# Pricing & Source-Available Dual Licensing Specification: Blockstate (`blockstate`)

> **Document Schema**: Agent-Readable Procurement & Licensing Specification (`pricing.md`)
> **Package**: `blockstate` (PyPI) | **Supported Runtime**: Python 3.12, 3.13, 3.14
> **Licence Name**: Blockstate Source-Available & Commercial Dual Licence (Version 1.0, October 2026)
> **Statutory Patent Notice**: UK Patent Pending: *"Process execution control system"*, filed 28 October 2026 under Section 62(1) UK Patents Act 1977 & 35 U.S.C. § 287 (international Paris Convention priority rights reserved)
> **Currency**: GBP (£) | **Billing Cadence**: Annual Subscription (for Commercial Production Tiers)

---

## 1. Licensing Model Overview

Blockstate is distributed under a **Source-Available Dual Licence** (`LICENSE` v1.0). It is not licensed under MIT or Apache-2.0. The licensing model separates zero-friction developer adoption, CI verification, and staging evaluation from commercial production deployment:

1. **Free Community, Development & 90-Day Evaluation Tier (`LICENSE` Section 1)**: Zero-cost (£0) conditional copyright licence and narrow, revocable patent covenant for local development, academic research, automated CI/CD verification (`blockstate check` and `blockstate verify`), and up to 90 days of internal non-production enterprise staging evaluation.
2. **Paid Commercial Production & Patent Licence Tiers (`LICENSE` Section 2)**: Required for any live commercial production deployment processing customer, financial, insurance, healthcare, telecommunications, or enterprise operational transactions, or for any managed cloud / SaaS offering.

---

## 2. Structured Tier Comparison

### Tier 1: Community, Development & 90-Day Evaluation Tier
- **Price**: £0 / year (Free)
- **Governing Clause**: `LICENSE` Section 1 (Permitted Purposes)
- **Permitted Environments**: Local developer workstations, academic research clusters, open-source CI/CD runners, and internal non-production enterprise staging environments (up to 90 days evaluation window).
- **Production Transactions Permitted**: 0 (Non-production only)
- **Included Capabilities**:
  - Full source code access and inspection
  - Declarative Control Grammar (`@Stage`, `@Transition`, `@Guard`) and static AST compiler (`blockstate check`)
  - Lengauer-Tarjan dominator tree verifier (`blockstate verify`) and topology exporter (`blockstate export`)
  - `ToolGatekeeper` (`types.MappingProxyType`), `TaskStack` pushdown automaton, and recursive `PartialSlotModel` delta-hydration
  - Checksum-verified `PIIVault` (`AES-256-GCM` AAD), `Detokenise[T]`, and RFC 8785 JCS SHA-256 `TurnLedger`
  - `InMemoryStorageBackend` and `SQLiteStorageBackend` (`PRAGMA journal_mode=WAL`)
  - Narrow, revocable patent covenant strictly while operating within `LICENSE` Section 1

### Tier 2: Standard Team Commercial Production Tier
- **Price**: £18,000 / year (billed annually)
- **Governing Clause**: `LICENSE` Section 2 (Commercial Enterprise & Patent Licence Agreement)
- **Permitted Environments**: Unlimited development, CI/CD, and staging environments + up to **3 live commercial production statechart enclaves**
- **Included Capabilities**:
  - Everything in the Evaluation Tier, plus:
  - **Commercial Production Copyright & Patent Licence Grant** under UK Patent Application *"Process execution control system"* (filed 28 October 2026) and international Paris Convention / PCT counterparts
  - Production `PostgresStorageBackend` (`SQLAlchemy[asyncio]` + `asyncpg`) with fenced session leases (`BLK-CON-409`), `SessionLeaseHeartbeat`, Compare-And-Swap (`BLK-STO-002`), and `SchemaUpcaster` rolling migrations
  - Signed CycloneDX Software Bill of Materials (SBOM) and CI Dominator Verification Certificate templates
  - Next-business-day engineering support and security patch SLA

### Tier 3: Regulated Enterprise Production & Patent Licence Tier
- **Price**: £48,000 / year (billed annually)
- **Governing Clause**: `LICENSE` Section 2 (Commercial Enterprise & Patent Licence Agreement)
- **Permitted Environments**: **Unlimited internal live commercial production statechart enclaves** across all business units
- **Included Capabilities**:
  - Everything in the Standard Team Tier, plus:
  - Enterprise-wide Commercial Production & Patent Licence Grant for unlimited internal workflows
  - Complete **MRM & CISO Compliance Approval Pack** mapped clause-by-clause to UK FCA SYSC 13.7, FCA Consumer Duty (PS22/9), Bank of England PRA SS1/23, EU AI Act Articles 9/12/14/15, HIPAA Safe Harbor, UK/EU GDPR Articles 25 & 32, and OWASP LLM Top 10 (2025)
  - S3 Object Lock (WORM) `TurnLedger` archival adapter (`aioboto3`) and OpenTelemetry GenAI 1.30 span integration support
  - Dedicated architectural review session with your Model Risk Management (MRM) and CISO review board
  - Priority 4-hour severity-1 security response SLA

### Tier 4: OEM, Managed Cloud & SaaS Embedding Tier
- **Price**: Custom annual agreement (starting from £75,000 / year based on tenant volume)
- **Governing Clause**: `LICENSE` Section 2(b)
- **Permitted Scope**: Hosting, embedding, or providing Blockstate to third-party customers as part of a commercial SaaS platform, API gateway, or managed compliance-as-a-service offering.

---

## 3. Third-Party Dependency Supply-Chain Governance (CycloneDX SBOM)

Every runtime and optional third-party dependency in `blockstate` is audited in CI to ensure 100% permissive licensing with **0% copyleft (`GPL` / `AGPL` / `LGPL`) risk**:

| Component Layer | Packages | SPDX Licences | Copyleft Risk |
| :--- | :--- | :--- | :--- |
| **Core Runtime & InMemory Backend** | `python` (`3.12+`), `pydantic`, `pydantic-settings`, `cryptography`, `typer`, `rich` | `PSF-2.0`, `MIT`, `Apache-2.0 / BSD-3-Clause` | **None (0%)** |
| **Model & Classifier Extras** | `pydantic-ai-slim`, `litellm` (`<1.107.0`), `onnxruntime` | `MIT` | **None (0%)** |
| **v1 StorageBackend & Ledger Extras** | `aiosqlite` (SQLite WAL), `SQLAlchemy` + `asyncpg` (PostgreSQL), `aioboto3` (S3 WORM) | `MIT`, `Apache-2.0` | **None (0%)** |
| **Observability Extra** | `opentelemetry-api`, `opentelemetry-sdk` | `Apache-2.0` | **None (0%)** |