License Compliance Matrix and Rules

License compatibility matrix, attribution requirements, redistribution rules, and a decision tree for merging models under different open-source licenses.

EMEP merges models from diverse sources. Each source carries a license that constrains redistribution, attribution, and commercial use. This page defines the compatibility matrix, the decision logic for merge eligibility, and the attribution rules that apply per license family.

Compatibility Matrix

Rows: source license. Columns: target license of the merged output. Cells indicate whether a merge is permitted without additional review.

	Apache-2.0	MIT	BSD-3-Clause	Llama Community	Gemma Terms	Mistral	GPL-3.0	Custom	Unknown
Apache-2.0	Compatible	Compatible	Compatible	Review Required	Review Required	Review Required	Incompatible	Review Required	Incompatible
MIT	Compatible	Compatible	Compatible	Review Required	Review Required	Review Required	Incompatible	Review Required	Incompatible
BSD-3-Clause	Compatible	Compatible	Compatible	Review Required	Review Required	Review Required	Incompatible	Review Required	Incompatible
Llama Community	Review Required	Review Required	Review Required	Compatible	Review Required	Review Required	Incompatible	Review Required	Incompatible
Gemma Terms	Review Required	Review Required	Review Required	Review Required	Compatible	Review Required	Incompatible	Review Required	Incompatible
Mistral	Review Required	Review Required	Review Required	Review Required	Review Required	Compatible	Incompatible	Review Required	Incompatible
GPL-3.0	Incompatible	Incompatible	Incompatible	Incompatible	Incompatible	Incompatible	Compatible	Incompatible	Incompatible
Custom	Review Required	Review Required	Review Required	Review Required	Review Required	Review Required	Incompatible	Review Required	Incompatible
Unknown	Incompatible	Incompatible	Incompatible	Incompatible	Incompatible	Incompatible	Incompatible	Incompatible	Incompatible

“Compatible” means merge proceeds with standard attribution. “Review Required” triggers a legal workflow before merge. “Incompatible” blocks the merge.

Decision Tree

Attribution Requirements

License Family	Requirement
Apache-2.0	Preserve copyright notice, license text, and NOTICE file; state changes
MIT	Preserve copyright notice and permission notice
BSD-3-Clause	Preserve copyright notice, disclaimer, and attribution
GPL-3.0	Preserve license, provide source, state changes; copyleft applies to derivative work
Llama Community	Acceptable use policy compliance; output attribution per Meta terms
Gemma Terms	Use restrictions per Google terms; output attribution required
Mistral	Per Mistral AI terms; commercial use may require separate agreement
Custom	Follow custom terms stored in registry metadata

The merge output inherits the most restrictive license among inputs. If any input is GPL-3.0, the output is GPL-3.0. If any input requires review, the output requires review.

Redistribution Rules

• Released models include a LICENSE-BUNDLE file listing all input licenses and their texts.
• The ArtifactStore attaches the LICENSE-BUNDLE to every release artifact.
• DeploymentManager refuses to deploy a model whose license bundle is missing or incomplete.
• Enterprise deployments may apply additional license filters via configuration.

Cross-Links

• Model Supply Chain
• Security Requirements
• Model Registry