Open-Source Licenses

Locus is licensed under the Apache License 2.0, © 2026 SparkTales Inc. Apache-2.0 was chosen over MIT for two things MIT does not cover: an express patent grant from contributors, and an explicit statement that the license does not grant rights to the project’s trademarks. The name Locus and the SparkTales identity are not part of what the license gives away.

Contributions are accepted under the same license — inbound matches outbound — using the Developer Certificate of Origin instead of a contributor license agreement. Signing off a commit (git commit -s) states that you wrote the change or otherwise have the right to submit it under the project’s license.

Locus embeds a relocatable CPython 3.14.6 from the immutable python-build-standalone release 20260728, so the app runs on a Mac with no Python installed. The runtime contains components covered by PSF-2.0, MPL-2.0, Apache-2.0, MIT, BSD-style, and public-domain terms; the retained notices cover CPython, bzip2, Expat, libffi, liblzma, mpdecimal, OpenSSL 3, SQLite, and zlib. The optional GNU gdbm (_dbm) extension and the _tkinter extension with its Tcl/Tk runtime are deliberately excluded.

The agent’s dependencies are pinned by hash in agent/requirements-runtime.lock — packages under their respective open-source licenses, including FastAPI, httpx2, Pydantic, the Model Context Protocol SDK, and their transitive dependencies. The full inventory with versions and licenses is in ThirdPartyNotices.md, and the complete license texts ship inside the application bundle at Contents/Resources/ThirdPartyLicenses/. Every release is audited to fail rather than ship unused copyleft components or omit a license text.

Ollama, hosted model providers, and model weights are not distributed with Locus and are not covered by these notices. Locus only connects to services you configure; models you download remain under the licenses of their respective authors.