From f036871111f0143ffa70afede1290826e8dc43d8 Mon Sep 17 00:00:00 2001
From: Keysat <licensing@keysat.xyz>
Date: Wed, 17 Jun 2026 16:40:24 -0500
Subject: [PATCH] Trim Start9 submission list to the prepare.sh gap

Icon-render and the source-available license are intentionally not blockers.
---
 AGENTS.md  | 13 ++++++-------
 ROADMAP.md | 10 +++++-----
 2 files changed, 11 insertions(+), 12 deletions(-)

diff --git a/AGENTS.md b/AGENTS.md
index 095b809..eba8265 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -95,10 +95,9 @@ Operator-specific memories at `~/.claude/projects/-Users-macpro-Projects-keysat/
 - `riscv` build target is unverified and not declared in the manifest; the wrapper `Makefile`
   now pins `ARCHES` to `x86 arm` so no target (even a bare `make`) attempts it. Revisit only if
   a riscv StartOS target appears.
-- StartOS Community Registry submission is **BLOCKED** (needs a `prepare.sh`; plus icon-render
-  and source-available-license questions to confirm with Start9) — detail in ROADMAP. Criteria
-  themselves still unpublished; reach out when ready.
-- Registry icon doesn't render in the StartOS marketplace (see `guides/startos-packaging.md`).
+- StartOS Community Registry submission — remaining gap is a `prepare.sh` for the clean-Debian
+  first build (plus the on-box manual verification); functional criteria otherwise pass. Detail
+  in ROADMAP. Submission criteria themselves still unpublished; reach out when ready.
 - Split `audit:read` out of the blanket `:read` scope into its own tier so a
   Read-only scoped key can read dashboards/licenses but NOT the full audit log
   (`api/api_keys.rs::Role::grants`). Deferred from the scoped-keys session.
@@ -125,9 +124,9 @@ Operator-specific memories at `~/.claude/projects/-Users-macpro-Projects-keysat/
   landing SDK snippets + tier-card fallback prices; docs change-tier example + install-step resequence;
   Makefile pins `ARCHES=x86 arm`. No daemon source touched.
 
-- **Start9 Community Registry: BLOCKED** — functional criteria pass; needs `prepare.sh` + icon-render +
-  source-available-license sign-off from Start9 (ROADMAP). (Note: `registry.keysat.xyz` works as a marketplace
-  on a Start9 box; a plain browser/curl GET 404s **by design** — no HTML page is served there. Not an outage.)
+- **Start9 Community Registry:** functional criteria pass; remaining gap is a `prepare.sh` for the clean-Debian
+  first build (+ on-box verification) (ROADMAP). (Note: `registry.keysat.xyz` works as a marketplace on a Start9
+  box; a plain browser/curl GET 404s **by design** — no HTML page is served there. Not an outage.)
 
 - **Next (priority):** 1) Operator data action (master key): grant `unlimited_merchant_profiles` to Pro/Patron
   on live master (steps in Open TODOs). 2) Delete registry-landing GitHub + Gitea remotes. 3) 3 multi-profile
diff --git a/ROADMAP.md b/ROADMAP.md
index e6e1319..982151f 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -32,11 +32,11 @@ Longer-term backlog. Near-term state lives in `AGENTS.md` → Current state.
 ## Packaging & distribution
 
 - Start9 Community Registry submission — a 2026-06-17 spec check found the wrapper passes the functional
-  criteria (manifest, interfaces, health check, backup/restore, BTCPay dep, actions) but submission is BLOCKED
-  on three items: (1) no `prepare.sh` to set up a clean Debian box for the first build (copy the one from
-  `hello-world-startos`); (2) the registry icon not rendering in the marketplace (may be operator-hosted-only —
-  confirm with Start9); (3) `LicenseRef-Keysat-1.0` is source-available but more restrictive than OSI — confirm
-  Start9 accepts it. Email Start9 on (2)+(3) before investing in (1). Submission criteria remain unpublished.
+  criteria (manifest, interfaces, health check, backup/restore, BTCPay dep, actions). Remaining gap before
+  submission: add a `prepare.sh` to set up a clean Debian box for the first build (copy the one from
+  `hello-world-startos`), then run the on-box manual verification (install / backup / restore / logs).
+  Submission criteria themselves remain unpublished; reach out to Start9 when ready. (Icon-render and the
+  source-available license are intentionally not treated as blockers.)
 
 ## Licensing model