licence(A5/#7): normalise malformed PMPL SPDX values (owner carve-out, SPDX-only)

.github/workflows/codeql.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: CodeQL Security Analysis
 
 on:

.github/workflows/scorecard.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: OSSF Scorecard
 on:
   push:

.github/workflows/secret-scanner.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Prevention workflow - scans for hardcoded secrets before they reach main
 name: Secret Scanner
 

ada-ecosystem/ada-loom-registry/.gitattributes

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # RSR-compliant .gitattributes
 
 * text=auto eol=lf

ada-ecosystem/ada-loom-registry/.gitignore

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # RSR-compliant .gitignore
 
 # OS & Editor

ada-ecosystem/ada-loom-registry/CODE_OF_CONDUCT.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0 -->
+<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge

ada-ecosystem/ada-loom-registry/Mustfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Mustfile - hyperpolymath mandatory checks
 # See: https://github.com/hyperpolymath/mustfile
 

ada-ecosystem/ada-loom-registry/app/Main.hs

@@ -1,7 +1,7 @@
 {-# LANGUAGE OverloadedStrings #-}
 {-# LANGUAGE DeriveGeneric #-}
 {-# LANGUAGE DeriveAnyClass #-}
--- SPDX-License-Identifier: PMPL-1.0
+-- SPDX-License-Identifier: PMPL-1.0-or-later
 
 module Main where
 

ada-ecosystem/ada-loom-registry/src/Spindle.hs

@@ -1,5 +1,5 @@
 {-# LANGUAGE OverloadedStrings #-}
--- SPDX-License-Identifier: PMPL-1.0
+-- SPDX-License-Identifier: PMPL-1.0-or-later
 
 -- | Spindle - Parse Nickel configurations into Haskell types.
 --

ada-ecosystem/ada-loom-registry/src/Spindle/Registry.hs

@@ -1,7 +1,7 @@
 {-# LANGUAGE OverloadedStrings #-}
 {-# LANGUAGE DeriveGeneric #-}
 {-# LANGUAGE DeriveAnyClass #-}
--- SPDX-License-Identifier: PMPL-1.0
+-- SPDX-License-Identifier: PMPL-1.0-or-later
 
 -- | Spindle.Registry - Persistent configuration management for the Hyperpolymath ecosystem.
 --

affinescript-ecosystem/rattlescript/affinescript/LICENSING-GUIDE.md

@@ -168,7 +168,7 @@ graph TD
 
 **File Header:**
 ```rust
-// SPDX-License-Identifier: PMPL-1.0
+// SPDX-License-Identifier: PMPL-1.0-or-later
 // SPDX-License-Identifier: MPL-2.0
 // SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell
 //

affinescript-ecosystem/rattlescript/affinescript/stdlib/effects.affine

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0
+// SPDX-License-Identifier: PMPL-1.0-or-later
 // AffineScript Standard Library - Effect Declarations
 
 // Core IO effect - file and console operations

deno-ecosystem/.gitignore

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 
 # Deno

deno-ecosystem/projects/beamdeno/Justfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # justfile - Just recipes for this project
 # See: https://github.com/hyperpolymath/mustfile
 

deno-ecosystem/projects/beamdeno/Mustfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Mustfile - hyperpolymath mandatory checks
 # See: https://github.com/hyperpolymath/mustfile
 

deno-ecosystem/projects/beamdeno/src/Beamdeno.res

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0
+// SPDX-License-Identifier: PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 // beamdeno - Bidirectional bridge between Deno and BEAM
 

deno-ecosystem/projects/beamdeno/src/Connection.res

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0
+// SPDX-License-Identifier: PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 // BEAM connection management
 

deno-ecosystem/projects/beamdeno/src/etf/Etf.res

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0
+// SPDX-License-Identifier: PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 // ETF (Erlang Term Format) encoder/decoder
 

deno-ecosystem/projects/beamdeno/src/etf/Types.res

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0
+// SPDX-License-Identifier: PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 // ETF type definitions
 

deno-ecosystem/projects/bundeno/Justfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # justfile - Just recipes for this project
 # See: https://github.com/hyperpolymath/mustfile
 

deno-ecosystem/projects/bundeno/Mustfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Mustfile - hyperpolymath mandatory checks
 # See: https://github.com/hyperpolymath/mustfile
 

deno-ecosystem/projects/bundeno/src/Bundeno.res

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0
+// SPDX-License-Identifier: PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 // bundeno - Runtime compatibility layer for Deno and Bun
 

deno-ecosystem/projects/bundeno/src/compat/Fs.res

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0
+// SPDX-License-Identifier: PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 // File system compatibility layer
 

deno-ecosystem/projects/bundeno/src/compat/Process.res

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0
+// SPDX-License-Identifier: PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 // Process and environment compatibility layer
 

rescript-ecosystem/cadre-router/tea-router/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/cadre-tea-router/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/idaptik-rescript13-staging/.github/workflows/workflow-linter.yml

@@ -37,7 +37,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/core/early-return/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/ffi/alib/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/ffi/wasm-bridge/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/ffi/zig-ffi/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/tooling/alib-codemods/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/tooling/alib-conformance/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/tooling/alib-for-rescript/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/tooling/alib-interop/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/tooling/greasy-rescripter/.github/workflows/workflow-linter.yml

@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"

rescript-ecosystem/packages/web/bridge-web/.gitattributes

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # RSR-compliant .gitattributes
 
 * text=auto eol=lf

rescript-ecosystem/packages/web/bridge-web/.gitignore

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # RSR-compliant .gitignore
 
 # OS & Editor

rescript-ecosystem/packages/web/bridge-web/Justfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Justfile - hyperpolymath standard task runner
 
 default:

rescript-ecosystem/packages/web/bridge-web/Mustfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Mustfile - hyperpolymath mandatory checks
 # See: https://github.com/hyperpolymath/mustfile
 

rescript-ecosystem/packages/web/bridge-web/src/Bridge.res

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0 OR PMPL-1.0-or-later
+// SPDX-License-Identifier: PMPL-1.0-or-later OR PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2024 Hyperpolymath
 
 /**

rescript-ecosystem/packages/web/bridge-web/tests/bridge_contract_test.mjs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0 OR PMPL-1.0-or-later
+// SPDX-License-Identifier: PMPL-1.0-or-later OR PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2024 Hyperpolymath
 
 /**

rescript-ecosystem/packages/web/bridge-web/tests/bridge_test.mjs

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0 OR PMPL-1.0-or-later
+// SPDX-License-Identifier: PMPL-1.0-or-later OR PMPL-1.0-or-later
 // SPDX-FileCopyrightText: 2024 Hyperpolymath
 
 /**

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/codeql.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: CodeQL Security Analysis
 
 on:

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/guix-nix-policy.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: Guix/Nix Package Policy
 on: [push, pull_request]
 

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/instant-sync.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Instant Forge Sync - Triggers propagation to all forges on push/release
 name: Instant Sync
 

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/npm-bun-blocker.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: NPM/Bun Blocker
 on: [push, pull_request]
 

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/quality.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: Code Quality
 on: [push, pull_request]
 

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/rsr-antipattern.yml

@@ -1,6 +1,6 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # RSR Anti-Pattern CI Check
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 #
 # Enforces: No TypeScript, No Go, No Python (except SaltStack), No npm
 # Allows: ReScript, Deno, WASM, Rust, OCaml, Haskell, Guile/Scheme

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/scorecard-enforcer.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Prevention workflow - runs OpenSSF Scorecard and fails on low scores
 name: OpenSSF Scorecard Enforcer
 

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/scorecard.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: OSSF Scorecard
 on:
   push:

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/secret-scanner.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Prevention workflow - scans for hardcoded secrets before they reach main
 name: Secret Scanner
 

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/security-policy.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: Security Policy
 on: [push, pull_request]
 

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/ts-blocker.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: TypeScript/JavaScript Blocker
 on: [push, pull_request]
 

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/wellknown-enforcement.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: Well-Known Standards (RFC 9116 + RSR)
 on:
   push:

rescript-ecosystem/packages/web/dom-mounter/.github/workflows/workflow-linter.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # workflow-linter.yml - Validates GitHub workflows against RSR security standards
 # This workflow can be copied to other repos for consistent enforcement
 name: Workflow Security Linter
@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"