Open-Source-Lizenzen, GPL-Auswirkungen und Third-Party Notices

package at.aydinsude.enterprise.v5.sketch;

import java.time.Instant;
import java.util.List;
import java.util.Map;

// Pattern: Policy Object - kapselt eine wiederverwendbare Architekturregel.
// Pattern: Strategy - unterschiedliche Projektsituationen können andere Bewertungen liefern.
public final class LicenseReviewRule {
    public ArchitectureDecision evaluate(ArchitectureContext context) {
        int risk = context.businessCriticality() + context.integrationCount() + context.operationalComplexity();
        String action = risk >= 9 ? "formal-review" : risk >= 5 ? "lightweight-adr" : "team-standard";
        return new ArchitectureDecision(action, risk, Instant.now(), List.of(
                "document trade-offs",
                "add automated evidence",
                "define rollback or recovery path"));
    }

    public record ArchitectureContext(int businessCriticality, int integrationCount, int operationalComplexity, Map<String, String> tags) {}
    public record ArchitectureDecision(String action, int riskScore, Instant decidedAt, List<String> evidence) {}
}

# open-source-lizenzen-gpl-auswirkungen-und-third-party-notices.yaml
owner: enterprise-architecture
chapter: 102
risk_level: senior
evidence_required:
  - adr
  - architecture-test
  - runbook
  - monitoring-dashboard
review:
  cadence: quarterly
  escalation: architecture-board