Rebrand SooSeF to FieldWitness

Complete project rebrand for better positioning in the press freedom
and digital security space. FieldWitness communicates both field
deployment and evidence testimony — appropriate for the target audience
of journalists, NGOs, and human rights organizations.

Rename mapping:
- soosef → fieldwitness (package, CLI, all imports)
- soosef.stegasoo → fieldwitness.stego
- soosef.verisoo → fieldwitness.attest
- ~/.soosef/ → ~/.fwmetadata/ (innocuous data dir name)
- SOOSEF_DATA_DIR → FIELDWITNESS_DATA_DIR
- SoosefConfig → FieldWitnessConfig
- SoosefError → FieldWitnessError

Also includes:
- License switch from MIT to GPL-3.0
- C2PA bridge module (Phase 0-2 MVP): cert.py, export.py, vendor_assertions.py
- README repositioned to lead with provenance/federation, stego backgrounded
- Threat model skeleton at docs/security/threat-model.md
- Planning docs: docs/planning/c2pa-integration.md, docs/planning/gtm-feasibility.md

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

deploy/live-usb/config/hooks/live/0100-install-soosef.hook.chroot

@@ -1,26 +1,26 @@
 #!/bin/bash
-# Install SooSeF and all dependencies into the live image.
+# Install FieldWitness and all dependencies into the live image.
 # This runs inside the chroot during image build.
 set -euo pipefail
 
-echo "=== Installing SooSeF ==="
+echo "=== Installing FieldWitness ==="
 
-# Create soosef user
-useradd -m -s /bin/bash -G sudo soosef
-echo "soosef:soosef" | chpasswd
+# Create fieldwitness user
+useradd -m -s /bin/bash -G sudo fieldwitness
+echo "fieldwitness:fieldwitness" | chpasswd
 
 # Create virtual environment
-python3 -m venv /opt/soosef-env
-source /opt/soosef-env/bin/activate
+python3 -m venv /opt/fieldwitness-env
+source /opt/fieldwitness-env/bin/activate
 
-# Install soosef with all extras (pre-built wheels from PyPI)
-pip install --no-cache-dir "soosef[web,cli,attest,stego-dct,stego-audio,fieldkit]"
+# Install fieldwitness with all extras (pre-built wheels from PyPI)
+pip install --no-cache-dir "fieldwitness[web,cli,attest,stego-dct,stego-audio,fieldkit]"
 
 # Verify installation
-python3 -c "import soosef; print(f'SooSeF {soosef.__version__} installed')"
-python3 -c "from soosef.stegasoo import encode; print('stegasoo OK')"
-python3 -c "from soosef.verisoo import Attestation; print('verisoo OK')"
+python3 -c "import fieldwitness; print(f'FieldWitness {fieldwitness.__version__} installed')"
+python3 -c "from fieldwitness.stego import encode; print('stego OK')"
+python3 -c "from fieldwitness.attest import Attestation; print('attest OK')"
 
 deactivate
 
-echo "=== SooSeF installation complete ==="
+echo "=== FieldWitness installation complete ==="

deploy/live-usb/config/hooks/live/0200-harden.hook.chroot

@@ -6,17 +6,17 @@ echo "=== Applying security hardening ==="
 
 # Disable core dumps (Python doesn't zero memory — core dumps leak keys)
 echo "* hard core 0" >> /etc/security/limits.conf
-echo "fs.suid_dumpable = 0" >> /etc/sysctl.d/99-soosef.conf
-echo "kernel.core_pattern=|/bin/false" >> /etc/sysctl.d/99-soosef.conf
+echo "fs.suid_dumpable = 0" >> /etc/sysctl.d/99-fieldwitness.conf
+echo "kernel.core_pattern=|/bin/false" >> /etc/sysctl.d/99-fieldwitness.conf
 
 # Disable swap (keys persist in swap pages)
 systemctl mask swap.target || true
-echo "vm.swappiness = 0" >> /etc/sysctl.d/99-soosef.conf
+echo "vm.swappiness = 0" >> /etc/sysctl.d/99-fieldwitness.conf
 
 # Enable UFW with deny-all + allow web UI
 ufw default deny incoming
 ufw default allow outgoing
-ufw allow 5000/tcp comment "SooSeF Web UI"
+ufw allow 5000/tcp comment "FieldWitness Web UI"
 ufw allow 22/tcp comment "SSH"
 ufw --force enable || true
 
@@ -25,14 +25,14 @@ systemctl disable bluetooth.service 2>/dev/null || true
 systemctl disable avahi-daemon.service 2>/dev/null || true
 systemctl disable cups.service 2>/dev/null || true
 
-# Enable SooSeF service
+# Enable FieldWitness service
 systemctl enable soosef.service
 
 # Auto-login to openbox (so the browser opens without login prompt)
 mkdir -p /etc/lightdm/lightdm.conf.d
 cat > /etc/lightdm/lightdm.conf.d/50-autologin.conf << 'EOF'
 [Seat:*]
-autologin-user=soosef
+autologin-user=fieldwitness
 autologin-user-timeout=0
 EOF
 

deploy/live-usb/config/includes.chroot/etc/systemd/system/soosef.service

@@ -1,17 +1,17 @@
 [Unit]
-Description=SooSeF Security Fieldkit
+Description=FieldWitness
 After=network-online.target
 Wants=network-online.target
 
 [Service]
 Type=simple
-User=soosef
-Group=soosef
-WorkingDirectory=/home/soosef
-Environment=PATH=/opt/soosef-env/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-Environment=SOOSEF_DATA_DIR=/home/soosef/.soosef
-ExecStartPre=/opt/soosef-env/bin/soosef init --no-identity --no-channel
-ExecStart=/opt/soosef-env/bin/soosef serve --host 0.0.0.0 --no-https
+User=fieldwitness
+Group=fieldwitness
+WorkingDirectory=/home/fieldwitness
+Environment=PATH=/opt/fieldwitness-env/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+Environment=FIELDWITNESS_DATA_DIR=/home/fieldwitness/.fwmetadata
+ExecStartPre=/opt/fieldwitness-env/bin/fieldwitness init --no-identity --no-channel
+ExecStart=/opt/fieldwitness-env/bin/fieldwitness serve --host 0.0.0.0 --no-https
 Restart=on-failure
 RestartSec=5
 
@@ -19,7 +19,7 @@ RestartSec=5
 NoNewPrivileges=yes
 ProtectSystem=strict
 ProtectHome=read-only
-ReadWritePaths=/home/soosef/.soosef
+ReadWritePaths=/home/fieldwitness/.fwmetadata
 PrivateTmp=yes
 ProtectKernelTunables=yes
 ProtectControlGroups=yes

deploy/live-usb/config/includes.chroot/etc/xdg/openbox/autostart

@@ -1,4 +1,4 @@
-# SooSeF Live USB — auto-open web UI in Firefox
-# Wait for the SooSeF server to start, then open the browser
+# FieldWitness Live USB — auto-open web UI in Firefox
+# Wait for the FieldWitness server to start, then open the browser
 sleep 5
 firefox-esr --kiosk http://127.0.0.1:5000 &

deploy/live-usb/config/package-lists/soosef.list.chroot

@@ -12,7 +12,7 @@ libssl-dev
 gfortran
 libopenblas-dev
 
-## SooSeF runtime dependencies
+## FieldWitness runtime dependencies
 gpsd
 gpsd-clients
 cryptsetup