Skip to main content

Licensing & notices

Kaizen runs as a Kamiwaza extension. The platform requires EULA acceptance at installation; without it, the installation cannot proceed. The agreement is at https://www.kamiwaza.ai/eula-license. Kamiwaza Core alone verifies the cluster's signed license at startup. Kaizen does not check entitlement, relay Core's verdict, or display license warnings.

An image entry-point check for EULA acceptance is not active in these images. The platform must first provide a shared gate and inject KAMIWAZA_EULA_ACCEPTED=true from the accepted installation setting into every affected workload. Neither a Dockerfile nor Kaizen's Compose file may set that value to true by default. Standalone operators will have to opt in explicitly once the gate ships.

Distribution notices​

Each of Kaizen's nine release images copies /licenses/ from the same private, digest-pinned kamiwaza-licenses image published by containers. The bundle contains:

  • KAMIWAZA-EULA.md, which points to the governing EULA text.
  • THIRD-PARTY-NOTICES.md, which describes third-party and Chainguard content.
  • LICENSE-Apache-2.0.txt, which contains the Apache License 2.0 text.

Developers building images locally need an account with read access to the private containers package; run docker login ghcr.io before building. The release workflow can already read the package. Keep credentials outside Git.

Kaizen does not vendor the source notices. Each final Dockerfile stage ends with COPY --from=kamiwaza-licenses --chmod=a=rX /licenses/ /licenses/, leaving the directory searchable and its files readable for non-root users. Images also carry org.opencontainers.image.licenses and ai.kamiwaza.notice.third-party labels pointing to the in-image notices; the release workflow supplies the Chainguard notice label.

make ci-validate checks the literal digest-pinned source and final copy; it does not inspect built image bytes. Release maintainers with access to the private source audit each published image digest for both architectures against the canonical bundle. Cluster administrators can inspect the published image digest, those OCI labels, and /licenses/ in the image they run. A notice is not license entitlement or proof of EULA acceptance.