Exhibit four · the licence ledger · living

The licence ledger.

Published 2026-08-11 · rows last read 2026-08-12 · exhibit four Workshop notes

Every model our products run — and every model we benched on the way — with its licence read first-hand and stamped with the date we last read it. Not a summary of someone's summary: the licence file that ships with the weights, the platform's raw permission record, the vendor's current text. When a clause moves, the row moves, and the change is named here.

How to read this page

Each row carries six columns — the model, the seat it holds here, the licence, the day we last read it, what that licence asks of us, and what it permits you. The method for each read is named once per table, above it, so you can repeat the read yourself. The date on each row is the day that licence text was last read in full by us — not the day the row was written. First things first, the fact every row stands on: our products ship zero model weights. In the shipped products, every model is one you choose and download yourself, on your machine, under that model's own licence. And where a licence withholds hosted-service use, we treat that as binding on anyone operating a server, ourselves included — that is why one painter below — Juggernaut-XL v9 — is benched and never wired.

We are not lawyers, and this is research notes, not legal advice — each licence is its own authority, linked or named so you can read it yourself. Corrections welcome: hello@strata2signal.com. Model, company, and platform names on this page are the trademarks of their respective owners, used only to identify what we read — no affiliation or endorsement is implied, and no licence here grants us any trademark right.

The brains · chat, vision, memory · all read 2026-08-11

Read via ollama show <tag> --license — the licence file packaged with the weights themselves, read in full, not skimmed for a name.

gemma4:12b (q4)the narrator — the locked co-resident chat seatread 2026-08-11
licenceApache 2.0
what it asks of us§4 notice duties if redistributing
what it permits yourun it anywhere, commercially, royalty-free — no use policy, no output claims, and no trademark rights come with it (§6)
gemma4:26b (a4b)the 96G workstation posture seat (the locked co-resident default remains 12b)read 2026-08-11
licenceApache 2.0
what it asks of ussame §4 duties
what it permits yousame — trademarks withheld, patent grant self-terminates on suit; no use policy, no output claims
qwen3-vl:2bthe world's eyes — vision intakeread 2026-08-11
licenceApache 2.0
what it asks of ussame §4 duties
what it permits yousame — and no licence-level limit on vision use; our refuse-identifiable-people rule is our own architecture test, not a licence duty
nomic-embed-textthe world's memory — the pinned embedder (swapping it means re-writing every vector, so it is never swapped casually)read 2026-08-11
licenceApache 2.0
what it asks of ussame §4 duties
what it permits yousame — nothing in the text claims rights over embeddings
qwen3.8:27bthe doorman — RuleSage's live question-screening seat (hired 2026-08-17; the audit is exhibit fourteen)read 2026-08-18
licenceApache 2.0 (the text packaged with the weights, read in full — 11,346 bytes, sha256 225c54bacb96eca3…)
what it asks of ussame §4 duties
what it permits yousame — no use policy, no output claims, trademarks withheld
ms-marco-MiniLM-L6-v2the careful reader — RuleSage's re-ranker, a cross-encoder trimmed to ~22 MB on the serving hostcard read 2026-08-18
licenceApache 2.0 (declared in the model card, read 2026-08-18; the deployed artifact ships only the quantized graph and carries no packaged licence text — so this row rests on the card's declaration, and says so)
what it asks of us§4 notice duties if redistributing
what it permits yourun it anywhere, commercially, royalty-free
qwen3.5:27bthe re-bake's best voice — benched, awaiting a second cardread 2026-08-11
licenceApache 2.0
what it asks of ussame §4 duties
what it permits yousame

Cards with the oxblood edge are seats our own worlds run today. Receipts from the reads, because a ledger should show its work: the 12b tag ships the Apache body without the appendix (the appendix is the how-to-apply boilerplate, not terms — noted because we read to the end, not because anything is missing); the 26b and qwen3.5:27b blobs are byte-identical stock text; qwen3-vl ships the licence twice — two byte-identical copies concatenated by the packager, most likely one per component — a 402-line dump that is still just Apache 2.0; and nomic-embed's blob is the stock text with no addendum of any kind, which is the whole basis for the no-claim-over-embeddings cell in its row. None of the five names a copyright owner in the blob — which means the §4 notice duties cannot be discharged from these files alone: the actual holders live in the upstream model cards, and ollama show --license proves what was packaged, not who licensed the weights. And the claim that matters most, stated exactly as far as our evidence reaches: the licence blobs these tags ship carry no Gemma custom terms — earlier gemma generations packaged them, these do not. That is a read of the redistributed file, not of the vendor's own terms page; when we have read that second source first-hand, this row will say so.

Bench history without a fresh stamp: gemma2:9b (the 8G-era voice pick) appears in the voice trials but is not installed on the bench box today, so we cannot re-read its shipped licence — and this ledger stamps only what we actually re-read. Its row will return if it does. The qwen3.6 of that field was in the same state on 2026-08-11; a qwen3.6 build was pulled for the August trials and read on 2026-08-12, and its row is in the next section — note the tag, qwen3.6:27b, which is not the qwen3.6:latest that field ran.

The trial roster · the August arrivals and one incumbent · read 2026-08-12

Read via ollama show --license <tag> — the same method as the brains above, on the blobs pulled for the 2026-08 trials. These five rows are receipts, not readings: this cycle recorded the first line of each licence text verbatim, a sha256 of the whole text, and its size — and the row says that and stops. No verdict is pre-judged here. One of these tags carries bespoke vendor terms rather than a stock licence, and a row that summarised them from a first line would be exactly the guess this page exists to refuse. The clause-level read is queued; when it lands, these rows say more and carry a newer date. The models themselves sit the August arrivals, where their numbers are published in full.

muse-glimmer:30b-q8_0-dflashbenched on both house exams 2026-08-12 — no seatread 2026-08-12
licencethe packaged blob carries no licence text at all — a single byte, which the receipt records as 0 characters and the sha256 of the empty string (e3b0c442…). Published as a finding, not as a verdict. Read instead from the vendor's own LICENSE file on the model hub — huggingface.co/meta-models/Muse-Glimmer-30B (Meta Superintelligence Labs): Apache 2.0, read first-hand 2026-08-10 and again 2026-08-12.
what it asks of usnothing we can read out of the package — the weights ship without their licence text, which is worth knowing before anyone redistributes them
what it permits youwhat the vendor's own LICENSE file permits, read at the source — the packaged blob will not tell you, and we would rather say that than paraphrase a file that is not there
nemotron-3.5-lightning:30b-a3bbenched on both house exams 2026-08-12 — no seatread 2026-08-12
licencethe blob's first line, verbatim: "NVIDIA Open Model License Agreement" — 10 068 characters, 64 lines, sha256 aab95a9b…
what it asks of usthe clause-level read we still owe: bespoke vendor terms, not a stock licence, and this cycle read the first line and hashed the rest
what it permits youunstated here on purpose — the agreement ships inside the weights; read it there rather than take a summary from us
qwen3.6:27bbenched on both house exams 2026-08-12 — no seatread 2026-08-12
licencethe blob's first line, verbatim: "Apache License" — 11 358 characters, 203 lines, sha256 5e9ea707…
what it asks of usthe version line and the clause body were not captured by this cycle's receipt, so the row claims the first line and the sha, not a version
what it permits youread the text yourself — it ships inside the weights and prints in full from the same command named above
olmo-3.1:32b-think-q4_K_Mbenched on the judge exam 2026-08-12 — no seatread 2026-08-12
licencethe blob's first line, verbatim: "Apache License" — 11 359 characters, 203 lines, sha256 8c6db340…
what it asks of ussame as the row above: a first line and a hash are what we read, so a first line and a hash are what we claim
what it permits youread the text yourself — one character longer than its neighbour's, and a different file
granite4.1:30b-q8_0the incumbent on the roster — cleared both floors of the judge trialread 2026-08-12
licencethe blob's first line, verbatim: "Apache License" — 11 358 characters, 202 lines, sha256 cfc7749b…
what it asks of usthe same read we owe the other Apache-opening rows; it is on the roster this cycle because it sat the trials beside the new models, not because its terms moved
what it permits youread the text yourself — same opening line as the two rows above, same size as one of them (qwen3.6:27b), and still a third distinct file

Receipts, because a ledger should show its work. Three of these five blobs open with the same two words and are still three different files: 11 358 characters over 203 lines, 11 359 over 203, and 11 358 over 202, with three different sha256s between them. That is why the receipt is a hash and a size and not a name — "Apache License" is what the first line says, not proof of what the other eleven thousand characters do. The sharpest artifact of the read is the first row: a 30B model packaged with an empty licence file, which no summary of anyone's summary would ever have surfaced. The dates on these five rows are the day the text was read; what the text means is a read we still owe, and every row says so until we have made it.

The painters · diffusion · read 2026-08-11 except where a row says otherwise

Read via each model's authoritative record: the creator's permission flags fetched as raw JSON from civitai.com/api/v1/models/<id> (not the page prose — the ids are in the rows), and the licence files at their source repositories. The painters' bench story — who paints best — lives on the diffusion research bench; this table is only the law.

The four Civitai permission flags, in words: Image = generated images may be shared · RentCivit = the model may run on Civitai’s own generator · Rent = other hosted services may run it · Sell = the model file itself may be sold. ✓ = granted, ✗ = withheld.

albedobaseXL v2.1the painter of recordread 2026-08-11
licencethe creator's permission flags as recorded on Civitai (model 140737), over a CreativeML Open RAIL++-M SDXL base: Image ✓ · RentCivit ✓ · Rent ✓ · Sell ✗ — credit required
what it asks of uscredit the creator — given: our worlds are painted by albedobase xl, by albedobond. (A product credits page is queued and will carry it too; until it exists we say so here rather than claim it.)
what it permits youpublish and sell outputs; run it in a hosted service; may not sell the weights (Sell ✗)
sd_xl_base 1.0the sketch pipeline's baseread 2026-08-11
licenceCreativeML Open RAIL++-M (2023-07-26)
what it asks of usthe flow-down clause binds us — the use restrictions must appear as an enforceable provision in our player terms. That work is open; this row changes when it lands.
what it permits youcommercial use, hosting, sublicensing — under the licence's Attachment A use restrictions
flux.1 [schnell]the fast brush — the 4-step painter behind 2,296 of the campaign census's 2,828 renders (the census)read 2026-08-11
licenceApache 2.0 — the platform's licence record (tag: apache-2.0); the repo itself is download-gated, so this stamp covers the record. The full text was read earlier; that read's date went unrecorded — our lapse.
what it asks of us§4 notice duties if redistributing
what it permits yourun it anywhere, commercially — stock Apache 2.0, unlike its [dev] sibling two rows down
Juggernaut-XL v9bench candidate only — never wired into a productread 2026-08-11
licencethe creator's permission flags as recorded on Civitai (model 133005): Image ✓ · RentCivit ✓ · Rent ✗ · Sell ✗ — credit required
what it asks of uscredit; and the restraint itself — hosted use off civitai is not granted, so we don't
what it permits youpublish and sell outputs; do not run it inside your own hosted service
flux.1 [dev]held — nothing publishedread 2026-08-11
licenceFLUX.1 [dev] Non-Commercial License v1.1.1
what it asks of uswe could not satisfy ourselves, reading §2(d)'s output grant against §4(a)'s use prohibition, which one governs commercial use of dev's outputs — so we hold every flux experiment rather than guess in our own favour
what it permits youweights: non-commercial only — and §1(c) excludes any end-user-facing use even when free, §4(a) bars production as well as commercial purposes, and §2(e) conditions the output right on content filtering or pre-distribution review plus AI-generation disclosure. Outputs: §2(d)'s grant is expressly qualified ("except as expressly prohibited herein") and §4(a) survives termination (§8(d)) — on our reading, commercial use of dev outputs is not granted. We are not counsel; this is the row we most want a professional to confirm.
pixel-art-xl (LoRA)quarantinednot re-read this cycle
licencecreator's terms: non-commercial — verdict carried from the quarantine read, not re-read this cycle; queued
what it permits younot usable in a commercial pipeline; we pulled it from ours entirely
realvis xl 5.0 · pixel-art-redmondwithheld — unverifiednot re-read this cycle
licencenot read first-hand
what it asks of usour own rule: unread means unpublished
what it permits youunknown to us — we won't guess on your behalf
sd 3.5 · hidream · luminacandidate painters — in the census, not yet readnot re-read this cycle
licencevarious — readings queued
what it permits yourows land here as each read finishes; until then they are candidates, not recommendations

A reading trap we hit so you don't: the OpenRAIL++ file as shipped renders its Section III clauses without numerals while the text cross-references "paragraph 5" — map paragraph 4 to Distribution, 5 to Use-based restrictions, 6 to Output, or you will quote the wrong clause. And this read of the civitai flags is finer-grained than our last: the full permission arrays are now recorded verbatim (Rent present for AlbedoBase, absent for Juggernaut) — refining the prior reading, not contradicting it.

Why this page is called living

A licence table with no date is a rumor with a straight face. Licences move — new versions, changed permission flags, revised clauses (flux's licence is at v1.1.1 and now covers a family of variants it didn't at our first read). So this ledger is re-read, not archived: every row carries the date its licence text was last read in full, we re-read whenever a seat changes or a model updates, and when a clause moves the row moves and the change is named in plain text. This page is the licensing authority for everything we publish — the deep dive, the diffusion bench, and the voice trials carry short credits and summaries, but none of them is the authority: where a page's wording and this ledger's dated row differ, the row wins, and the difference is a bug we want reported. Two things we owe you about the word living. The triggers above are ours to notice, so we also set a floor: every row gets a fresh read at least every six months. If the newest date on this page is older than that, we have slipped — that is a bug, and telling us is the fastest fix.

Provenance

  • First-hand — every dated row was read from the licence text itself: the file packaged with the weights, the platform's raw permission record, or the vendor's current licence file. The method is named per table so you can repeat the read.
  • Dated — the stamp is the day of the last full read in our local time, not the day the row was written. No date, no claim.
  • Refusals count too — unread models are withheld and say so. The diffusion bench's 1,261 considered renders split 661 published / 338 held / 262 withheld, and 84 of the 262 trace to three models across the two rows above: realvis xl 5.0 (48) and pixel-art-redmond (18), both unread, and pixel-art-xl (18), quarantined. The flux hold is enforced at the experiment level — every flux experiment is held whole — rather than per-render in the publication law; folding it into the law's own reason codes is queued work, and we say so instead of rounding it off.
  • Authorship — read, drafted, and audited by the workshop's own agents under a human operator's rulings, then revised with that operator — often across many rounds; nothing releases until they have read it and signed off. The same division of labor this whole hub practices — told in full here.

We wrote this page because we got tired of guessing, and because someone deciding whether to trust a small studio's software shouldn't have to read a shelf of licences to do it. So we read them, wrote down what we found, and put the dates on so you can tell how fresh the reading is — including the rows where the honest entry is a dash. The shelf grows; the ledger grows with it.

elsewhere in the workshop

a strata→signal property · hello@strata2signal.com · say hello