Remove non-AGPL contributor approval machinery

.github/PULL_REQUEST_TEMPLATE.md

@@ -39,8 +39,6 @@ Contributor mode (select one):
 
 <!-- Record exact commands, checks, contract/compatibility evidence, and results. -->
 
-- [ ] I ran the narrowest relevant package verification and documented any checks that could not be run.
-
 ## Risk and rollback
 
 <!-- Identify risks, migration effects, and an exact rollback/recovery path. -->
@@ -49,25 +47,6 @@ Contributor mode (select one):
 
 <!-- Summarize the journey, final status, unresolved blockers, and next action. -->
 
-## Contribution grant (human action required)
-
-The accountable human must review [CONTRIBUTING.md](https://github.com/treeseed-ai/agent/blob/main/CONTRIBUTING.md) and check the affirmation below. Agents must leave it unchecked for the human.
-
-<!--
-An agent must not check this box. The human contributor or accountable human must
-read CONTRIBUTING.md and affirm the grant by checking it in the PR description.
--->
-
-- [ ] I have read `CONTRIBUTING.md`, have the right to submit this contribution, and intentionally submit it for inclusion under the Apache License, Version 2.0, without additional terms or conditions, as described by Section 5.
-
-## Agent contribution attestation
-
-Governed agents must leave the human affirmation unchecked. TreeSeed populates the managed block below only when an active project authorization, assignment, agent, capacity provider, repository, base SHA, and head SHA all match. Agents cannot create or broaden that authorization.
-
-<!-- treeseed:contribution-attestation:start -->
-Pending — TreeSeed will replace this text for an authorized agent contribution.
-<!-- treeseed:contribution-attestation:end -->
-
 ## Submission checklist
 
 - [ ] The change is bounded to the stated work item and target repository.

AGENTS.md

@@ -1,7 +1,5 @@
-# Agent runtime contribution policy
+# Agent runtime workspace guidance
 
-Agents may prepare the managed **Agent contribution attestation** only when their definition enables `delegated-project-authorization`, the assignment and capacity grant include `contribution_attestation`, and the trusted API issues a receipt bound to the exact repository, agent, capacity provider, assignment, base SHA, and head SHA.
+The Agent package is an Apache-2.0 repository. It has no contributor-grant checkbox, approved-committer allowlist, or contribution-attestation requirement. Human and agent changes use the same durable pull-request record and the same exact-head verification, review, staging, and release gates.
 
-Agents must never check or edit the **Human contribution affirmation** and may not create, broaden, renew, revoke, or supersede a project contribution authorization. The Agent runtime verifies the API signature and returns only the managed body block; GitHub token/App custody and PR mutation remain in the trusted provider/API boundary.
-
-Missing, stale, mismatched, expired, revoked, or unsigned authority fails closed. Never pass GitHub credentials, provider private keys, membership credentials, or signing secrets into an agent execution workspace.
+Agents must act only within assignment and capacity-provider authority, preserve exact repository and commit evidence, and keep GitHub tokens, provider private keys, membership credentials, and runtime secrets outside agent execution workspaces. Repository publication remains in the trusted provider/API boundary.

CONTRIBUTING.md

@@ -1,9 +1,7 @@
 # Contributing to TreeSeed Agent
 
-Human and governed-agent contributions use the same durable pull-request record. Select exactly one contributor mode and preserve the exact base/head refs, work authority, verification, commits, and completion summary.
+Human and agent contributions use the same durable pull-request record. Select the contributor mode and preserve the exact base/head refs, work authority, verification, commits, risk, rollback, and completion summary.
 
-Human contributors must check the template affirmation themselves. Governed agents must leave it unchecked and may populate only the TreeSeed-managed attestation block when an active project authorization, assignment, agent, capacity provider, repository, base, and head all match.
+This repository is licensed under Apache-2.0. In accordance with Section 5 of that license, an intentionally submitted contribution is provided under Apache-2.0 without additional terms unless you explicitly state otherwise. The repository does not require a separate contributor-grant checkbox, standing contributor authorization, or approved-committer allowlist.
 
-By intentionally submitting a Contribution for inclusion in this Apache-2.0 project, and unless you explicitly state otherwise, the Contribution is submitted under the Apache License, Version 2.0 without additional terms or conditions as described by Section 5. Review [the repository license](LICENSE) and the [official Apache License 2.0 text](https://www.apache.org/licenses/LICENSE-2.0) before affirming.
-
-Do not submit code, documentation, or other material you do not have the right to contribute. An agent cannot create, broaden, renew, revoke, or impersonate a human contribution authorization.
+Do not submit code, documentation, or other material you do not have the right to contribute. Review [LICENSE](LICENSE) before submitting.

docs/src/content/agents/architect.mdx

@@ -15,11 +15,6 @@ groupIds:
   - agent
   - architecture
   - engineering-team
-contribution:
-  mode: delegated-project-authorization
-  mayPopulatePrAttestation: true
-  requiredCapability: contribution_attestation
-  requireExactHead: true
 identity:
   purpose: Defines the project architecture, objectives, standards, and decision-aligned knowledge structure.
   responsibilities:

docs/src/content/agents/engineer.mdx

@@ -15,11 +15,6 @@ groupIds:
   - agent
   - engineering
   - engineering-team
-contribution:
-  mode: delegated-project-authorization
-  mayPopulatePrAttestation: true
-  requiredCapability: contribution_attestation
-  requireExactHead: true
 identity:
   purpose: Implements decision-scoped code and configuration changes without modifying tests.
   responsibilities:

docs/src/content/agents/releaser.mdx

@@ -15,11 +15,6 @@ groupIds:
   - agent
   - engineering-team
   - release
-contribution:
-  mode: delegated-project-authorization
-  mayPopulatePrAttestation: true
-  requiredCapability: contribution_attestation
-  requireExactHead: true
 identity:
   purpose: Verifies staged changes and coordinates reliable release from staging through TreeSeed release operations.
   responsibilities:

docs/src/content/agents/reporter.mdx

@@ -15,11 +15,6 @@ groupIds:
   - agent
   - engineering-team
   - reporting
-contribution:
-  mode: delegated-project-authorization
-  mayPopulatePrAttestation: true
-  requiredCapability: contribution_attestation
-  requireExactHead: true
 identity:
   purpose: Deterministically summarizes workdays, capacity, graph progress, blockers, tool telemetry, and outcomes.
   responsibilities:

docs/src/content/agents/researcher.mdx

@@ -15,11 +15,6 @@ groupIds:
   - agent
   - engineering-team
   - research
-contribution:
-  mode: delegated-project-authorization
-  mayPopulatePrAttestation: true
-  requiredCapability: contribution_attestation
-  requireExactHead: true
 identity:
   purpose: Answers questions and improves project knowledge through TreeDX-backed research content.
   responsibilities:

docs/src/content/agents/reviewer.mdx

@@ -15,11 +15,6 @@ groupIds:
   - agent
   - engineering-team
   - review
-contribution:
-  mode: delegated-project-authorization
-  mayPopulatePrAttestation: true
-  requiredCapability: contribution_attestation
-  requireExactHead: true
 identity:
   purpose: Reviews knowledge, proposals, deliverables, and staged work for accuracy, clarity, and risk.
   responsibilities:

docs/src/content/agents/technical-writer.mdx

@@ -15,11 +15,6 @@ groupIds:
   - agent
   - engineering-team
   - technical-writing
-contribution:
-  mode: delegated-project-authorization
-  mayPopulatePrAttestation: true
-  requiredCapability: contribution_attestation
-  requireExactHead: true
 identity:
   purpose: Maintains user, developer, and operator documentation for released and staged project capabilities.
   responsibilities:

docs/src/content/agents/tester.mdx

@@ -15,11 +15,6 @@ groupIds:
   - agent
   - engineering-team
   - testing
-contribution:
-  mode: delegated-project-authorization
-  mayPopulatePrAttestation: true
-  requiredCapability: contribution_attestation
-  requireExactHead: true
 identity:
   purpose: Creates tests before implementation and verifies behavior without modifying implementation code.
   responsibilities:

package.json

@@ -111,7 +111,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@openai/codex-sdk": "^0.130.0",
-    "@treeseed/sdk": "github:treeseed-ai/sdk#5db07e79bbd32bcd753d7600d15b7412357fc8c5",
+    "@treeseed/sdk": "github:treeseed-ai/sdk#92a66135fbda5575bee058b0ab25339c6c7d6398",
     "esbuild": "0.28.0",
     "hono": "^4.8.2",
     "typescript": "^5.9.3",

src/agents/index.ts

@@ -1,2 +1 @@
 export { listRegisteredAgentHandlers, resolveAgentHandler } from './support/registry.ts';
-export { prepareProjectContributionAttestation } from './contributions/project-contribution-attestation.ts';

tests/unit/agents/contributions/non-agpl-contribution-policy.test.ts

@@ -0,0 +1,16 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { describe, expect, it } from 'vitest';
+
+describe('Agent contribution policy', () => {
+	it('does not impose the AGPL commercial-license approval process', () => {
+		const root = process.cwd();
+		const template = readFileSync(resolve(root, '.github/PULL_REQUEST_TEMPLATE.md'), 'utf8');
+		const guidance = readFileSync(resolve(root, 'CONTRIBUTING.md'), 'utf8');
+		expect(JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8')).license).toBe('Apache-2.0');
+		expect(existsSync(resolve(root, '.github/workflows/contributor-license.yml'))).toBe(false);
+		expect(existsSync(resolve(root, '.github/approved-committers.json'))).toBe(false);
+		expect(template).not.toMatch(/Contribution grant|contribution-attestation/u);
+		expect(guidance).toMatch(/does not require a separate contributor-grant checkbox/u);
+	});
+});