages/site-kit/fixtures/worker/src/index.tsx
@@ -1,9 +1,9 @@
 import { renderToString } from "solid-js/web";
 import { createComponent } from "solid-js";
 
-import { buildMetadata, type SiteLocale } from "@devslab-kr/site-kit";
-import { MarketingShell } from "@devslab-kr/site-kit/solid";
-import { toTanStackHead } from "@devslab-kr/site-kit/tanstack-start";
+import { buildMetadata, type SiteLocale } from "@devslab/site-kit";
+import { MarketingShell } from "@devslab/site-kit/solid";
+import { toTanStackHead } from "@devslab/site-kit/tanstack-start";
 import coreWorker from "./index.mjs";
 
 const messages = {
diff --git a/packages/site-kit/package.json b/packages/site-kit/package.json
index a39a8a1..c869d68 100644
--- a/packages/site-kit/package.json
+++ b/packages/site-kit/package.json
@@ -1,9 +1,9 @@
 {
-  "name": "@devslab-kr/site-kit",
-  "version": "0.2.8",
+  "name": "@devslab/site-kit",
+  "version": "0.3.0",
   "description": "Strict i18n, SEO/GEO, and Solid public-site shells for DevsLab products",
   "type": "module",
-  "license": "UNLICENSED",
+  "license": "SEE LICENSE IN LICENSE",
   "sideEffects": [
     "./styles.css"
   ],
@@ -13,9 +13,9 @@
     "directory": "packages/site-kit"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com",
-    "access": "restricted",
-    "provenance": false
+    "registry": "https://registry.npmjs.org",
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "dist",
@@ -55,7 +55,7 @@
     "test:worker": "wrangler deploy --dry-run --config fixtures/worker/wrangler.jsonc --outdir dist-worker"
   },
   "dependencies": {
-    "@devslab-kr/dds-solid": "workspace:0.2.8"
+    "@devslab/dds-solid": "workspace:0.3.0"
   },
   "peerDependencies": {
     "@tanstack/solid-router": "1.170.30",
diff --git a/packages/site-kit/src/solid/__tests__/oss-product-mark.test.tsx b/packages/site-kit/src/solid/__tests__/oss-product-mark.test.tsx
new file mode 100644
index 0000000..4710ebc
--- /dev/null
+++ b/packages/site-kit/src/solid/__tests__/oss-product-mark.test.tsx
@@ -0,0 +1,26 @@
+import { render } from "solid-js/web";
+import { afterEach, expect, it } from "vitest";
+
+import { OssProductMark } from "../index";
+
+let dispose: (() => void) | undefined;
+afterEach(() => { dispose?.(); dispose = undefined; document.body.replaceChildren(); });
+
+it("labels an identifying OSS mark and keeps its versioned source URL", () => {
+  const host = document.body.appendChild(document.createElement("div"));
+  const src = "https://raw.githubusercontent.com/devslab-kr/oss-brand/v0.2.0/dist/numkey/glyph-color.svg";
+  dispose = render(() => <OssProductMark name="numkey" src={src} size="sm" />, host);
+  const image = host.querySelector("img");
+  expect(image?.alt).toBe("numkey");
+  expect(image?.getAttribute("src")).toBe(src);
+  expect(image?.className).toContain("oss-product-mark--sm");
+  expect(image?.getAttribute("decoding")).toBe("async");
+});
+
+it("removes duplicate semantics when the mark is decorative", () => {
+  const host = document.body.appendChild(document.createElement("div"));
+  dispose = render(() => <OssProductMark name="locale-match" src="/locale-match.svg" decorative />, host);
+  const image = host.querySelector("img");
+  expect(image?.alt).toBe("");
+  expect(image?.getAttribute("aria-hidden")).toBe("true");
+});
diff --git a/packages/site-kit/src/solid/chrome.tsx b/packages/site-kit/src/solid/chrome.tsx
index 4780dcc..372e9dc 100644
--- a/packages/site-kit/src/solid/chrome.tsx
+++ b/packages/site-kit/src/solid/chrome.tsx
@@ -1,4 +1,4 @@
-import { Button, Icon, IconButton } from "@devslab-kr/dds-solid";
+import { Button, Icon, IconButton } from "@devslab/dds-solid";
 import { For, createSignal, onMount, type JSX } from "solid-js";
 
 import { LOCALES, type SiteLocale } from "../core/locales.mjs";
diff --git a/packages/site-kit/src/solid/index.ts b/packages/site-kit/src/solid/index.ts
index a040719..fa8bf42 100644
--- a/packages/site-kit/src/solid/index.ts
+++ b/packages/site-kit/src/solid/index.ts
@@ -1,4 +1,5 @@
 export { LocaleMenu, SiteFooter, SiteHeader, ThemeToggle, type LocaleMenuProps, type SiteFooterProps, type SiteHeaderProps, type ThemeToggleProps } from "./chrome";
 export { ErrorLayout, LegalLayout, MarketingShell, NotFoundLayout, StatusBanner, type ErrorLayoutProps, type LegalLayoutProps, type MarketingShellProps, type NotFoundLayoutProps, type StatusBannerProps } from "./layouts";
 export { RequestAccessForm, type RequestAccessFormProps, type RequestAccessMessages } from "./request-access";
+export { OssProductMark, type OssProductMarkProps } from "./oss-product-mark";
 export type { LocaleState, SiteBrand, SiteLink, SiteMessages, ThemePreference } from "./types";
diff --git a/packages/site-kit/src/solid/layouts.tsx b/packages/site-kit/src/solid/layouts.tsx
index 12a8f78..411bf79 100644
--- a/packages/site-kit/src/solid/layouts.tsx
+++ b/packages/site-kit/src/solid/layouts.tsx
@@ -1,4 +1,4 @@
-import { Button, type ButtonTone } from "@devslab-kr/dds-solid";
+import { Button, type ButtonTone } from "@devslab/dds-solid";
 import type { JSX } from "solid-js";
 
 import { SiteFooter, SiteHeader, type SiteFooterProps, type SiteHeaderProps } from "./chrome";
diff --git a/packages/site-kit/src/solid/oss-product-mark.tsx b/packages/site-kit/src/solid/oss-product-mark.tsx
new file mode 100644
index 0000000..b67a67f
--- /dev/null
+++ b/packages/site-kit/src/solid/oss-product-mark.tsx
@@ -0,0 +1,26 @@
+export interface OssProductMarkProps {
+  name: string;
+  src: string;
+  size?: "sm" | "md" | "lg";
+  decorative?: boolean;
+  class?: string;
+}
+
+const MARK_SIZE = { sm: 24, md: 32, lg: 48 } as const;
+
+export function OssProductMark(props: OssProductMarkProps) {
+  const size = () => props.size ?? "md";
+  const pixels = () => MARK_SIZE[size()];
+
+  return (
+    <img
+      class={`oss-product-mark oss-product-mark--${size()}${props.class ? ` ${props.class}` : ""}`}
+      src={props.src}
+      alt={props.decorative ? "" : props.name}
+      aria-hidden={props.decorative ? "true" : undefined}
+      width={pixels()}
+      height={pixels()}
+      decoding="async"
+    />
+  );
+}
diff --git a/packages/site-kit/src/solid/request-access.tsx b/packages/site-kit/src/solid/request-access.tsx
index 2bc19a2..b8b0085 100644
--- a/packages/site-kit/src/solid/request-access.tsx
+++ b/packages/site-kit/src/solid/request-access.tsx
@@ -1,4 +1,4 @@
-import { Button, Field } from "@devslab-kr/dds-solid";
+import { Button, Field } from "@devslab/dds-solid";
 import { createSignal } from "solid-js";
 
 export interface RequestAccessMessages {
diff --git a/packages/site-kit/styles.css b/packages/site-kit/styles.css
index ea1f19f..8108165 100644
--- a/packages/site-kit/styles.css
+++ b/packages/site-kit/styles.css
@@ -1,4 +1,4 @@
-@import "@devslab-kr/dds-solid/styles.css";
+@import "@devslab/dds-solid/styles.css";
 
 .dds-sr-only { position: absolute; inline-size: 1px; block-size: 1px; padding: 0; margin: -1px; overflow: hidden; clip-path: inset(50%); white-space: nowrap; border: 0; }
 .dds-sr-only:focus { position: fixed; inset-block-start: var(--dds-space-8); inset-inline-start: var(--dds-space-8); z-index: 1000; inline-size: auto; block-size: auto; padding: var(--dds-space-8) var(--dds-space-12); margin: 0; overflow: visible; clip-path: none; white-space: normal; border: 2px solid currentColor; border-radius: var(--dds-radius-sm); background: var(--dds-color-bg-default); color: var(--dds-color-text-primary); }
@@ -25,6 +25,10 @@
 .site-status--info { border-inline-start-color: var(--dds-color-status-info); }
 .site-request-form { display: grid; gap: var(--dds-space-16); max-inline-size: 640px; }
 .site-centered-layout { min-block-size: 60dvh; display: grid; place-content: center; justify-items: start; gap: var(--dds-space-16); }
+.oss-product-mark { display: block; flex: none; inline-size: var(--oss-product-mark-size); block-size: var(--oss-product-mark-size); object-fit: contain; }
+.oss-product-mark--sm { --oss-product-mark-size: 24px; }
+.oss-product-mark--md { --oss-product-mark-size: 32px; }
+.oss-product-mark--lg { --oss-product-mark-size: 48px; }
 
 @media (max-width: 720px) {
   .site-header__inner { grid-template-columns: minmax(0, 1fr) auto; padding-block: var(--dds-space-12); }
diff --git a/packages/site-kit/vite.config.ts b/packages/site-kit/vite.config.ts
index 83536cf..fdb3244 100644
--- a/packages/site-kit/vite.config.ts
+++ b/packages/site-kit/vite.config.ts
@@ -6,6 +6,6 @@ export default defineConfig({
   build: {
     lib: { entry: "src/solid/index.ts", formats: ["es"], fileName: "solid" },
     sourcemap: true,
-    rollupOptions: { external: [/^solid-js(?:\/|$)/, /^@solidjs\/web(?:\/|$)/, /^@devslab-kr\//] },
+    rollupOptions: { external: [/^solid-js(?:\/|$)/, /^@solidjs\/web(?:\/|$)/, /^@devslab\//] },
   },
 });
diff --git a/packages/site-kit/vite.server.config.ts b/packages/site-kit/vite.server.config.ts
index ec0c17e..9cbd163 100644
--- a/packages/site-kit/vite.server.config.ts
+++ b/packages/site-kit/vite.server.config.ts
@@ -9,7 +9,7 @@ export default defineConfig({
     emptyOutDir: false,
     sourcemap: true,
     rollupOptions: {
-      external: [/^solid-js(?:\/|$)/, /^@devslab-kr\//],
+      external: [/^solid-js(?:\/|$)/, /^@devslab\//],
       output: { entryFileNames: "solid.server.js" },
     },
   },
diff --git a/packages/site-kit/vitest.config.ts b/packages/site-kit/vitest.config.ts
index 12cb874..6c271e2 100644
--- a/packages/site-kit/vitest.config.ts
+++ b/packages/site-kit/vitest.config.ts
@@ -5,12 +5,16 @@ export default defineConfig({
   plugins: [solid({ hot: false })],
   resolve: {
     alias: {
-      "@devslab-kr/dds-solid": fileURLToPath(new URL("../dds-solid/src/index.ts", import.meta.url)),
+      "@devslab/dds-solid": fileURLToPath(new URL("../dds-solid/src/index.ts", import.meta.url)),
     },
   },
   test: {
     environment: "jsdom",
-    include: ["src/solid/__tests__/a11y.test.tsx", "src/solid/__tests__/shells.test.tsx"],
+    include: [
+      "src/solid/__tests__/a11y.test.tsx",
+      "src/solid/__tests__/shells.test.tsx",
+      "src/solid/__tests__/oss-product-mark.test.tsx",
+    ],
     restoreMocks: true,
   },
 });
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0f2f769..7084cae 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -73,14 +73,14 @@ importers:
 
   packages/dds-solid:
     dependencies:
-      '@devslab-kr/dds-css':
-        specifier: workspace:0.2.8
+      '@devslab/dds-css':
+        specifier: workspace:0.3.0
         version: link:../dds-css
-      '@devslab-kr/dds-icons':
-        specifier: workspace:0.2.8
+      '@devslab/dds-icons':
+        specifier: workspace:0.3.0
         version: link:../dds-icons
-      '@devslab-kr/dds-tokens':
-        specifier: workspace:0.2.8
+      '@devslab/dds-tokens':
+        specifier: workspace:0.3.0
         version: link:../dds-tokens
     devDependencies:
       '@testing-library/jest-dom':
@@ -119,8 +119,8 @@ importers:
 
   packages/site-kit:
     dependencies:
-      '@devslab-kr/dds-solid':
-        specifier: workspace:0.2.8
+      '@devslab/dds-solid':
+        specifier: workspace:0.3.0
         version: link:../dds-solid
     devDependencies:
       '@tanstack/solid-router':
diff --git a/preview/components.html b/preview/components.html
index 0859472..68e04a7 100644
--- a/preview/components.html
+++ b/preview/components.html
@@ -95,7 +95,7 @@
   <header class="site">
     <h1>DDS 컴포넌트</h1>
     <button class="dds-btn dds-btn--secondary dds-btn--sm" id="themeToggle">테마 전환</button>
-    <span class="src">@devslab-kr/dds-css · v1 인벤토리 20종</span>
+    <span class="src">@devslab/dds-css · v1 인벤토리 20종</span>
     <nav aria-label="DDS 쇼케이스">
       <a href="./index.html">&gt; ./dds --foundation</a>
       <a href="./icons.html">&gt; ./dds --icons</a>
diff --git a/preview/icons.html b/preview/icons.html
index 4ec6754..551e95d 100644
--- a/preview/icons.html
+++ b/preview/icons.html
@@ -44,7 +44,7 @@
   <header class="site">
     <h1>DDS 아이콘</h1>
     <button class="dds-btn dds-btn--secondary dds-btn--sm" id="themeToggle">테마 전환</button>
-    <span class="src">@devslab-kr/dds-icons</span>
+    <span class="src">@devslab/dds-icons</span>
     <nav aria-label="DDS 쇼케이스">
       <a href="./index.html">&gt; ./dds --foundation</a>
       <a href="./components.html">&gt; ./dds --components</a>
diff --git a/scripts/verify-package-names.mjs b/scripts/verify-package-names.mjs
index 5d65f6a..f806980 100644
--- a/scripts/verify-package-names.mjs
+++ b/scripts/verify-package-names.mjs
@@ -8,10 +8,11 @@ for (const packageName of packages) {
   const manifest = JSON.parse(
     await readFile(new URL(`../packages/${packageName}/package.json`, import.meta.url), "utf8"),
   );
-  assert.equal(manifest.name, `@devslab-kr/${packageName}`);
-  assert.equal(manifest.publishConfig?.registry, "https://npm.pkg.github.com");
-  assert.equal(manifest.publishConfig?.access, "restricted");
-  assert.equal(manifest.publishConfig?.provenance, false);
+  assert.equal(manifest.name, `@devslab/${packageName}`);
+  assert.equal(manifest.license, "SEE LICENSE IN LICENSE");
+  assert.equal(manifest.publishConfig?.registry, "https://registry.npmjs.org");
+  assert.equal(manifest.publishConfig?.access, "public");
+  assert.equal(manifest.publishConfig?.provenance, true);
 }
 
 const workspace = fileURLToPath(new URL("..", import.meta.url));
@@ -25,7 +26,7 @@ async function scan(directory) {
       const content = await readFile(path, "utf8").catch(() => "");
       assert.doesNotMatch(
         content,
-        /@devslab\/(?:dds-tokens|dds-css|dds-icons|dds-solid|site-kit)/,
+        /@devslab-kr\/(?:dds-tokens|dds-css|dds-icons|dds-solid|site-kit)/,
         `legacy package scope remains in ${path}`,
       );
     }
@@ -33,4 +34,4 @@ async function scan(directory) {
 }
 await scan(workspace);
 
-console.log(`verified ${packages.length} final @devslab-kr package names`);
+console.log(`verified ${packages.length} public @devslab package names`);
diff --git a/scripts/verify-release.mjs b/scripts/verify-release.mjs
index 814e03a..bf148e2 100644
--- a/scripts/verify-release.mjs
+++ b/scripts/verify-release.mjs
@@ -46,8 +46,9 @@ try {
     const cwd = join(workspace, "packages", directory);
     const output = run(npm, [...npmPrefix, "pack", "--json", "--pack-destination", temp], cwd);
     const [{ filename, files, name }] = JSON.parse(output);
-    assert.equal(name, `@devslab-kr/${directory}`);
+    assert.equal(name, `@devslab/${directory}`);
     assert.ok(files.some(({ path }) => path === "package.json"));
+    assert.ok(files.some(({ path }) => path === "LICENSE"), `${directory} must pack its source-available license`);
     assert.ok(files.some(({ path }) => path.startsWith("dist/")), `${directory} must pack dist`);
     if (directory === "dds-icons") {
       assert.ok(files.some(({ path }) => path === "direction-policy.json"));
@@ -60,11 +61,11 @@ try {
   await writeFile(join(temp, "package.json"), JSON.stringify({ private: true }), "utf8");
   run(npm, [...npmPrefix, "install", "--ignore-scripts", "--no-audit", "--no-fund", ...tarballs], temp);
 
-  const tokens = await import(new URL(`file:///${join(temp, "node_modules", "@devslab-kr", "dds-tokens", "dist", "tokens.js").replaceAll("\\", "/")}`));
-  const icons = await import(new URL(`file:///${join(temp, "node_modules", "@devslab-kr", "dds-icons", "dist", "icons.js").replaceAll("\\", "/")}`));
-  const css = await readFile(join(temp, "node_modules", "@devslab-kr", "dds-css", "dist", "dds.css"), "utf8");
+  const tokens = await import(new URL(`file:///${join(temp, "node_modules", "@devslab", "dds-tokens", "dist", "tokens.js").replaceAll("\\", "/")}`));
+  const icons = await import(new URL(`file:///${join(temp, "node_modules", "@devslab", "dds-icons", "dist", "icons.js").replaceAll("\\", "/")}`));
+  const css = await readFile(join(temp, "node_modules", "@devslab", "dds-css", "dist", "dds.css"), "utf8");
   const directionPolicy = JSON.parse(await readFile(
-    join(temp, "node_modules", "@devslab-kr", "dds-icons", "direction-policy.json"),
+    join(temp, "node_modules", "@devslab", "dds-icons", "direction-policy.json"),
     "utf8",
   ));
   assert.ok(Object.keys(tokens).length > 0, "fresh consumer can import tokens");
diff --git a/scripts/verify-site-kit-release.mjs b/scripts/verify-site-kit-release.mjs
index b14555a..45bb979 100644
--- a/scripts/verify-site-kit-release.mjs
+++ b/scripts/verify-site-kit-release.mjs
@@ -44,21 +44,22 @@ try {
   }
   const packageRoot = join(workspace, "packages", "site-kit");
   const bundle = await readFile(join(packageRoot, "dist", "solid.js"), "utf8");
-  assert.match(bundle, /from\s+["']@devslab-kr\/dds-solid["']/, "site-kit must externalize dds-solid");
+  assert.match(bundle, /from\s+["']@devslab\/dds-solid["']/, "site-kit must externalize dds-solid");
   run(["publish", siteKitTarball, "--dry-run", "--json", "--ignore-scripts"], packageRoot);
   await writeFile(join(temp, "package.json"), JSON.stringify({ private: true, type: "module" }), "utf8");
   run(["install", "--ignore-scripts", "--no-audit", "--no-fund", ...tarballs], temp);
-  const installedRoot = join(temp, "node_modules", "@devslab-kr", "site-kit");
+  const installedRoot = join(temp, "node_modules", "@devslab", "site-kit");
   const manifest = JSON.parse(await readFile(join(installedRoot, "package.json"), "utf8"));
-  assert.equal(manifest.name, "@devslab-kr/site-kit");
+  assert.equal(manifest.name, "@devslab/site-kit");
   for (const path of ["dist/solid.js", "dist/index.d.ts", "src/core/index.mjs", "src/core/index.d.mts", "src/tanstack-start.mjs", "src/tanstack-start.d.mts", "styles.css"]) {
     await access(join(installedRoot, path));
   }
-  assert.equal(manifest.publishConfig.access, "restricted");
+  assert.equal(manifest.publishConfig.access, "public");
+  assert.equal(manifest.license, "SEE LICENSE IN LICENSE");
   assert.equal(manifest.peerDependencies["solid-js"], "1.9.15");
   const core = await import(pathToFileURL(join(installedRoot, "src", "core", "index.mjs")));
   assert.equal(core.LOCALES.length, 14);
-  console.log("site-kit pack, restricted publish dry-run, and fresh consumer import passed");
+  console.log("site-kit pack, public publish dry-run, and fresh consumer import passed");
 } finally {
   await rm(temp, { recursive: true, force: true });
 }
diff --git a/scripts/verify-solid-release.mjs b/scripts/verify-solid-release.mjs
index e87708f..e06bfbd 100644
--- a/scripts/verify-solid-release.mjs
+++ b/scripts/verify-solid-release.mjs
@@ -49,14 +49,14 @@ try {
   const packageRoot = join(workspace, "packages", "dds-solid");
   for (const bundle of ["dist/index.js", "dist/server.js"]) {
     const source = await readFile(join(packageRoot, bundle), "utf8");
-    assert.match(source, /from\s+["']@devslab-kr\/dds-icons["']/, `${bundle} must externalize dds-icons`);
+    assert.match(source, /from\s+["']@devslab\/dds-icons["']/, `${bundle} must externalize dds-icons`);
   }
   run(["publish", solidTarball, "--dry-run", "--json", "--ignore-scripts"], packageRoot);
   await writeFile(join(temp, "package.json"), JSON.stringify({ private: true, type: "module" }), "utf8");
   run(["install", "--ignore-scripts", "--no-audit", "--no-fund", ...tarballs, "solid-js@1.9.15", "jsdom@30.0.1"], temp);
-  const installedRoot = join(temp, "node_modules", "@devslab-kr", "dds-solid");
+  const installedRoot = join(temp, "node_modules", "@devslab", "dds-solid");
   const manifest = JSON.parse(await readFile(join(installedRoot, "package.json"), "utf8"));
-  assert.equal(manifest.name, "@devslab-kr/dds-solid");
+  assert.equal(manifest.name, "@devslab/dds-solid");
   for (const path of ["dist/index.js", "dist/server.js", "dist/index.d.ts", "styles.css"]) {
     await access(join(installedRoot, path));
   }
@@ -65,7 +65,7 @@ try {
   await writeFile(ssrScript, `
 import { generateHydrationScript, renderToString } from "solid-js/web";
 import { createComponent } from "solid-js";
-import { Button, Icon } from "@devslab-kr/dds-solid";
+import { Button, Icon } from "@devslab/dds-solid";
 const html = renderToString(() => createComponent(Button, { get children() { return ["Fresh consumer ", createComponent(Icon, { name: "check", label: "Complete" })]; } }));
 if (!html.includes("Fresh consumer") || !html.includes("aria-label=\\"Complete\\"")) throw new Error("fresh consumer SSR failed");
 process.stdout.write(JSON.stringify({ bootstrap: generateHydrationScript(), html }));
@@ -83,7 +83,7 @@ Object.defineProperty(globalThis, "_$HY", { value: dom.window._$HY, configurable
 const host = document.querySelector("#root");
 const { hydrate } = await import("solid-js/web");
 const { createComponent } = await import("solid-js");
-const { Button, Icon } = await import("@devslab-kr/dds-solid");
+const { Button, Icon } = await import("@devslab/dds-solid");
 const diagnostics = [];
 const warn = console.warn; const error = console.error;
 console.warn = (...values) => diagnostics.push(values.join(" "));
diff --git a/tests/dds-solid-contracts.test.mjs b/tests/dds-solid-contracts.test.mjs
index f76ac03..fe36f76 100644
--- a/tests/dds-solid-contracts.test.mjs
+++ b/tests/dds-solid-contracts.test.mjs
@@ -5,10 +5,11 @@ import test from "node:test";
 const read = (path) => readFile(new URL(`../${path}`, import.meta.url), "utf8");
 const json = async (path) => JSON.parse(await read(path));
 
-test("dds-solid is a restricted exact-version package with stable exports", async () => {
+test("dds-solid is a public exact-version package with stable exports", async () => {
   const manifest = await json("packages/dds-solid/package.json");
-  assert.equal(manifest.name, "@devslab-kr/dds-solid");
-  assert.equal(manifest.publishConfig.access, "restricted");
+  assert.equal(manifest.name, "@devslab/dds-solid");
+  assert.equal(manifest.license, "SEE LICENSE IN LICENSE");
+  assert.equal(manifest.publishConfig.access, "public");
   assert.equal(manifest.peerDependencies["solid-js"], "1.9.15");
   assert.equal(manifest.peerDependencies["@solidjs/web"], undefined);
   assert.equal(manifest.devDependencies["@solidjs/web"], undefined);
@@ -79,8 +80,8 @@ test("Icon and style adapters consume DDS framework-neutral contracts", async ()
   assert.match(icon, /directionPolicy/);
   assert.match(icon, /aria-hidden/);
   assert.match(icon, /role=.*"img"/);
-  assert.match(styles, /@devslab-kr\/dds-tokens\/tokens\.css/);
-  assert.match(styles, /@devslab-kr\/dds-css\/dds\.css/);
+  assert.match(styles, /@devslab\/dds-tokens\/tokens\.css/);
+  assert.match(styles, /@devslab\/dds-css\/dds\.css/);
 });
 
 test("runtime suites cover every primitive, both state modes, focus lifecycle, a11y, and hydration", async () => {
@@ -100,7 +101,7 @@ test("runtime suites cover every primitive, both state modes, focus lifecycle, a
   for (const symbol of ["Dialog", "Tabs", "Tooltip", "ToastProvider", "Checkbox", "Radio", "Switch", "Select", "Field", "IconButton"]) assert.match(ssr, new RegExp(`\\b${symbol}\\b`));
   assert.match(release, /renderToString/);
   assert.match(release, /hydrate/);
-  assert.match(release, /@devslab-kr\/dds-solid/);
+  assert.match(release, /@devslab\/dds-solid/);
 });
 
 test("Toast dismiss control has an injected localized accessible name without an English fallback", async () => {
diff --git a/tests/foundation-contracts.test.mjs b/tests/foundation-contracts.test.mjs
index 3b77941..ed0b6f9 100644
--- a/tests/foundation-contracts.test.mjs
+++ b/tests/foundation-contracts.test.mjs
@@ -5,19 +5,21 @@ import test from "node:test";
 const read = (path) => readFile(new URL(`../${path}`, import.meta.url), "utf8");
 const json = async (path) => JSON.parse(await read(path));
 
-test("private foundation packages use the final @devslab-kr names and TypeScript 7", async () => {
+test("public foundation packages use the @devslab scope, source-available license, and TypeScript 7", async () => {
   const expected = {
-    "packages/dds-tokens/package.json": "@devslab-kr/dds-tokens",
-    "packages/dds-css/package.json": "@devslab-kr/dds-css",
-    "packages/dds-icons/package.json": "@devslab-kr/dds-icons",
+    "packages/dds-tokens/package.json": "@devslab/dds-tokens",
+    "packages/dds-css/package.json": "@devslab/dds-css",
+    "packages/dds-icons/package.json": "@devslab/dds-icons",
   };
 
   for (const [path, name] of Object.entries(expected)) {
     const manifest = await json(path);
     assert.equal(manifest.name, name);
-    assert.equal(manifest.version, "0.2.8");
-    assert.equal(manifest.publishConfig?.registry, "https://npm.pkg.github.com");
-    assert.equal(manifest.publishConfig?.access, "restricted");
+    assert.equal(manifest.version, "0.3.0");
+    assert.equal(manifest.license, "SEE LICENSE IN LICENSE");
+    assert.equal(manifest.publishConfig?.registry, "https://registry.npmjs.org");
+    assert.equal(manifest.publishConfig?.access, "public");
+    assert.equal(manifest.publishConfig?.provenance, true);
   }
 
   const tokens = await json("packages/dds-tokens/package.json");
@@ -32,17 +34,23 @@ test("workspace exposes deterministic foundation and release verification", asyn
   assert.equal(root.devDependencies?.["@changesets/cli"], "2.29.7");
 
   const config = await json(".changeset/config.json");
-  assert.deepEqual(config.fixed, [["@devslab-kr/dds-tokens", "@devslab-kr/dds-css", "@devslab-kr/dds-icons", "@devslab-kr/dds-solid", "@devslab-kr/site-kit"]]);
+  assert.deepEqual(config.fixed, [["@devslab/dds-tokens", "@devslab/dds-css", "@devslab/dds-icons", "@devslab/dds-solid", "@devslab/site-kit"]]);
+  assert.equal(config.access, "public");
+  assert.match(await read("LICENSE"), /DevsLab Source-Available License 1\.0/);
+  const workflow = await read(".github/workflows/release.yml");
+  assert.match(workflow, /registry-url:\s*https:\/\/registry\.npmjs\.org/);
+  assert.match(workflow, /id-token:\s*write/);
+  assert.match(workflow, /npm publish|changeset publish|pnpm release/);
 });
 
 test("unpublished DDS packages bootstrap from this workspace", async () => {
   const internalDependencies = {
     "packages/dds-solid/package.json": [
-      "@devslab-kr/dds-css",
-      "@devslab-kr/dds-icons",
-      "@devslab-kr/dds-tokens",
+      "@devslab/dds-css",
+      "@devslab/dds-icons",
+      "@devslab/dds-tokens",
     ],
-    "packages/site-kit/package.json": ["@devslab-kr/dds-solid"],
+    "packages/site-kit/package.json": ["@devslab/dds-solid"],
   };
 
   for (const [path, names] of Object.entries(internalDependencies)) {
@@ -50,7 +58,7 @@ test("unpublished DDS packages bootstrap from this workspace", async () => {
     for (const name of names) {
       assert.equal(
         manifest.dependencies?.[name],
-        "workspace:0.2.8",
+        "workspace:0.3.0",
         `${path} must resolve unpublished ${name} from the local release workspace`,
       );
     }
diff --git a/tests/site-kit-contracts.test.mjs b/tests/site-kit-contracts.test.mjs
index 85f5c8e..0370b06 100644
--- a/tests/site-kit-contracts.test.mjs
+++ b/tests/site-kit-contracts.test.mjs
@@ -7,8 +7,9 @@ const json = async (path) => JSON.parse(await read(path));
 
 test("site-kit exposes runtime-neutral, Solid, TanStack, and stylesheet boundaries", async () => {
   const manifest = await json("packages/site-kit/package.json");
-  assert.equal(manifest.name, "@devslab-kr/site-kit");
-  assert.equal(manifest.publishConfig.access, "restricted");
+  assert.equal(manifest.name, "@devslab/site-kit");
+  assert.equal(manifest.license, "SEE LICENSE IN LICENSE");
+  assert.equal(manifest.publishConfig.access, "public");
   for (const path of [".", "./solid", "./tanstack-start", "./styles.css"]) assert.ok(manifest.exports[path]);
   assert.equal(manifest.exports["./solid"].types, "./dist/index.d.ts");
   assert.equal(manifest.exports["./solid"].browser, "./dist/solid.js");
@@ -21,7 +22,7 @@ test("site-kit exposes runtime-neutral, Solid, TanStack, and stylesheet boundari
   );
   assert.match(manifest.scripts.build, /vite build --config vite\.server\.config\.ts/);
   assert.match(await read("packages/site-kit/vite.server.config.ts"), /solid\.server\.js/);
-  assert.match(await read("packages/site-kit/vitest.config.ts"), /@devslab-kr\/dds-solid/);
+  assert.match(await read("packages/site-kit/vitest.config.ts"), /@devslab\/dds-solid/);
   assert.equal(manifest.peerDependencies["solid-js"], "1.9.15");
   assert.equal(manifest.peerDependencies["@solidjs/web"], undefined);
   assert.equal(manifest.devDependencies["@types/node"], "26.3.0");
@@ -33,9 +34,25 @@ test("Solid adapter exports every shared public-site shell", async () => {
   for (const symbol of [
     "SiteHeader", "LocaleMenu", "ThemeToggle", "MarketingShell", "SiteFooter",
     "LegalLayout", "StatusBanner", "RequestAccessForm", "NotFoundLayout", "ErrorLayout",
+    "OssProductMark", "OssProductMarkProps",
   ]) assert.match(source, new RegExp(`\\b${symbol}\\b`), `${symbol} missing`);
 });
 
+test("OSS product marks remain caller-supplied and reference the canonical brand source", async () => {
+  const component = await read("packages/site-kit/src/solid/oss-product-mark.tsx");
+  const styles = await read("packages/site-kit/styles.css");
+  assert.match(component, /src:\s*string/);
+  assert.match(component, /name:\s*string/);
+  assert.match(component, /decoding="async"/);
+  assert.match(component, /props\.decorative\s*\?\s*""\s*:\s*props\.name/);
+  assert.doesNotMatch(component, /editor-ruler|ssrf-guard|numkey|kokey/, "DDS must not duplicate Q-line routes");
+  assert.match(styles, /\.oss-product-mark/);
+  assert.match(styles, /block-size/);
+  assert.doesNotMatch(styles, /\.oss-product-mark[^}]*animation\s*:/s);
+  assert.match(await read("brand/index.html"), /https:\/\/devslab\.kr\/brand\/open-source\//);
+  assert.match(await read("brand/index.html"), /oss-brand\/releases\/tag\/v0\.2\.0/);
+});
+
 test("public chrome requires injected copy and keeps forms native", async () => {
   const chrome = await read("packages/site-kit/src/solid/chrome.tsx");
   const layouts = await read("packages/site-kit/src/solid/layouts.tsx");
@@ -82,7 +99,7 @@ test("Worker and browser fixtures consume adapters and prove hydration plus Arab
     read(".github/workflows/ci.yml"),
     json("package.json"),
   ]);
-  assert.match(worker, /@devslab-kr\/site-kit\/solid/);
+  assert.match(worker, /@devslab\/site-kit\/solid/);
   assert.match(worker, /toTanStackHead/);
   assert.match(worker, /renderToString/);
   assert.match(worker, /data-site-hydration/);