{
  "schema-version": "0.1.0",
  "standard": {
    "schema-version": "0.1.0",
    "sequence": 40,
    "standard_id": "FORK-004",
    "title": "Open Source Patch Publication",
    "summary": "Patched-source repositories should be fully public, hosted in the appropriate official fork, and released under the same open-source license terms as the original code.",
    "doc-status": "Pre-Draft",
    "standard-version": "0.0.1",
    "candidate-pack": "OSERA-SP-0.2.0 observe",
    "ratified-in": "Not ratified",
    "ratified-date": "Not ratified",
    "fitness-role": "Observe-only check",
    "type": "FORK",
    "category": "Fork Management",
    "applies-to": [
      "Patch providers",
      "OSERA maintainers",
      "Enterprise recipients"
    ],
    "requirements": [
      {
        "id": "FORK-004.REQ-001",
        "level": "MUST",
        "text": "Patched-source repositories must be fully public and publicly fetchable without private credentials.",
        "checkability": "automated",
        "checks": [
          {
            "id": "FORK-004.CHECK-001",
            "title": "Repository is publicly fetchable",
            "type": "repository",
            "severity": "observe",
            "implementation": "osera-fitness.fork004.public_fetch",
            "evidence": [
              "repository_url",
              "fetch_result"
            ]
          }
        ]
      },
      {
        "id": "FORK-004.REQ-002",
        "level": "MUST",
        "text": "Patched-source repositories must preserve applicable upstream open-source license files and notices and release patched source under the same applicable license terms as the original source line.",
        "checkability": "partially-automated",
        "checks": [
          {
            "id": "FORK-004.CHECK-002",
            "title": "Upstream license terms, files, and notices are preserved",
            "type": "repository",
            "severity": "observe",
            "implementation": "osera-fitness.fork004.license_files",
            "evidence": [
              "license_files",
              "upstream_license_files"
            ]
          }
        ]
      },
      {
        "id": "FORK-004.REQ-003",
        "level": "MUST",
        "text": "Patched-source repositories must be hosted in the appropriate official OSERA fork for the upstream project or artifact line.",
        "checkability": "partially-automated",
        "checks": [
          {
            "id": "FORK-004.CHECK-003",
            "title": "Repository is the appropriate official OSERA fork",
            "type": "repository",
            "severity": "observe",
            "implementation": "osera-fitness.fork004.official_fork",
            "evidence": [
              "repository_url",
              "upstream_repository_url",
              "fork_relationship"
            ]
          }
        ]
      }
    ],
    "source_path": "docs/_standards/fork-004-open-source-patch-publication.md",
    "url": "/standards/fork-004-open-source-patch-publication/"
  }
}