usethesource: thanks, Tracy for the CCIRT diagrams

This commit is contained in:
Denver Gingerich 2024-02-02 19:45:49 -08:00
parent bca1c50f86
commit 42cf606847
3 changed files with 5 additions and 1 deletions

Binary file not shown.

After

Width:  |  Height:  |  Size: 116 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 103 KiB

View file

@ -15,7 +15,11 @@
<p>We are providing a 30-day window, starting on February 3, 2024 (and ending at 23:59 <abbr title="Anywhere on Earth">AoE</abbr> on March 4, 2024), in which companies can send us the email address of their CCIRT (to <a href="mailto:compliance@sfconservancy.org">compliance@sfconservancy.org</a> with Subject "CCIRT contact") so we can contact this team about any source candidates we receive, giving them 7 calendar days to confirm all potential copyleft licenses issues are resolved. At the end of these 7 days, we will publish the updated source candidate (if we receive one), or the original (if no update is received). If we have no contact registered, the source candidate will be published without any grace period following the initial 30-day window.</p> <p>We are providing a 30-day window, starting on February 3, 2024 (and ending at 23:59 <abbr title="Anywhere on Earth">AoE</abbr> on March 4, 2024), in which companies can send us the email address of their CCIRT (to <a href="mailto:compliance@sfconservancy.org">compliance@sfconservancy.org</a> with Subject "CCIRT contact") so we can contact this team about any source candidates we receive, giving them 7 calendar days to confirm all potential copyleft licenses issues are resolved. At the end of these 7 days, we will publish the updated source candidate (if we receive one), or the original (if no update is received). If we have no contact registered, the source candidate will be published without any grace period following the initial 30-day window.</p>
<p>After this initial 30-day window, companies can still send us the email address of their CCIRT and, after we receive this email address, we will give them 7 calendar days from the first notification of an incomplete source candidate to resolve the issue. However, it is best for companies to let us know about their CCIRT before this 30-day window ends in case there are any pending source candidates to publish when that 30-day window ends.</p> <p><img src="/img/ccirt-initial.png" alt="initial CCIRT process, showing 30-day and 7-day windows" /></p>
<p>After this initial 30-day window, companies can still send us the email address of their CCIRT and, after we receive this email address, we will give them 7 calendar days from the first notification of an incomplete source candidate to resolve the issue. However, it is best for companies to let us know about their CCIRT before this 30-day window ends in case there are any pending source candidates to publish when that 30-day window ends. The process after these 30 days is as follows:</p>
<p><img src="/img/ccirt-initial.png" alt="ongoing CCIRT process, showing standard 7-day window" /></p>
<p>For the avoidance of doubt, and to hopefully prevent a wave of last-minute CCIRT submissions on the final day of this 30-day window, SFC is providing for 7 calendar days after the 30-day window ends (so 37 days from February 3, or until 23:59 <abbr title="Anywhere on Earth">AoE</abbr> on March 11, 2024), to any company that provides the email address of their CCIRT at any time during this 30-day window, the option to correct its source candidates before we publish them. So it is beneficial for companies to inform us of their CCIRT sooner rather than later, so they have as much of that 37 days as possible to correct all copyleft compliance issues. SFC looks forward to working with all the CCIRTs who register with us.</p> <p>For the avoidance of doubt, and to hopefully prevent a wave of last-minute CCIRT submissions on the final day of this 30-day window, SFC is providing for 7 calendar days after the 30-day window ends (so 37 days from February 3, or until 23:59 <abbr title="Anywhere on Earth">AoE</abbr> on March 11, 2024), to any company that provides the email address of their CCIRT at any time during this 30-day window, the option to correct its source candidates before we publish them. So it is beneficial for companies to inform us of their CCIRT sooner rather than later, so they have as much of that 37 days as possible to correct all copyleft compliance issues. SFC looks forward to working with all the CCIRTs who register with us.</p>