Package Apache license and standardize notices

Adopt the conventional NOTICE layout and include required license material in published crate archives. Verify workspace license metadata and the host coordinator's bundled ncurses notices.

Cargo.toml

@@ -23,6 +23,7 @@ version = "0.0.0"
 edition = "2024"
 rust-version = "1.97"
 license = "Apache-2.0"
+license-file = "LICENSE"
 
 [workspace.dependencies]
 anyhow = "=1.0.103"

NOTICE

@@ -0,0 +1,47 @@
+Lazaret
+Copyright 2026 ms2k
+
+Third-party notices
+
+gVisor
+
+The files matching patches/gvisor-9f8f6c917-* modify or describe a build of
+gVisor revision 9f8f6c917885d9ef3d84c17280939c012dea0dfe. The patch files
+contain context from gVisor source files and identify Lazaret's changes in
+unified-diff form.
+
+Copyright The gVisor Authors.
+
+The gVisor files modified by these patches are licensed under the Apache
+License 2.0 in LICENSE. The pinned gVisor revision does not contain a NOTICE
+file. Its distribution also identifies files under MIT and BSD terms, which
+are reproduced in LICENSES/gvisor-additional-licenses.txt.
+
+fuser
+
+The file patches/fuser-0.17.0-lock-flags.patch modifies fuser 0.17.0 and
+contains context from its source files. Lazaret's changes in this patch are
+offered under the upstream MIT License so the resulting modified files remain
+under one license.
+
+Copyright (c) 2020-present Christopher Berner.
+
+Copyright (c) 2013-2019 Andreas Neuhaus.
+
+The applicable license is reproduced in LICENSES/fuser-MIT.txt.
+
+ncurses terminfo
+
+The file crates/lazaret-host-coordinator/assets/tmux-256color.base64 is a
+Base64 encoding of the compiled tmux-256color entry distributed with ncurses.
+The SHA-256 digest of the decoded entry is
+7f2870efd2bc94ba6ff2c6dd6e84777b687f4331920ad388991c5ffcfc444cca.
+
+Copyright 2018-2024, 2025 Thomas E. Dickey.
+
+Copyright 1998-2017, 2018 Free Software Foundation, Inc.
+
+The applicable MIT Open Group variant is reproduced in
+LICENSES/ncurses-MIT-open-group.txt. The ncurses terminfo source records
+additional authorship and provenance for the terminal database:
+https://invisible-island.net/ncurses/terminfo.src.html

README.md

@@ -42,4 +42,4 @@ Edit the example network allowlists and persistent volume paths before use.
 - [Example configuration](docs/example.toml)
 - [Verification entry point](tools/verify)
 - [Apache License 2.0](LICENSE)
-- [Third-party notices](THIRD_PARTY_NOTICES.md)
+- [Notices](NOTICE)

THIRD_PARTY_NOTICES.md

@@ -1,33 +0,0 @@
-# Third-party notices
-
-Except for the material identified below, this repository is licensed under the Apache License 2.0 in [LICENSE](LICENSE).
-
-This file identifies third-party material stored in the source repository. A binary distribution must also provide the notices required by linked Rust dependencies and dependencies incorporated into the patched gVisor runtime.
-
-## gVisor
-
-The files matching `patches/gvisor-9f8f6c917-*` modify or describe a build of [gVisor](https://github.com/google/gvisor) revision `9f8f6c917885d9ef3d84c17280939c012dea0dfe`. The patch files contain context from gVisor source files and clearly identify Lazaret's changes in unified-diff form.
-
-Copyright The gVisor Authors.
-
-The gVisor files modified by these patches are licensed under the Apache License 2.0 in [LICENSE](LICENSE). The pinned gVisor revision does not contain a `NOTICE` file. Its distribution also identifies files under MIT and BSD terms, which are reproduced in [LICENSES/gvisor-additional-licenses.txt](LICENSES/gvisor-additional-licenses.txt).
-
-## fuser
-
-The file `patches/fuser-0.17.0-lock-flags.patch` modifies [fuser 0.17.0](https://crates.io/crates/fuser/0.17.0) and contains context from its source files. Lazaret's changes in this patch are offered under the upstream MIT License so the resulting modified files remain under one license.
-
-Copyright (c) 2020-present Christopher Berner.
-
-Copyright (c) 2013-2019 Andreas Neuhaus.
-
-The applicable license is reproduced in [LICENSES/fuser-MIT.txt](LICENSES/fuser-MIT.txt).
-
-## ncurses terminfo
-
-The file `crates/lazaret-host-coordinator/assets/tmux-256color.base64` is a Base64 encoding of the compiled `tmux-256color` entry distributed with ncurses. The SHA-256 digest of the decoded entry is `7f2870efd2bc94ba6ff2c6dd6e84777b687f4331920ad388991c5ffcfc444cca`.
-
-Copyright 2018-2024, 2025 Thomas E. Dickey.
-
-Copyright 1998-2017, 2018 Free Software Foundation, Inc.
-
-The applicable MIT Open Group variant is reproduced in [LICENSES/ncurses-MIT-open-group.txt](LICENSES/ncurses-MIT-open-group.txt). The [ncurses terminfo source](https://invisible-island.net/ncurses/terminfo.src.html) records additional authorship and provenance for the terminal database.

crates/lazaret-client/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [[bin]]
 name = "lazaret"

crates/lazaret-control-client/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [dependencies]
 lazaret-core = { version = "=0.0.0", path = "../lazaret-core" }

crates/lazaret-core/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [dependencies]
 ed25519-dalek.workspace = true

crates/lazaret-domain-state/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [dependencies]
 lazaret-core = { version = "=0.0.0", path = "../lazaret-core" }

crates/lazaret-escalation-client/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [[bin]]
 name = "lazaret-escalation-client"

crates/lazaret-host-coordinator/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [[bin]]
 name = "lazaret-host-coordinator"

crates/lazaret-host-coordinator/LICENSES/ncurses-MIT-open-group.txt

@@ -0,0 +1 @@
+../../../LICENSES/ncurses-MIT-open-group.txt

crates/lazaret-host-coordinator/NOTICE

@@ -0,0 +1,20 @@
+Lazaret
+Copyright 2026 ms2k
+
+Third-party notices
+
+ncurses terminfo
+
+The file assets/tmux-256color.base64 is a Base64 encoding of the compiled
+tmux-256color entry distributed with ncurses. The SHA-256 digest of the
+decoded entry is
+7f2870efd2bc94ba6ff2c6dd6e84777b687f4331920ad388991c5ffcfc444cca.
+
+Copyright 2018-2024, 2025 Thomas E. Dickey.
+
+Copyright 1998-2017, 2018 Free Software Foundation, Inc.
+
+The applicable MIT Open Group variant is reproduced in
+LICENSES/ncurses-MIT-open-group.txt. The ncurses terminfo source records
+additional authorship and provenance for the terminal database:
+https://invisible-island.net/ncurses/terminfo.src.html

crates/lazaret-ignored-workspace/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [dependencies]
 bstr.workspace = true

crates/lazaret-linux/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [dependencies]
 lazaret-core = { version = "=0.0.0", path = "../lazaret-core" }

crates/lazaret-prepared-lower/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [dependencies]
 anyhow.workspace = true

crates/lazaret-runtime-supervisor/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [[bin]]
 name = "lazaret-runtime-supervisor"

crates/lazaret-sandbox-contract/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [dependencies]
 lazaret-core = { version = "=0.0.0", path = "../lazaret-core" }

crates/lazaret-sandbox-init/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [[bin]]
 name = "lazaret-sandbox-init"

crates/lazaret-state-anchor/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [dependencies]
 lazaret-core = { version = "=0.0.0", path = "../lazaret-core" }

crates/lazaret-storage-catalog/Cargo.toml

@@ -4,6 +4,7 @@ version.workspace = true
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
+license-file.workspace = true
 
 [dependencies]
 lazaret-core = { version = "=0.0.0", path = "../lazaret-core" }