NOTICES.md

Third-Party Notices — SZL Holdings Flagships

Doctrine v11 LOCKED 749/14/163 | SLSA L1 honest | Generated: 2026-06-03

This file contains notices for third-party libraries used by SZL Holdings flagships.

Python Dependencies

FastAPI

• License: MIT
• Source: https://github.com/tiangolo/fastapi
• Usage: API framework for all 5 flagships

Gradio

• License: Apache-2.0
• Source: https://github.com/gradio-app/gradio
• Usage: UI framework for HuggingFace Spaces

Uvicorn

• License: BSD-3-Clause
• Source: https://github.com/encode/uvicorn
• Usage: ASGI server

httpx

• License: BSD-3-Clause
• Source: https://github.com/encode/httpx
• Usage: HTTP client for inter-flagship calls

huggingface_hub

• License: Apache-2.0
• Source: https://github.com/huggingface/huggingface_hub
• Usage: HuggingFace API access

Infrastructure Components

UDS Core (Defense Unicorns)

• License: Apache-2.0
• Source: https://github.com/defenseunicorns/uds-core
• Usage: Kubernetes security baseline (UDS deployment)

Zarf (Defense Unicorns)

• License: Apache-2.0
• Source: https://github.com/zarf-dev/zarf
• Usage: Airgap packaging

Pepr (Defense Unicorns)

• License: Apache-2.0
• Source: https://github.com/defenseunicorns/pepr
• Usage: Kubernetes admission webhook

Mathematical Libraries

Lean 4 (Lean FRO / Microsoft Research)

• License: Apache-2.0
• Source: https://github.com/leanprover/lean4
• Usage: Formal verification substrate (lutar-lean)

Mathlib4

• License: Apache-2.0
• Source: https://github.com/leanprover-community/mathlib4
• Usage: Mathematical library for Lean 4

Section 889 Declaration

SZL Holdings does NOT use equipment or services from:

• Huawei Technologies Company
• ZTE Corporation
• Hytera Communications
• Hangzhou Hikvision Digital Technology Company
• Dahua Technology Company

This notice is provided in compliance with Section 889 of the 2019 NDAA.

Signed-off-by: Yachay yachay@szlholdings.ai
Co-Authored-By: Perplexity Computer Agent agent@perplexity.ai