Licensing and Attribution
Different parts of this repository have different licensing and provenance. These grants apply only to material for which Security Level 5 owns the rights.
Standard prose and figures
SL5-authored prose and figures are licensed under CC BY 4.0. Use the citation metadata published by this repository and identify modifications. The linked arXiv record and DOI provide persistent publication identifiers.
Code
Repository software, including the website and build scripts, is licensed under the Apache License 2.0.
OSCAL profile and data
SL5-authored OSCAL selections, parameter assignments, and supplemental guidance are licensed under CC BY 4.0. This grant does not relicense imported or transcribed NIST material.
NIST material
NIST-authored publication and catalog text is United States Government work and is treated according to the NIST public-domain and attribution notice. The checked-in SP 800-53 catalog snapshot comes from a pinned commit of the NIST oscal-content repository, whose license dedicates it to the public domain under CC0.
The local SR-13 OSCAL transcription identifies two editorial normalizations in its metadata. NIST SP 800-161 Rev. 1 Update 1 remains authoritative. NIST does not endorse this profile.
Legal review
This notice records the repository's intended license boundaries; it is not legal advice. Counsel should confirm the final distribution terms, especially for bundles that combine SL5-authored and NIST-derived content.