legal batch: LEGAL footers + self-hosted fonts + license owner, and the sidecar-exchange first-contact consent gate

[borisbat]

Behavior change: the first dasLLAMA server boot on an unconfigured box now asks once before contacting dasllama.io. Until a choice is recorded, nothing leaves the box and it tunes locally.

Gaijin legal reviewed daslang.io and dasllama.io. This branch lands everything actionable from that review. Both sites and the docs get a LEGAL footer block (Terms of Service, Privacy Policy, the BSD-3 license). Google Fonts is gone: Inter Tight and JetBrains Mono are vendored as variable woff2 per site and in the docs static tree, so no visitor request reaches Google. The GitHub LICENSE names the legal entity, Gaijin Games Kft.; site footers keep the Gaijin Entertainment brand. Disqus is removed from the blog - zero comments over its whole history, and it was the one cookie-setting embed.

The sidecar exchange gets a first-contact consent gate. The lookup sends the box identity (platform, CPU model, OS build - hardware-class data, no serials or user names), and legal asked for an Accept/Decline step before the first request. An explicit exchange_* key in a hand-written config or the environment is itself the expressed choice, and the boot announces which knob expressed it. A control-page-written (authoritative) config does not count - the page persists exchange defaults on every save. With no expressed choice, a real terminal asks inline; a supervised boot emits @sidecar consent state=needed, the watchdog raises a native Accept/Decline dialog, and the control page carries the same banner (POST /exchange/consent). Accept mid-tune rides the existing DAS_TUNE_CONTROL stop rail: abort at the kernel-family boundary (minting is end-gated, nothing is written), relaunch, run the lookup. The notice wording is a placeholder until legal delivers the final text.

The "~20 minutes" tune claim is re-stated as ~12 min from a measured first boot, everywhere it appears.

Where to look: modules/dasLLAMA/dasllama/dasllama_exchange.das (exchange_may_contact is the whole decision), utils/watchdog/watchdog.py (dialog + the consent stop mode), utils/dasllama-server/openai_server.das (handle_exchange_consent), control.html (banner + the always-share toggle now records consent), .github/workflows/pages.yml (the dasllama.io staging cp is now recursive - the fonts subdirectory would have failed the deploy).

Validation, claims, ledger

Validation

• Playground Playwright suite: 52 passed, 0 failed, run with --grep-invert '@wasm' (the per-PR lane's filter) against the checked-in runtime artifacts; the diff's modules/ touch (dasLLAMA) is not part of the playground WASM runtime.
• run.das -- --suite model-free: green end to end (the runner tees full logs; test_tune_interrupt 4/4 inside it).
• test_exchange_client.das (dastest): 28 passed, 0 skipped - download gate, privacy strip, submit rails, and the consent additions; the consent gate is mutation-controlled (deleting it reds the suite).
• Control-page Playwright suite: 106 passed against the RE-CAPTURED /exchange fixture (a real zero-config boot; carries consent/consent_notice/policy.configured).
• Watchdog pytests: 8 passed on darwin/arm64; the Linux run is this PR's extended_checks step.
• End-to-end consent proof on macOS server boots: unconsented non-TTY boot emits the consent event with zero lookup lines; a recorded "accepted" runs the lookup.
• The ~12 min figure: one measured first boot, M1 Max, 2026-08-28 - 11:46 wall including cold JIT codegen, the kernel race (40 families raced of 42 planned), re-exec, and model load; quiet box (noise probe cv 0.32%). Recorded here as the number's provenance.
• Two files took review fixes after the mechanical chain launched (dasllama_exchange.das, performance/REVIEW.md); the delta was revalidated with targeted gates (compile, lint, format --verify, the 28-test suite) rather than a second full preflight.
• Known-red, with its control: preflight --full failed its three test gates on 5 pre-existing failures in tests/mcp/ (test_popen_argv_pipe, test_mcp_jsonrpc) - deterministic on this box, byte-identical test files vs master, a binary built before this branch existed, and a diff that touches no src/, daslib/, utils/mcp, or tests/mcp path. The other 17 gates passed.
• External reviewer rounds: round 1 found the authoritative-toml consent bypass (fixed and negative-controlled); round 2 on the fixed tip reported no findings.

Claims - stated, not tested

• The resolver wiring (exchange_scope_resolver calling exchange_may_contact) is proven by the e2e boots above; the composed decision is unit-tested, the private call site is not.
• The @sidecar consent event's producer side is verified in the e2e transcripts only; the watchdog consumer side is unit-tested.
• Env-expressed consent (DASLLAMA_EXCHANGE_URL/_ACCEPT setting configured) is unpinned in-process (load-once env); the TOML arms are tested per key, and the e2e announce line covers the env arm.
• /exchange/consent handler branches (loopback guard, bad-body, the restart condition) have no route-level test - the guard is the is_loopback_req pattern every operator route shares, none of which do.
• The Windows arms are untested on Windows: the MessageBoxW dialog (mocked at the seam), the set "VAR=" spellings in test_tune_interrupt, and the pipe-handle behavior of is_terminal under a supervisor. A false-positive TTY probe under a supervisor would block the boot; proven not to on darwin only.
• test_tune_interrupt ran on macOS only; its cells are platform-guarded, not skip-armed.

Not done

• EXCHANGE_CONSENT_NOTICE (das), CONSENT_TEXT (watchdog), and the captured fixture carry PLACEHOLDER wording - Gaijin legal delivers the final text; the copy-sync duty is performance/REVIEW.md's new rule.
• A machine check of the notice-copy sync (a REVIEW.das comparing the das and Python constants) - recommended by the review round, not built.
• The repo-root dasllama.tune.json (an old-format relic) is untouched, awaiting a ruling.

🤖 Generated with Claude Code

[Copilot]

Pull request overview

This PR applies a legal/compliance batch across daslang.io + dasllama.io + docs, and introduces a first-contact consent gate for dasLLAMA’s sidecar-exchange so an unconfigured box won’t contact dasllama.io until the operator explicitly accepts/declines once.

Changes:

• Add a GDPR-style first-contact consent decision path for the sidecar exchange across the boot resolver, watchdog (native dialog), and control page (POST /exchange/consent), plus tests/fixtures.
• Self-host Inter Tight / JetBrains Mono (remove Google Fonts), and add LEGAL footer blocks (Terms/Privacy/License) across sites and Sphinx docs; remove Disqus from the blog.
• Update review checklists + CI staging (recursive copy for dasllama.io files/ subdirs) and refresh various “~20 min” claims to “~12 min”.

Reviewed changes

Copilot reviewed 54 out of 114 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
web/examples/ui/REVIEW.md	Adds a Playwright-run reporting rule for runtime-path changes in UI samples.
utils/watchdog/watchdog.py	Implements supervised-session consent dialog handling and a non-sticky “consent” stop mode.
utils/watchdog/test_consent.py	Adds unit tests for consent event folding, stop-mode semantics, and dialog dispatch.
utils/watchdog/README.md	Documents the new @sidecar consent event and its watchdog handling.
utils/REVIEW.md	Clarifies cross-tool checklist applicability and consent-wording checklist linkage.
utils/dasllama-server/tests/fixtures/exchange.json	Updates captured /exchange fixture to include consent and configured fields.
utils/dasllama-server/tests/consent.spec.js	Adds Playwright coverage for the control-page consent banner and POST flow.
utils/dasllama-server/test_exchange_client.das	Adds dastest coverage for policy configured-flag and consent gating/recording.
utils/dasllama-server/REVIEW.md	Tightens fixture capture rule and aligns route/fixture expectations for tests/control page.
utils/dasllama-server/README.md	Documents new /exchange/consent endpoint and first-contact consent behavior.
utils/dasllama-server/openai_server.das	Adds /exchange/consent handler; records consent when applying a sidecar.
utils/dasllama-server/main.das	Updates startup comments to reflect ~12 minute tuning figure.
utils/dasllama-server/control.html	Adds consent banner UI + POST handler; records consent when enabling always-share.
site/REVIEW.md	Narrows the Playwright evidence rule and updates runtime-artifact scope list.
site/README.md	Removes Disqus reference from blog behavior description.
site/playground/placeholder.html	Switches to self-hosted fonts CSS.
site/playground/index.html	Switches to self-hosted fonts CSS.
site/performance.html	Switches to self-hosted fonts CSS and adds legal footer column.
site/index.html	Switches to self-hosted fonts CSS and adds legal footer column.
site/files/forge.css	Removes Disqus styling and expands footer grid for legal links.
site/files/fonts/fonts.css	Adds local @font-face rules for self-hosted fonts.
site/examples.html	Switches to self-hosted fonts CSS and adds legal footer column.
site/downloads.html	Switches to self-hosted fonts CSS and adds legal footer column.
site/daspkg.html	Switches to self-hosted fonts CSS and adds legal footer column.
site/dasllama.html	Switches to self-hosted fonts CSS and adds legal footer column.
site/blog/template.html	Switches blog template to self-hosted fonts CSS and adds legal footer column.
site/blog/build_blog.py	Removes Disqus embed generation from blog build.
site/benchmarks.html	Switches to self-hosted fonts CSS and adds legal footer column.
site-dasllama/sidecars.html	Switches to self-hosted fonts, updates ~12 min copy, adds legal footer column.
site-dasllama/REVIEW.md	Strengthens provenance requirements for numbers and adds deploy-step verification rule.
site-dasllama/ladder.html	Switches to self-hosted fonts and adds legal footer column.
site-dasllama/index.html	Switches to self-hosted fonts and adds legal footer column.
site-dasllama/files/fonts/fonts.css	Adds local @font-face rules for self-hosted fonts on dasllama.io.
site-dasllama/files/dasllama-io.js	Updates the empty-state tuning duration copy to ~12 min.
site-dasllama/files/dasllama-io.css	Expands footer grid for legal links column.
modules/dasLLAMA/tests/test_tune_interrupt.das	Adds end-to-end test for the supervisor stop rail via child process.
modules/dasLLAMA/tests/run.das	Registers the new tune-interrupt test in the suite list.
modules/dasLLAMA/tests/_interrupt_probe.das	Adds probe program used by the tune-interrupt test.
modules/dasLLAMA/REVIEW.md	Clarifies architecture-doc indexing, override announce scope, and stdin-prompt ban.
modules/dasLLAMA/performance/REVIEW.md	Adds explicit “consent wording sync” and exchange_may_contact routing rules.
modules/dasLLAMA/ENVIRONMENT.md	Documents env vars as an expressed exchange-consent choice.
modules/dasLLAMA/dasllama/dasllama_exchange.das	Implements consent state file, console prompt, @sidecar consent event, and exchange_may_contact.
modules/dasLLAMA/dasllama/dasllama_env.das	Updates env knob docs to reflect consent-skipping behavior.
modules/dasLLAMA/ARCHITECTURE_MEASUREMENT.md	Defines boundary for “override announce” rule (timing knobs vs numeric-impact knobs).
modules/dasLLAMA/ARCHITECTURE_ENGINE.md	Documents consent gate behavior in engine architecture doc.
LICENSE	Updates copyright owner to “Gaijin Games Kft.”
install/README.md	Updates license/copyright line to match LICENSE header.
doc/source/reference/utils/dasllama_server.rst	Documents new /exchange/consent endpoint.
doc/source/_templates/layout.html	Adds LEGAL links block to every docs page footer.
doc/source/_static/fonts/fonts.css	Adds local @font-face rules for docs self-hosted fonts.
doc/source/_static/custom.css	Switches from Google Fonts import to local fonts and styles legal links block.
.github/workflows/REVIEW.md	Tightens gate-step failure requirements and adds “state a local run” rule.
.github/workflows/pages.yml	Fixes dasllama.io staging to copy files/ recursively (for fonts subdir).
.github/workflows/extended_checks.yml	Adds watchdog consent tests to extended_checks lane.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 54 out of 114 changed files in this pull request and generated no new comments.

Suppressed comments (2)

Previously missed (2) — in code that hasn't changed since the last review.

utils/watchdog/watchdog.py:702

• handle_consent_needed writes the consent file using Path(path_text) directly. If the consent path is relative (common when the child emits main.tune.consent), this resolves against the watchdog process CWD, not --cwd (the child’s working directory). Running the watchdog from another directory (e.g. python /abs/path/watchdog.py) can therefore record consent into the wrong location and leave the real gate unanswered, causing repeated prompts.
  utils/dasllama-server/control.html:2376
• When /exchange/consent replies with restarting:true, postConsent immediately calls loadExchange(). In a real restart this fetch will often fail (server is draining), and the catch in loadExchange overwrites the user-facing status with could not load /exchange, hiding the intended “restarting…” message.