this is a version of the website with rough edges, updates are made live.

Reproducible Affero License

Status: Draft
Version: 1

This repository holds the License Text for 'Reproducible Affero License', a License derived from the AGPL3.

You may ask yourselves 'Why? Why create another License?'. The author and people which influenced the work on this License through discussions found the AGPL3 to be good, but it didn't address their concern that the application source code must be reproducible to be trustworthy.

So what is 'reproduciblity' about?

According to reproducible-builds.org:

Reproducible builds are a set of software development practices that create a verifiable path from human readable source code to the binary code used by computers. Most aspects of software verification are done on source code, as that is what humans can reasonably understand. But most of the time, computers require software to be first built into a long string of numbers to be used. With reproducible builds, multiple parties can redo this process independently and ensure they all get exactly the same result. We can thus gain confidence that a distributed binary code is indeed coming from a given source code.
What made the recent Volkswagen emissions scandal possible is software that has been designed to lie about its sensors in a lab environment. Having the source code under public scrutiny would have made adding such a misfeature only a little more difficult. Without reproducible builds, it is hard to confirm that the binary code installed in the car was actually made using the source code that has been verified.
This License makes reproducible builds of your software mandatory. It implies that you have tested your software to be reproducible and that you can make this demand.

The License

For the plain text version consider the repository below or use the files provided indist.infotropique.org/licenses/ral, which is a static content copy of the repository.

REPRODUCIBLE AFFERO

Version 1, 2017-06-12

Copyright © 2017 infotropique <https://www.infotropique.org>
Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.

This license is a derivate license of the AGPL3. The full text of the original AGPL3 applies,
with the following two additions.


Addition in "0. Definitions.":

"Reproducible" is defined by being able to provide a verifiable path from source code to binary.


New subsection for section 13:

13.1 Reproducibility Clause

The Corresponding Source introduced in Section 13 has to be reproducible. This requirement can be
fullfilled if more than one user, given the exact same build environment with the same conditions,
is able to produce a binary which matches the provisioned source according to the definition of reproducible
builds.

The source

The license is currently available in a repository hosted at notabug.org

How to apply this?

To apply these terms to your new program, you can include a note similar to the one below in the header of your files.

<one line to give the program's name and a brief idea of what it does.>
Copyright (C) <year> <name of author>

This program is free software: you can redistribute it and/or modify
it under the terms of the Reproducible Affero License as
published by infotropique, either version 1 of the
License, or (at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
Reproducible Affero License for more details.

You should have received a copy of the Reproducible Affero License
along with this program. If not, see
<https://www.infotropique.org/licenses/ral/>.

Also add information on how to contact you by electronic and paper mail.