From 96f10cce381dda87eb1d6bf697beaf90b2689206 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Fri, 28 Aug 2026 06:30:45 +0100
Subject: [PATCH] fix: AGENTIC licence line + a2ml-validate-action repin
 (standards#646, #669)

1. The AGENTIC.a2ml agent-constraint line "Never use AGPL license (...)"
   contradicts LICENCE-POLICY.adoc Rules 3 (co-developed), 4 (network
   services) and 5 (games), which MANDATE AGPL-3.0-or-later - and 144
   copies named the retired PMPL-1.0-or-later. Replaced with a pointer to
   the policy plus the A2 no-automated-licence-edits rule, hardcoding no
   licence so it cannot go stale again. Same wording as the template fix
   in rsr-template-repo#45; owner-ruled sweep (2026-08-27).

2. Any workflow pinning hyperpolymath/a2ml-validate-action at 59145c7d or
   e558e79200 is repinned to 6ac6416f. Those two SHAs never existed: the
   repo itself was only created 2026-08-28 and populated by subtree split
   from a2ml/actions/validate (286 files, history preserved). The old
   pins could never resolve and made lockfile generation impossible.

Direct push per owner ruling of 2026-08-28.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .machine_readable/6a2/AGENTIC.a2ml                         | 7 ++++++-
 packages/Axiology.jl/.machine_readable/AGENTIC.a2ml        | 7 ++++++-
 packages/Axiom.jl/.machine_readable/AGENTIC.a2ml           | 7 ++++++-
 packages/Cladistics.jl/.machine_readable/AGENTIC.a2ml      | 7 ++++++-
 packages/Cliodynamics.jl/.machine_readable/AGENTIC.a2ml    | 7 ++++++-
 packages/Cliometrics.jl/.machine_readable/AGENTIC.a2ml     | 7 ++++++-
 packages/Exnovation.jl/.machine_readable/AGENTIC.a2ml      | 7 ++++++-
 .../.machine_readable/AGENTIC.a2ml                         | 7 ++++++-
 .../JuliaForChildren.jl/.machine_readable/AGENTIC.a2ml     | 7 ++++++-
 .../.machine_readable/AGENTIC.a2ml                         | 7 ++++++-
 packages/PRComms.jl/.machine_readable/AGENTIC.a2ml         | 7 ++++++-
 .../PostDisciplinary.jl/.machine_readable/6a2/AGENTIC.a2ml | 7 ++++++-
 .../PostDisciplinary.jl/.machine_readable/AGENTIC.a2ml     | 7 ++++++-
 packages/ProvenCrypto.jl/.machine_readable/AGENTIC.a2ml    | 7 ++++++-
 packages/Skein.jl/.machine_readable/AGENTIC.a2ml           | 7 ++++++-
 .../TradeUnionism.jl/.machine_readable/6a2/AGENTIC.a2ml    | 7 ++++++-
 packages/TradeUnionism.jl/.machine_readable/AGENTIC.a2ml   | 7 ++++++-
 packages/ZeroProb.jl/.machine_readable/AGENTIC.a2ml        | 7 ++++++-
 18 files changed, 108 insertions(+), 18 deletions(-)

diff --git a/.machine_readable/6a2/AGENTIC.a2ml b/.machine_readable/6a2/AGENTIC.a2ml
index b21d81b55..919e61159 100644
--- a/.machine_readable/6a2/AGENTIC.a2ml
+++ b/.machine_readable/6a2/AGENTIC.a2ml
@@ -21,7 +21,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/packages/Axiology.jl/.machine_readable/AGENTIC.a2ml b/packages/Axiology.jl/.machine_readable/AGENTIC.a2ml
index cd1fb1d1f..28bf1d9cd 100644
--- a/packages/Axiology.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/Axiology.jl/.machine_readable/AGENTIC.a2ml
@@ -19,7 +19,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/packages/Axiom.jl/.machine_readable/AGENTIC.a2ml b/packages/Axiom.jl/.machine_readable/AGENTIC.a2ml
index cd1fb1d1f..28bf1d9cd 100644
--- a/packages/Axiom.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/Axiom.jl/.machine_readable/AGENTIC.a2ml
@@ -19,7 +19,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/packages/Cladistics.jl/.machine_readable/AGENTIC.a2ml b/packages/Cladistics.jl/.machine_readable/AGENTIC.a2ml
index cd1fb1d1f..28bf1d9cd 100644
--- a/packages/Cladistics.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/Cladistics.jl/.machine_readable/AGENTIC.a2ml
@@ -19,7 +19,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/packages/Cliodynamics.jl/.machine_readable/AGENTIC.a2ml b/packages/Cliodynamics.jl/.machine_readable/AGENTIC.a2ml
index cd1fb1d1f..28bf1d9cd 100644
--- a/packages/Cliodynamics.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/Cliodynamics.jl/.machine_readable/AGENTIC.a2ml
@@ -19,7 +19,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/packages/Cliometrics.jl/.machine_readable/AGENTIC.a2ml b/packages/Cliometrics.jl/.machine_readable/AGENTIC.a2ml
index cd1fb1d1f..28bf1d9cd 100644
--- a/packages/Cliometrics.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/Cliometrics.jl/.machine_readable/AGENTIC.a2ml
@@ -19,7 +19,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/packages/Exnovation.jl/.machine_readable/AGENTIC.a2ml b/packages/Exnovation.jl/.machine_readable/AGENTIC.a2ml
index cd1fb1d1f..28bf1d9cd 100644
--- a/packages/Exnovation.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/Exnovation.jl/.machine_readable/AGENTIC.a2ml
@@ -19,7 +19,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/packages/InvestigativeJournalism.jl/.machine_readable/AGENTIC.a2ml b/packages/InvestigativeJournalism.jl/.machine_readable/AGENTIC.a2ml
index 05e63dc64..6b2884c46 100644
--- a/packages/InvestigativeJournalism.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/InvestigativeJournalism.jl/.machine_readable/AGENTIC.a2ml
@@ -21,7 +21,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [automation-hooks]
 # on-enter: Read 0-AI-MANIFEST.a2ml, then STATE.a2ml
diff --git a/packages/JuliaForChildren.jl/.machine_readable/AGENTIC.a2ml b/packages/JuliaForChildren.jl/.machine_readable/AGENTIC.a2ml
index 05e63dc64..6b2884c46 100644
--- a/packages/JuliaForChildren.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/JuliaForChildren.jl/.machine_readable/AGENTIC.a2ml
@@ -21,7 +21,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [automation-hooks]
 # on-enter: Read 0-AI-MANIFEST.a2ml, then STATE.a2ml
diff --git a/packages/JuliaPackage-Reuse-Audit.jl/.machine_readable/AGENTIC.a2ml b/packages/JuliaPackage-Reuse-Audit.jl/.machine_readable/AGENTIC.a2ml
index 05e63dc64..6b2884c46 100644
--- a/packages/JuliaPackage-Reuse-Audit.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/JuliaPackage-Reuse-Audit.jl/.machine_readable/AGENTIC.a2ml
@@ -21,7 +21,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [automation-hooks]
 # on-enter: Read 0-AI-MANIFEST.a2ml, then STATE.a2ml
diff --git a/packages/PRComms.jl/.machine_readable/AGENTIC.a2ml b/packages/PRComms.jl/.machine_readable/AGENTIC.a2ml
index 05e63dc64..6b2884c46 100644
--- a/packages/PRComms.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/PRComms.jl/.machine_readable/AGENTIC.a2ml
@@ -21,7 +21,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [automation-hooks]
 # on-enter: Read 0-AI-MANIFEST.a2ml, then STATE.a2ml
diff --git a/packages/PostDisciplinary.jl/.machine_readable/6a2/AGENTIC.a2ml b/packages/PostDisciplinary.jl/.machine_readable/6a2/AGENTIC.a2ml
index 97614d90f..eb7356952 100644
--- a/packages/PostDisciplinary.jl/.machine_readable/6a2/AGENTIC.a2ml
+++ b/packages/PostDisciplinary.jl/.machine_readable/6a2/AGENTIC.a2ml
@@ -21,7 +21,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [automation-hooks]
 # on-enter: Read 0-AI-MANIFEST.a2ml, then STATE.a2ml
diff --git a/packages/PostDisciplinary.jl/.machine_readable/AGENTIC.a2ml b/packages/PostDisciplinary.jl/.machine_readable/AGENTIC.a2ml
index 982378451..cb6e484d5 100644
--- a/packages/PostDisciplinary.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/PostDisciplinary.jl/.machine_readable/AGENTIC.a2ml
@@ -21,7 +21,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [automation-hooks]
 # on-enter: Read 0-AI-MANIFEST.a2ml, then STATE.a2ml
diff --git a/packages/ProvenCrypto.jl/.machine_readable/AGENTIC.a2ml b/packages/ProvenCrypto.jl/.machine_readable/AGENTIC.a2ml
index cd1fb1d1f..28bf1d9cd 100644
--- a/packages/ProvenCrypto.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/ProvenCrypto.jl/.machine_readable/AGENTIC.a2ml
@@ -19,7 +19,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/packages/Skein.jl/.machine_readable/AGENTIC.a2ml b/packages/Skein.jl/.machine_readable/AGENTIC.a2ml
index cd1fb1d1f..28bf1d9cd 100644
--- a/packages/Skein.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/Skein.jl/.machine_readable/AGENTIC.a2ml
@@ -19,7 +19,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/packages/TradeUnionism.jl/.machine_readable/6a2/AGENTIC.a2ml b/packages/TradeUnionism.jl/.machine_readable/6a2/AGENTIC.a2ml
index 97614d90f..eb7356952 100644
--- a/packages/TradeUnionism.jl/.machine_readable/6a2/AGENTIC.a2ml
+++ b/packages/TradeUnionism.jl/.machine_readable/6a2/AGENTIC.a2ml
@@ -21,7 +21,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [automation-hooks]
 # on-enter: Read 0-AI-MANIFEST.a2ml, then STATE.a2ml
diff --git a/packages/TradeUnionism.jl/.machine_readable/AGENTIC.a2ml b/packages/TradeUnionism.jl/.machine_readable/AGENTIC.a2ml
index 982378451..cb6e484d5 100644
--- a/packages/TradeUnionism.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/TradeUnionism.jl/.machine_readable/AGENTIC.a2ml
@@ -21,7 +21,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [automation-hooks]
 # on-enter: Read 0-AI-MANIFEST.a2ml, then STATE.a2ml
diff --git a/packages/ZeroProb.jl/.machine_readable/AGENTIC.a2ml b/packages/ZeroProb.jl/.machine_readable/AGENTIC.a2ml
index cd1fb1d1f..28bf1d9cd 100644
--- a/packages/ZeroProb.jl/.machine_readable/AGENTIC.a2ml
+++ b/packages/ZeroProb.jl/.machine_readable/AGENTIC.a2ml
@@ -19,7 +19,12 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use MPL-2.0)
+# - Never relicense an existing file, and never run an automated licence
+#   sweep (LICENCE-POLICY.adoc A2). New files get correct SPDX from birth.
+# - Never assume a licence. Read standards/LICENCE-POLICY.adoc: Rule 1
+#   defaults to MPL-2.0 (code) / CC-BY-SA-4.0 (prose), but Rule 3
+#   (co-developed), Rule 4 (network-deployed services) and Rule 5
+#   (games) are AGPL-3.0-or-later, and Rule 2 names the PMPL register.
 
 [maintenance-integrity]
 fail-closed = true