SnapOtter/tests/fixtures/LICENSES.md

Fixture Provenance & Licensing

All fixtures in tests/fixtures/ must have verified provenance before the Phase 2 licensing hard gate. Only CC0, CC-BY, CC-BY-SA, and public-domain assets are permitted in the final registry.

Verified Assets

Path	License	Source	Author
(none yet -- Phase 2 audit populates this table)

Synthetic / Project-Generated Assets

The following were generated by project scripts or test infrastructure and carry no third-party copyright concern:

• Root synthetics: test-200x150.png, test-100x100.jpg, test-50x50.webp, test-100x100.svg, test-200x150.heic, test-1x1.png, test-blank.png, test-portrait-tall.png, test-portrait-extreme.png, test-with-exif.jpg, test-scene.png, test-fake-transparency.png, test-3page.pdf
• media/tiny.* (29 formats), documents/tiny.* (17 formats), data/tiny.* (9 formats)
• hostile/* (generated via scripts/generate-hostile-fixtures.mjs)
• security/* (SVG XXE test vectors)
• formats/sample.* (format samples, 35 files)

Provenance Unverified -- Replace in Phase 2

The following content/ heroes have UNVERIFIED license status in manifest.json. Phase 2 will either verify their provenance (CC0/CC-BY source) or replace them with properly-licensed alternatives:

• content/alt-2page.pdf
• content/animated-simpsons.gif
• content/audio-with-tags.mp3
• content/barcode.avif
• content/barcode.png
• content/cross-format-chat.webp
• content/media-30s.mp4
• content/media-30s.wav
• content/motorcycle.heif
• content/multi-face.webp
• content/multipage-6.pdf
• content/ocr-chat.jpeg
• content/ocr-clean.png
• content/ocr-japanese.png
• content/ocr-scanned.pdf
• content/portrait-bw.jpeg
• content/portrait-color-dup.jpg
• content/portrait-color.jpg
• content/portrait-headshot.heic
• content/portrait-isolated.png
• content/qr-code.avif
• content/qr-code.png
• content/qr-code.svg
• content/red-eye.jpg
• content/speech-10s.mp4
• content/speech-10s.wav
• content/stress-large.jpg
• content/svg-logo.svg
• content/video-with-meta.mp4
• content/watermark.jpg