FOSS Contribution

Machine-readable governance for employee contribution to Free and Open Source Software, expressed with the Gemara model. Based on FINOS' Open Source Readiness Reference FOSS Policy.

Artifacts by layer

1DefineWhat good looks like

LexiconPrinciples CatalogVectors CatalogGuidance Catalog

2AssessWhat could go wrong and what would stop it

Capabilities CatalogThreats CatalogControls Catalog

3DecideWhat we accept and what we require

Risks CatalogPolicy

4OperateThe activity and resources being governed

Sensitive Activity

5EvaluateWhether the requirements are met

Eval · commons-lang PREval · internal-tools PR

6EnforceWhat happens when they are not

Enforce · internal-tools PR