# Universal Manifest v0.4 schema: copy notice

`universal-manifest-v0.4.schema.json` in this folder, or the copy embedded in a generated file in this folder (the kit's `schemas.js`), is an unchanged copy of the Universal Manifest v0.4 JSON Schema.

- Source: `spec/v0.4/schema.json` in the Universal Manifest repository (project site: https://universalmanifest.net). That repository is the only source of truth for Universal Manifest. Change the schema there, never here.
- Last commit that touched the source file: `ea15dab17450a21ee3bfc57ffef11ea06bf47b0f` (2026-07-15). Repository head when copied: `b42cd063893f2ad8a6a692e81283618562915879`.
- SHA-256 of the source and of this copy: `5755e4ff696c878723c59b42624acf7678862f5b91ab8e30bfb3f22f153d3e57`.
- Copied on 2026-10-10 (Hopworld milestone M5). The lab's tests (`src/ownership/test/`) check that this copy still matches the source.
- Schema `$id`: `https://universalmanifest.net/ns/universal-manifest/v0.4/schema.json`. Our `openspatials-ownership.schema.json` refers to it by that `$id`.

## License

The Universal Manifest v0.4 specification, and with it this schema, is licensed under the Apache License 2.0.

- `spec/v0.4/README.md` in the Universal Manifest repository, line 5, states: "This specification is available under the [Apache License, Version 2.0](https://www.apache.org/licenses/LICENSE-2.0)." Its line 3 reads "Copyright (c) 2026 SumSet Tech LLC and the Universal Manifest contributors." It also says that earlier published revisions keep their original licence notices.
  - Read on 2026-10-16 from `spec/v0.4/README.md` in a checkout of the Universal Manifest repository (file dated 2026-10-12), SHA-256 `d5ede3794688c865dabfcb35b12e1cb6a8a94ad25f4de51355ea1a1730acae23`.
  - When this notice was first written (the copy was made on 2026-10-10), the README reserved all rights and said its licence terms were pending. That statement is no longer in the README; this section replaces the one written from it.
- The repository's root `LICENSE` is the Apache License 2.0.
- The reference package `packages/universal-manifest/` is MIT, copyright 2026 Grig Bilham, Sumset Tech LLC (its `LICENSE` and `package.json`).
- The schema source `spec/v0.4/schema.json` and this copy still have the same SHA-256 (above), checked on 2026-10-16.

## Where this copy ships

The kit, the Godot add-on, the core package and the website may ship this unchanged Apache-2.0 copy, loose or inside a generated file (the kit's `core/schemas.js` embeds it), with this notice beside every copy (decision D-104, 2026-10-21). Change neither the copy nor this notice by hand: both are copied from the lab's `src/spec/` by each deliverable's own generator.

Later: once Universal Manifest publishes the schema at its own address (`https://universalmanifest.net/ns/universal-manifest/v0.4/schema.json`), the kit may read it from there and drop this copy.

## Status

v0.4 is a production-candidate Editor's Draft. v0.3 is the latest stable published version. We use only parts that are stable since v0.3: the envelope, facets, consents, and Signature Profile A (JCS + Ed25519). See `docs/package/M4-UNIVERSAL-MANIFEST-FIT.md`.