7270a608dc
All checks were successful
Every commit MUST be signed off (git commit -s). Preserves the copyright-holder's option to dual-license later — without a DCO/CLA instrument, every external contribution erodes that option (ADR-0004). Particularly load-bearing under multi-agent parallel authorship, where multiple sessions commit in parallel and the DCO is the only per-commit aggregation instrument. Adds DCO.md with the full Linux-Foundation DCO text + the agents-sign-off- with-the-human's-identity rule. AGENTS.md Git workflow gains the DCO bullet.
83 lines
3.0 KiB
Markdown
83 lines
3.0 KiB
Markdown
# Developer Certificate of Origin (DCO)
|
|
|
|
Version 1.1
|
|
|
|
Copyright (C) 2004, 2006 The Linux Foundation. All rights reserved.
|
|
|
|
Everyone is permitted to copy and distribute verbatim copies of this
|
|
license document, but changing it is not allowed.
|
|
|
|
By making a contribution to this project, I certify that:
|
|
|
|
(a) The contribution was created in whole or in part by me and I
|
|
have the right to submit it under the open source license
|
|
indicated in the file; or
|
|
|
|
(b) The contribution is based upon previous work that, to the best
|
|
of my knowledge, is covered under an appropriate open source
|
|
license and I have the right under that license to submit that
|
|
work with modifications, whether created in whole or in part
|
|
by me, under the same open source license (unless I am
|
|
permitted to submit under a different license), as indicated
|
|
in the file; or
|
|
|
|
(c) The contribution was provided directly to me by some other
|
|
person who certified (a), (b) or (c) and I have not modified
|
|
it.
|
|
|
|
(d) I understand and agree that this project and the contribution
|
|
are public and that a record of the contribution (including all
|
|
personal information I submit with it, including my sign-off) is
|
|
maintained indefinitely and may be redistributed consistent with
|
|
this project or the open source license(s) involved.
|
|
|
|
---
|
|
|
|
## How to sign off
|
|
|
|
Every commit MUST be signed off. Use `git commit -s` (or `git commit --signoff`)
|
|
to add the attestation line automatically:
|
|
|
|
```
|
|
$ git commit -s -m "feat: add barge-in reflex"
|
|
|
|
commit 0123456789abcdef...
|
|
Author: A.D. Lee <alee@example.com>
|
|
Date: Wed Jul 2 10:00:00 2026 +0000
|
|
|
|
feat: add barge-in reflex
|
|
|
|
Signed-off-by: A.D. Lee <alee@example.com>
|
|
```
|
|
|
|
The `Signed-off-by: Name <email>` line is the canonical DCO attestation. The
|
|
name and email MUST match the git author identity.
|
|
|
|
## Why DCO (not a CLA)
|
|
|
|
The DCO is a per-commit attestation (lightweight, no registration), not a
|
|
Contributor License Agreement (which would require a one-time grant + tracking).
|
|
The DCO preserves the copyright-holder's option to dual-license the project
|
|
later — every contributor retains their own copyright but attests they have the
|
|
right to contribute under GPL-3.0-or-later (the project's license, ADR-0004).
|
|
See [ADR-0004](docs/adr/0004-license.md) for the license decision and the
|
|
dual-license rationale.
|
|
|
|
## For agents committing on behalf of a human
|
|
|
|
An AI agent that commits code on behalf of a human operator MUST sign off with
|
|
the **human's** name + email, not the agent's own identity. The human is the
|
|
contributor of record; the agent is the instrument. The DCO attestation
|
|
certifies the human's right to contribute, not the agent's.
|
|
|
|
```
|
|
# Correct — the human (alee) is the contributor of record
|
|
Signed-off-by: A.D. Lee <alee@example.com>
|
|
|
|
# WRONG — the agent is not a legal entity that can hold copyright
|
|
Signed-off-by: opencode-agent <agent@example.com>
|
|
```
|
|
|
|
CI (planned) will reject commits missing a valid `Signed-off-by` line matching
|
|
the author identity.
|