license: ban Anduril Industries via custom license with entity exclusion

[markovejnovic]

Summary

• Replace dual MIT/Apache-2.0 license with a custom license based on MIT grant structure
• Add Excluded Entities clause that explicitly bans Anduril Industries, Inc. (including subsidiaries, affiliates, successors, contractors acting on their behalf)
• Includes patent grant (from Apache-2.0), severability clause, and governing law provision
• Update all Cargo.toml files to use license-file (custom license has no SPDX identifier)
• Update hsrs-haskell cabal file license field to NONE
• Update README to reflect new license status

Legal mechanism

Copyright holder sets terms for the license grant. The Excluded Entities clause voids the grant for Anduril — any use by them constitutes copyright infringement. Broad corporate-veil language covers subsidiaries, affiliates, successors, assigns, and intermediaries.

Trade-offs

• No longer OSI "open source" — entity discrimination violates OSI criteria 5 & 6. Project is now "source-available"
• Prior versions irrevocable — code already released under MIT/Apache-2.0 stays under those terms
• crates.io compatible — license-file is supported, just not an SPDX expression

Important

Consult an attorney before publishing a release under this license.

Test plan

• cargo check passes
• No stale MIT OR Apache-2.0 references in source files
• LICENSE-APACHE removed
• LICENSE and hsrs-haskell/LICENSE contain identical custom license text
• All Cargo.toml files use license-file = "../LICENSE"
• hsrs-haskell cabal file has license: NONE
• README updated with custom license description