Problem or use case
B15 only needs a short statement or a generated notices file, but the pilot found it consistently Partial/missing (see pilot-defects.md SV9/OZ) because nobody writes it. It's mechanical: read the lockfile/manifest, list redistributed dependencies and their licences, generate THIRD_PARTY_NOTICES.md or the one-sentence statement when nothing is redistributed.
Desired outcome
A local, credential-free packages/notices-writer package (or: fold this into the existing docs/guides/macos-app.md notices section as a documented script instead of a full agent package — worth deciding which is proportionate before building). Either way, it should be a generator, not a reviewer: B15's bar is producing the artifact, which this can do directly rather than just flagging its absence.
Alternatives and impact
Alternative: keep it as guide text only (already partly done for the macOS kit). A full package may be overkill for a one-sentence bar — worth scoping down before building. Affects any repository that redistributes third-party code, which is most Package-profile repositories with dependencies.
Problem or use case
B15only needs a short statement or a generated notices file, but the pilot found it consistently Partial/missing (seepilot-defects.mdSV9/OZ) because nobody writes it. It's mechanical: read the lockfile/manifest, list redistributed dependencies and their licences, generateTHIRD_PARTY_NOTICES.mdor the one-sentence statement when nothing is redistributed.Desired outcome
A local, credential-free
packages/notices-writerpackage (or: fold this into the existingdocs/guides/macos-app.mdnotices section as a documented script instead of a full agent package — worth deciding which is proportionate before building). Either way, it should be a generator, not a reviewer:B15's bar is producing the artifact, which this can do directly rather than just flagging its absence.Alternatives and impact
Alternative: keep it as guide text only (already partly done for the macOS kit). A full package may be overkill for a one-sentence bar — worth scoping down before building. Affects any repository that redistributes third-party code, which is most Package-profile repositories with dependencies.