THIRD-PARTY NOTICES
===================

The Crumb source code is licensed under the Elixpo standard. Third-party
components retain their own licences.

The authoritative Rust and web dependency versions are recorded in Cargo.lock
and crumb.elixpo/package-lock.json. Harness composition packages retain their
upstream licence terms.

Downstream vendored copies must retain this licence tree, record the exact
Crumb commit, and list local modifications.

Bundled agent skills
--------------------

skills/community/polli/SKILL.md is copied from the Pollinations project,
pollinations/pollinations packages/polli-cli/SKILL.md at commit 0740daa48,
under the MIT licence. Local modifications: the `allowed-tools` field was
removed and a Crumb usage preface was added.

Test fixtures
-------------

crates/crumb-marketplace/tests/fixtures/cosign-v3-blob.sigstore.json and
cosign-v3-blob.txt are copied unmodified from sigstore-verify 0.15.0
(test_data/bundles/, https://github.com/sigstore/sigstore-rust), Copyright The
Sigstore Authors, under the Apache License 2.0. They are used only by tests.

Third-party images
------------------

crumb.elixpo/public/pollinations-favicon.png is the Pollinations logo,
recoloured from pollinations/pollinations
gen.pollinations.ai/public/favicon-32x32.png, Copyright 2026 pollinations.ai,
under the MIT licence. It identifies the Pollinations model provider and is
not covered by the CC-BY-4.0 grant for Elixpo's visual assets.
