Policies

• AI covenant nobody has checked this yet, still a draft
  The rules for AI-assisted contributions: the contributor owns the work, FINOS’s files stay FINOS’s, the schema is written by the converter, a condition is stated only as the CDM states it, and no mapping is guessed.

• Licence and attribution nobody has checked this yet, still a draft
  Which licence applies where: the schema project under Apache 2.0, FINOS’s files under the Community Specification License 1.0, the CDM’s descriptions in the schema carried with the attribution that licence asks for, and the FpML code lists under the FpML Public License.

• Security policy nobody has checked this yet, still a draft
  How to report a vulnerability, what this repository releases, what executes here and what holds each surface, as .github/SECURITY.md states.