Third-party notices

Evidence for R2 notices. Licenses are taken from each product’s own license file in this workspace (or the upstream image pin). Not legal advice.

ComponentLicenseSource of truthOn this host
FerrumBusiness Source License 1.1 (BUSL-1.1)`Ferrum/LICENSE`Yes — `ferrum` / `ferrum-ui`
SolumBusiness Source License 1.1 (BUSL-1.1)`Solum/LICENSE`Yes — sidecar via site BFF
ga4gh-infra (broker, visas, registry, ADS, admin-ui, …)See ga4gh-infra repository LICENSEga4gh-infra checkoutYes
HELIOSApache-2.0 (Early Access; pin `helios` v0.1.2)HELIOS docs / PyPI `helios-audit`Yes — signed reports
Garage (object store)**Apache-2.0** (not AGPL)Upstream `dxflrs/garage` v2.0.0; `deploy/object-store/Dockerfile`Yes
MinIOAGPL-3.0Evaluated only; **not deployed** on this hostNo
Keycloak / Postgres / Caddy / Python base imagesUpstream OSI licensesImage pins in `deploy/compose/pins.env`Yes
HelixTestProduct tooling (not a certificate)HelixTest binary reportsReport published under `/conformance/`

Ferrum (BUSL-1.1) — excerpt from `Ferrum/LICENSE`

Business Source License 1.1

Licensor: Synaptic Four, Germany

Licensed Work: Ferrum — GA4GH Bioinformatics Platform

Additional Use Grant and Change Date are in that file. This demo does not claim Ferrum production or clinical deployment.

Solum (BUSL-1.1) — excerpt from `Solum/LICENSE`

Business Source License 1.1

Licensor: Synaptic Four, Germany

Same BUSL family as Ferrum. Solum has no public hostname on this demo; access is via the site BFF.

Garage (Apache-2.0)

Garage v2.0.0 is Apache-2.0. This host’s object store is **not** AGPL. AGPL-3.0 would apply to MinIO if it were hosted as a network service; MinIO is not on this host (see `docs/OBJECT-STORE-EVAL.md`).

Honesty

Green health checks and HelixTest results are technical signals, not GA4GH certification.