NOTICES.md

Third-Party Notices — SZL Holdings Flagships

Doctrine v11 LOCKED 749/14/163 | SLSA L1 honest | Generated: 2026-06-03

This file contains notices for third-party libraries used by SZL Holdings flagships.

Python Dependencies

FastAPI

• License: MIT
• Source: https://github.com/tiangolo/fastapi
• Usage: API framework for all 5 flagships

Gradio

• License: Apache-2.0
• Source: https://github.com/gradio-app/gradio
• Usage: UI framework for HuggingFace Spaces

Uvicorn

• License: BSD-3-Clause
• Source: https://github.com/encode/uvicorn
• Usage: ASGI server

httpx

• License: BSD-3-Clause
• Source: https://github.com/encode/httpx
• Usage: HTTP client for inter-flagship calls

huggingface_hub

• License: Apache-2.0
• Source: https://github.com/huggingface/huggingface_hub
• Usage: HuggingFace API access

Infrastructure Components

UDS Core (Defense Unicorns)

• License: Apache-2.0
• Source: https://github.com/defenseunicorns/uds-core
• Usage: Kubernetes security baseline (UDS deployment)

Zarf (Defense Unicorns)

• License: Apache-2.0
• Source: https://github.com/zarf-dev/zarf
• Usage: Airgap packaging

Pepr (Defense Unicorns)

• License: Apache-2.0
• Source: https://github.com/defenseunicorns/pepr
• Usage: Kubernetes admission webhook

Mathematical Libraries

Lean 4 (Lean FRO / Microsoft Research)

• License: Apache-2.0
• Source: https://github.com/leanprover/lean4
• Usage: Formal verification substrate (lutar-lean)

Mathlib4

• License: Apache-2.0
• Source: https://github.com/leanprover-community/mathlib4
• Usage: Mathematical library for Lean 4

Frontend Routing Visualization (clean-room — concept attribution)

The a11oy console llm tab (console/static/viz/router/) implements a graph-based LLM router visualization. The implementation is clean-room: no third-party source code is copied or bundled. The design follows the published concept of edge-weighted query/task↔model routing graphs introduced by the following open projects, attributed here in good faith:

GraphRouter

• License: MIT
• Source: https://github.com/ulab-uiuc/GraphRouter
• Usage (concept only): graph-based, inductive LLM routing over query/task/model nodes — inspiration for the bipartite affinity-graph layout and edge weighting. No code copied.

Router-R1

• License: Apache-2.0
• Source: https://github.com/ulab-uiuc/Router-R1
• Usage (concept only): treating routing as a multi-round reasoning graph — inspiration for the per-task fan-out / top-K edge selection. No code copied.

LLMRouter

• License: MIT
• Source: https://github.com/lm-sys/RouteLLM
• Usage (concept only): cost/quality trade-off across a model pool — inspiration for the transparent quality×ctx×cost×license edge-affinity weight. No code copied.

All edge-affinity scores are heuristic, computed locally from public model-card features (declared benchmark/context/license), and are labelled in-UI as heuristic (not measured online benchmarks). No routing data is fabricated.

three.js

• License: MIT
• Source: https://github.com/mrdoob/three.js
• Usage: 3D rendering for the routing-graph and other console viz pages (r171).

Section 889 Declaration

SZL Holdings does NOT use equipment or services from:

• Huawei Technologies Company
• ZTE Corporation
• Hytera Communications
• Hangzhou Hikvision Digital Technology Company
• Dahua Technology Company

This notice is provided in compliance with Section 889 of the 2019 NDAA.

Signed-off-by: Yachay yachay@szlholdings.ai
Co-Authored-By: Perplexity Computer Agent agent@perplexity.ai