vjan-nie · Nov 5, 2026 · Nov 5, 2026 · Nov 5, 2026 · Nov 5, 2026 · Nov 5, 2026
diff --git a/LICENSE b/LICENSE
@@ -4,12 +4,16 @@ Copyright (c) 2026 Osionos contributors.
 
 All rights reserved.
 
-This repository and all of its contents, including but not limited to source code,
+This repository's own files, including but not limited to source code,
 configuration files, scripts, documentation, assets, examples, schemas, database
 migrations, Docker files, and related materials, are the exclusive property of the
 copyright holders and are protected by copyright law and other applicable
 intellectual property laws.
 
+This license does not cover the git submodules listed in .gitmodules (under apps/,
+vendor/ and .claude/). Each submodule keeps its own license; for example,
+apps/grobase is licensed under the GNU Affero General Public License v3.0.
+
 Permission is granted only to the contributors to this project and to persons
 explicitly authorized by the copyright holders to access, inspect, run, and
 contribute to the software for the limited purpose of evaluating, developing,

diff --git a/README.md b/README.md
diff --git a/wiki/project/02-modules.md b/wiki/project/02-modules.md
@@ -2,7 +2,7 @@
 
 > **Superseded · 2026-11-05.** This whole page is history: its rows, letters,
 > legend and point totals. The current grades, one rule and the points table are
-> in the [README Modules table](../../README.md#modules).
+> in the [README Modules table](../../README.md#-modules-and-points).
 >
 > **Status:** Superseded · 2026-11-05 (written as Partial · 2026-09-15)
 > **Evidence:** flag states read from `deploy/fly/boot.sh`; every gate named here exists in the

diff --git a/wiki/project/ai-audit-2026-10-28.md b/wiki/project/ai-audit-2026-10-28.md
@@ -2,7 +2,7 @@
 
 > **Superseded · 2026-11-04.** The pin facts below are history. groot `develop` now pins osionos
 > `1c1d5d84`, which ships `services/osionos-ai` (745 files) and #270. The "0 of 10 AI points"
-> line no longer holds. The current grades are in the [README Modules table](../../README.md#modules),
+> line no longer holds. The current grades are in the [README Modules table](../../README.md#-modules-and-points),
 > and the LLM interface is explained in [ai-llm-interface](ai-llm-interface.md).
 >
 > **Status:** Superseded · 2026-11-04 (written as Partial · 2026-10-28)

diff --git a/wiki/project/ai-llm-interface.md b/wiki/project/ai-llm-interface.md
@@ -138,6 +138,6 @@ spend 15 calls.
 
 ---
 
-See also: [README Modules](../../README.md#modules) · [02-modules](02-modules.md) ·
+See also: [README Modules](../../README.md#-modules-and-points) · [02-modules](02-modules.md) ·
 [ai-stall-diagnosis-2026-10-29](ai-stall-diagnosis-2026-10-29.md) ·
 [runbooks/osionos-ai](../runbooks/osionos-ai.md)
diff --git a/wiki/project/contributions-method.md b/wiki/project/contributions-method.md
@@ -1,12 +1,12 @@
 # How the contribution counts are made
 
-The README's [Features List](../../README.md#features-list) and [Who committed
+The README's [Features](../../README.md#-features-and-who-built-them) and [Who committed
 where](../../README.md#who-committed-where) count commits one way, described
 here with the identity joins it rests on.
 
 ## The method
 
-Non-merge commits reachable from the commit groot `main` pins for each
+Non-merge commits reachable from the commit that groot's `main` pins for each
 repository, read through the root [`.mailmap`](../../.mailmap), with bots and
 AI-agent identities left out:
 

diff --git a/wiki/runbooks/fresh-machine.md b/wiki/runbooks/fresh-machine.md
@@ -10,7 +10,7 @@ otherwise.
 |---|---|---|
 | Docker Engine ≥ 25 + Compose v2 | healthchecks use `start_interval`; measured on Docker 29.8.2 | `docker-compose.yml:3`, [README prerequisites](../../README.md#prerequisites) |
 | RAM ≥ 8 GB | `make all` peaked at 6.25 GB used on an 8 GB VM; for a VM, `VM_RAM_MB=8192` | [measured runs](#measured-results) |
-| Free disk space for Docker | no minimum is measured; `fresh-bringup.sh` warns under 10 GiB free on the Docker data root, and the 2026-10-05 VM build passed with a 65 GB `/var` (91 GB disk) | `scripts/verify/fresh-bringup.sh:34,120-122`, [measured runs](#measured-results) |
+| Disk ≥ 30 GB free for Docker | images 13.5 GB + build cache 9.5 GB (the README's 23 GB) + volumes 1.4 GB, from `docker system df` on the dev VM with the stack running, 2026-10-01 (recorded in c3a80d12). Caveat: not measured from a clean build, so a cold build may differ. `fresh-bringup.sh` warns under 10 GiB free on the Docker data root; the 2026-10-05 VM build passed with a 65 GB `/var` (91 GB disk) | [README prerequisites](../../README.md#prerequisites), `scripts/verify/fresh-bringup.sh:32-34,121-122`, [measured runs](#measured-results) |
 | Free ports | 443, 3001–3003, 3007, 4000, 4100, 4200, 4322, 4323, 7880, 7881, 8444, 8787, UDP 50000–50060, and Kong on 8000 | `docker-compose.yml`, `apps/grobase/orchestrators/compose/base/gateway.yml` |
 | One `sudo` password | `make all` copies the local CA into the system store once (`certs-trust-local`); `fresh-bringup.sh` asks for it first, with `sudo -v` | `utils/mk/certs.mk`, targets `certs-trust`, `certs-trust-local`, `scripts/verify/fresh-bringup.sh` (`check_sudo`) |
 | A GitHub SSH key | submodules use `git@github.com:` URLs | `.gitmodules` |