chore: add copyright and SPDX headers

ARCHITECTURE.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Sub Rosa — Architecture
 
 High-level map of the monorepo: components, trust boundaries, round lifecycle, and where each proof runs. For crypto and settlement detail see [docs/TECH_DESIGN.md](./docs/TECH_DESIGN.md).

README.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 > [!NOTE]
 > This repository is the ecosystem contribution workspace for Sub Rosa,
 > created specifically for participation in the Stellar Wave program. The main

TASKS.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Task List: Issue #114 Receipt Schema Version Rejection
 
 - [ ] Phase 1: Locate offline receipt verifier and inspect current error handling

contracts/round/ERRORS.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Sub Rosa Round — Contract Error Codes
 
 Every failure mode from the Sub Rosa round contract has a defined code. There

contracts/round/README.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Sub Rosa Round Contract
 
 Soroban primitive that runs a sealed commit → verifiable-reveal →

docs/CV_LABS_APPLICATION.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Stellar x CV Labs Accelerator Application
 
 Working draft for the 2026 Stellar x CV Labs Accelerator application.

docs/DEMO_SCRIPT.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Demo Script (~5 Minutes)
 
 Walkthrough for `pnpm web:dev` (default http://localhost:5173).

docs/DEPLOY.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Deploy & environment variables
 
 Sub Rosa **does not require a committed `.env` file**. Secrets stay out of git; you inject them where each layer runs.

docs/ECOSYSTEM.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Ecosystem Integration — Passkey, Relayer, Scaffold
 
 Sub Rosa's live path uses **Ed25519 session keys + signed mandates** and **direct Soroban RPC**. It also ships optional ecosystem adapters that do not change the core protocol: Passkey-Kit in the web wallet panel, and OpenZeppelin Relayer Channels as an SDK submitter.

docs/INTEGRATION.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Integrating Sub Rosa
 
 Sub Rosa does not require users to come to the Sub Rosa demo app. The demo app

docs/LIMITATIONS.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Known Limitations
 
 Honest boundaries for the current prototype and submission materials. No hidden

docs/PILOT_PLAYBOOK.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Sub Rosa Pilot Playbook
 
 ## Positioning

docs/RECEIPTS.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Round Receipts
 
 A **round receipt** is a portable JSON document that captures the final state of a Sub Rosa auction round. Receipts can be exported from any live contract and verified offline — no RPC, no secrets, no Stellar dependency.

docs/SCF_TRANCHE_PLAN.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Sub Rosa — SCF Tranche Plan
 
 This document defines a focused three-tranche plan for Sub Rosa's SCF Build Award,

docs/TECH_DESIGN.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Sub Rosa — Technical Design
 
 ## Architecture

docs/THREAT_MODEL.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Sub Rosa — Threat Model
 
 ## Assets

docs/TRACK_ANSWERS.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Track Answers — Build On Stellar / IBW 2026
 
 Sub Rosa won **1st Place in the Hack Privacy Track**. The multi-agent/x402,

packages/round-bindings/README.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # round-bindings JS
 
 JS library for interacting with [Soroban](https://soroban.stellar.org/) smart contract `round-bindings` via Soroban RPC.

packages/round-bindings/SNAPSHOT_TESTS.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Round contract event snapshot tests
 
 The Round contract emits seven **on-chain events** via

scripts/check-deploy-docs.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+// Copyright (c) 2026 Sub Rosa contributors
 // scripts/check-deploy-docs.mjs
 //
 // Lightweight text-based smoke test that keeps docs/DEPLOY.md copy-pasteable.

scripts/check-deploy-docs.test.mjs

@@ -1,3 +1,4 @@
+// Copyright (c) 2026 Sub Rosa contributors
 import { execFileSync } from "node:child_process";
 import { mkdirSync, mkdtempSync, copyFileSync, writeFileSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";

scripts/check-fixture-sizes.mjs

@@ -1,3 +1,4 @@
+// Copyright (c) 2026 Sub Rosa contributors
 import { readdirSync, statSync } from "node:fs";
 import { join, relative } from "node:path";
 

scripts/check-fixture-sizes.test.mjs

@@ -1,3 +1,4 @@
+// Copyright (c) 2026 Sub Rosa contributors
 import { execFileSync } from "node:child_process";
 import { describe, it } from "node:test";
 import assert from "node:assert/strict";

scripts/check-links.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+// Copyright (c) 2026 Sub Rosa contributors
 'use strict';
 
 const fs = require('fs');

scripts/check-snapshots.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+// Copyright (c) 2026 Sub Rosa contributors
 // check-snapshots.mjs
 //
 // CI guard for Issue #120 — contract snapshot inventory check.

scripts/check-threat-model-anchors.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+// Copyright (c) 2026 Sub Rosa contributors
 /**
  * Check that docs/THREAT_MODEL.md still covers the core sealed-round risk
  * topics used by SCF / Wave diligence.

scripts/check-threat-model-anchors.test.mjs

@@ -1,3 +1,4 @@
+// Copyright (c) 2026 Sub Rosa contributors
 import { execFileSync } from "node:child_process";
 import { copyFileSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";

services/appraisal-api/README.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # `@sub-rosa/appraisal-api`
 
 x402-gated appraisal API. Agents pay per call in **USDC (SEP-41)** over Soroban;

services/keeper/README.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT -->
 # Keeper Service
 
 The Sub Rosa keeper service is a permissionless TypeScript node application that can run single-shot lifecycle operations or run in watch mode to automatically monitor and drive in-flight rounds to completion. A built-in status HTTP API exposes keeper-observed round state for pilots and dashboards.