# Licensing and dependency audit

Audit date: 2026-10-20. Apache-2.0 is selected for Neural Zero's integration
code and documentation after reviewing the pinned backend declaration and the
installed runtime distribution metadata. It does not relicense models,
dependencies, binaries or third-party material. No dependency binaries or
third-party weights are distributed here.

## Source and modifications

- Neural Zero Local Lab integration: copyright 2026 Neural Zero contributors,
  Apache-2.0; see `LICENSE`.
- [baisampayans/ltx-mlx](https://github.com/baisampayans/ltx-mlx):
  revision `0d884df6c5f086915e4ffdab950d914757c306f2` declares Apache-2.0 in
  [pyproject.toml](https://raw.githubusercontent.com/baisampayans/ltx-mlx/0d884df6c5f086915e4ffdab950d914757c306f2/pyproject.toml)
  and README. That revision has no standalone LICENSE or NOTICE file.
  Download its source separately. `backend.patch` carries explicit modification
  notices for RMSNorm and attention-mask compatibility. Original context in the
  patch remains attributable to the upstream authors.
- The numerical workers and bounded tensor loader were extracted from the
  validated local I2V experiment, with public path configuration and standalone
  file utilities. No production engine or full QA/supervision framework is bundled.

## Runtime dependencies

| Component | Verified version | Declared license |
|---|---|---|
| Python | 3.11.16 | PSF license |
| MLX / mlx-metal | 0.32.3 / 0.32.3 | MIT; retain installed Metal C++ notices |
| NumPy | 2.4.6 | BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0 |
| Pillow | 12.3.0 | MIT-CMU; installed wheel retains bundled library notices |
| SentencePiece | 0.2.2 | Apache-2.0 |
| ImageIO | 2.38.1 | BSD-2-Clause |
| imageio-ffmpeg Python wrapper | 0.6.0 | BSD-2-Clause; binary terms are separate |
| External FFmpeg | 9.0.2, GPL/version3/libx264 build | GPL v3 or later for this build |

`dependency-audit.json` records installed package metadata and license-file
locations relative to site-packages. ImageIO is retained because the upstream
package initializer imports its pipeline. The runner invokes the external
FFmpeg executable; it does not redistribute or use the imageio-ffmpeg bundled
executable. FFmpeg build options determine its applicable license; see
[FFmpeg legal information](https://ffmpeg.org/legal.html).
The integration license does not supersede installed wheel or codec notices.
Git and pip are user-supplied setup tools, not included distributions.

## Weights and tokenizer

- [Lightricks/LTX-Video](https://huggingface.co/Lightricks/LTX-Video),
  `ltxv-2b-0.9.8-distilled`: **LTXV Open Weights License 0.X**, not Apache-2.0.
  Read the [full terms](https://huggingface.co/Lightricks/LTX-Video/blob/main/LTX-Video-Open-Weights-License-0.X.txt),
  including use restrictions and commercial eligibility provisions.
- [Google T5v1.1-XXL](https://huggingface.co/google/t5-v1_1-xxl)
  declares Apache-2.0. The actual encoder/tokenizer files used here are downloaded
  from the official Lightricks repository, as specified by the pinned backend.
  Its encoder config identifies `google/t5-v1_1-xxl`. Exact files, revision
  and hashes are recorded in `weights.lock.json`.
- No original weights, converted BF16/Q8 weights, embeddings or latent tensors
  are included. Local conversion does not replace their underlying terms.

## Example media

`examples/input.png` is an original procedural fixture created for this release:
plain rectangles and ellipses, no external images, typography, logos or likenesses.
`examples/result.mp4` is the actual LTX inference output from that fixture,
identified by the benchmark SHA-256. These example assets are offered under
Apache-2.0 to the extent rights exist; model-use conditions still apply.
Lightricks' output clause does not claim rights in generated outputs, subject to
the agreement. The older project HERO/CHAMPION assets and their derived clip are
not redistributed because their input-asset license chain was not established
for this release.