The real core ships. The exact license is still being decided.
Whichever license is finalized — AGPL, BSL, Elastic, or Apache are under consideration — three commitments hold regardless: the real core ships, not a reduced one; TruSecure's proprietary private inference is never bundled into it; and the full license terms are published here, not buried in a click-through EULA.
The candidates, honestly stated
| Model | What it buys | What it costs |
|---|---|---|
| AGPL | Strongest protection of openness — network use triggers source obligations | Some enterprises exclude AGPL outright, narrowing adoption |
| BSL | Source-available with a dated conversion to an open license | Not open source until it converts; community trust to earn |
| Elastic | Proven template for open-core infrastructure with managed-service economics | Carries the baggage of its history with cloud providers |
| Apache | Maximum adoption and enterprise comfort, patent grant included | Weakest protection against closed derivatives of the core |
The decision will be made on substance, not fashion: which model keeps the control library and framework packs genuinely open as they grow, lets self-hosters and contributors build on the core without legal ambiguity, and sustains the commercial model that funds the work. When the choice is made, this page states it and links the full license text — and if the reasoning above was wrong somewhere, the correction will be visible too.
Until then, nothing on this site should be read as pre-committing to any of the four. "Pending" is a status, not a euphemism.