Open-source license
OpenNeko is distributed under the Apache License 2.0. The repository also includes LICENSING.md, NOTICE, TRADEMARKS.md, and THIRD_PARTY_LICENSES.md for the license policy, notices, trademark rules, and dependency inventory.
- Apache License 2.0 covers the code license.
- OpenNeko names, logos, and marks are reserved separately by the trademark policy.
- Plugins can be independent packages across the OpenNeko plugin boundary; review their own license metadata before installing them.
Third-party notes
Third-party licensing depends on the exact dependency snapshot. The source repository documents Hermes as MIT-licensed and the sandbox stack with Apache-2.0, LGPL-2.1-only, and GPL-2.0-only components. Use THIRD_PARTY_LICENSES.md for the current transitive list.
Feature resolution
The runtime resolves feature availability from organization features, OPENNEKO_FEATURES, and verified OPENNEKO_LICENSE data. This lets deployments turn on capabilities without changing schema shape.
Docs that mention audit_chain, behavioral_alarms, dual_identity_audit, data_access_governance, or context_versioning should be read as feature-aware behavior. The tables may exist before the runtime feature is active.
Deployment policy
- Keep security-critical features explicit in deployment configuration.
- Document which orgs have feature flags enabled.
- Treat licensed feature changes like infrastructure changes and review them with operators.
- Verify behavior in the running app as well as in the database tables.