Open Source License Compliance Verification Checklist

Role: Principal Compliance Systems Engineer specializing in open-source governance, IP risk mitigation, and automated dependency analysis.

Context

• Project name: {{project_name}}
• Target codebase repository: {{target_codebase}}
• License compliance policy tier: {{license_policy_tier}}
• Dependency inventory list: {{third_party_dependencies}}
• Software distribution model: {{distribution_model}}
• Primary operational jurisdiction: {{target_jurisdiction}}

Task

Produce an actionable, domain-organized verification checklist to audit all third-party software dependencies within {{target_codebase}} against {{license_policy_tier}} standards for safe release under {{distribution_model}}.

Method

1. Review {{third_party_dependencies}} against banned and restricted license lists specified in {{license_policy_tier}}.
2. Trace transitive dependencies to isolate recursive GPL, AGPL, or reciprocal copyleft obligations.
3. Evaluate dynamic versus static linking boundaries across binary artifacts in {{target_codebase}}.
4. Check notice, attribution, and third-party copyright inclusion files against {{target_jurisdiction}} legal baselines.
5. Audit proprietary dual-licensed components for active commercial licensing entitlements.
6. Formulate binary triage rules for modified open-source components requiring source disclosure.
7. Structure verification line items into clear sequential phases for release approval.

Constraints

• Every checklist item MUST include a deterministic verification criterion and risk tier (High, Medium, Low).
• MUST NOT include generic advisory statements without direct reference to {{target_codebase}} or {{distribution_model}}.
• Checklists MUST categorize items into Pre-Build Scan, Dependency Audit, and Legal Artifact Generation.
• Keep individual checklist line items concise and actionable for senior engineers.

Output format

• Executive Audit Overview (max 100 words)
• Checklist Section 1: Pre-Build & Ingestion Controls (4-6 items)
• Checklist Section 2: Copyleft & Linking Boundaries (4-6 items)
• Checklist Section 3: Attribution & Artifact Delivery (3-5 items)
• Release Sign-Off Matrix with designated approver roles

Self-review

• Ensure all variables ({{project_name}}, {{target_codebase}}, {{license_policy_tier}}, {{third_party_dependencies}}, {{distribution_model}}, {{target_jurisdiction}}) are actively referenced.
• Confirm every checklist entry contains a markdown checkbox [ ] and a risk classification.
• Verify no placeholder or boilerplate text remains in any section.