# ADR-004: Dependency and licensing model

Status: accepted

Dependencies will be pinned by exact source revision and SHA-256, built through
scripts, and recorded with configure flags and licence impact. FFmpeg nonfree
components are prohibited. Distribution licensing remains GPL-2.0-or-later,
subject to legal review.
