# Licensing and assent

## Human assent comes first

- A human customer must accept a service's terms before an agent uses it.
- Reading these documents, fetching manifests or visiting pages never accepts terms,
  authorises spending or grants data rights.
- Agent requests, headers and crawls are not acceptance.

## Rights status in a manifest (`rights.status`)

| Status | Meaning |
|---|---|
| `open_data` | Sources are published under open licences; attribution still applies. |
| `granted` | A written grant from the rights holder is recorded (`grant_ref`). |
| `grant_pending` | Not for sale. A grant has been requested but not recorded. |
| `unreviewed` | Not for sale. Source terms have not been reviewed. |

## Using results

- Preserve the attribution listed in `rights.attribution` and per source in `data.sources`.
- Respect `rights.prohibited_uses`.
- Do not redistribute, resell or use results for model training unless the service's
  rights section explicitly permits it.
- An open licence on one source does not cover a whole service.
- Respect corrections and withdrawals; do not keep presenting withdrawn data as current.

## Understanding UK company source provenance

[Live profiles, observed evidence and freshness: UK company data provenance](https://www.niftibot.com/assets/uk-company-data-provenance.html) explains the coverage boundary and how to request a provenance walkthrough.
