From acb812baa585300d062918599ed97068464488cc Mon Sep 17 00:00:00 2001
From: Nikolay Govorov <me@govorov.online>
Date: Fri, 24 Jul 2026 00:15:36 +0100
Subject: Add script for check licenses layout

---
 README.md      | 29 ++++++++---------------------
 tasks/licenses |  9 +++++++++
 2 files changed, 17 insertions(+), 21 deletions(-)
 create mode 100755 tasks/licenses

diff --git a/README.md b/README.md
index c99689b..8c8706a 100644
--- a/README.md
+++ b/README.md
@@ -8,29 +8,11 @@ Projects include `tasks/` with
 By default, tasks are fetched directly from this public repository over HTTPS:
 
 ```console
-mise run --no-cache signoff
+mise run signoff
+mise run licenses
 ```
 
-`--no-cache` makes a mutable branch such as `main` resolve to its latest commit.
-
-To test a dirty sibling checkout of this repository, use the `infra-local`
-environment provided by each project:
-
-```console
-mise -E infra-local run --no-cache signoff
-```
-
-For several commands, keep the environment selected in the current shell:
-
-```console
-export MISE_ENV=infra-local
-mise run --no-cache signoff
-# Run other tasks against the local infra checkout.
-unset MISE_ENV
-```
-
-The local environment resolves `../infra/tasks` relative to the project root;
-the default environment always resolves the public HTTPS repository.
+Consuming projects pin this repository by commit SHA.
 
 ## Sign-off policy
 
@@ -46,6 +28,11 @@ the default environment always resolves the public HTTPS repository.
 Approved emails are maintained centrally so a pull request in a consuming
 repository cannot grant itself an exemption.
 
+## Licensing policy
+
+`tasks/licenses` runs a pinned REUSE version and verifies the repository's
+licensing metadata.
+
 ## License
 
 Executable tasks and their configuration are licensed under 0BSD.
diff --git a/tasks/licenses b/tasks/licenses
new file mode 100755
index 0000000..17d7176
--- /dev/null
+++ b/tasks/licenses
@@ -0,0 +1,9 @@
+#!/bin/sh
+# SPDX-FileCopyrightText: 2026 Nikolay Govorov
+# SPDX-License-Identifier: 0BSD
+#MISE description="Verify repository licensing metadata"
+#MISE tools={"pipx:reuse"="6.2.0"}
+
+set -eu
+
+reuse lint
-- 
Gilti