PGON — THIRD-PARTY NOTICES + ASSET PROVENANCE =========================================================== Pgon is NON-COMMERCIAL RESEARCH SOFTWARE published as a research artifact by Phil Renato (see LICENSE + DISCLAIMER.md). This file lists what it uses and where the bundled assets and referenced trademarks come from. RUNTIME LIBRARIES ----------------------------------------------------------- No third-party JAVASCRIPT dependencies. The mesh kernel (meshkernel/), SDF field extraction (fieldcore/, ported from glisten's own bakeMeshSDF/polygoniseField), the FBX writer (fbxwriter/, extends glisten's already-shipped ASCII FBX writer), and the BANK container writer (bankwriter/, a real STORE-method ZIP + CRC-32 implementation) are all original code written for this app or the wider RenatoDesignSystem suite. ONE third-party COMPILED dependency, added 2026-07-25 (Phase 39.1): remesh/quadriflow.wasm + remesh/quadriflow.js, a WebAssembly build of QuadriFlow, a published quad-remeshing algorithm. This is a real change to the posture this section used to claim ("None"), stated plainly rather than quietly kept: Pgon now ships ~450KB of compiled third-party C++. The full source it was built from is vendored in remesh/build/ together with the exact emcc invocation (remesh/build/build.sh), so the binary is auditable and reproducible from this repo alone. Its own new module API (remesh/build/qf_api.cpp), the host wrapper (remesh/remesh.v00000-001.js) and the worker (remesh/remesh_worker.v00000-001.js) are original code. The six licenses this pulls in are itemized under COMPILED DEPENDENCY below, each verified from its own license file. ⚠ THAT VENDORED TREE IS NOT DEPLOYED, so the sentence above is true for anyone holding the repository and false for anyone merely USING the app. remesh/build/ is ~12MB and is excluded from the deploy, which for a while left every "Full text:" pointer in this file aimed at a path that does not exist on the server -- while the compiled binary it describes was served to everyone. MPL-2.0 sec 3.2(b) and Apache-2.0 sec 4(a) attach at BINARY distribution, not at source distribution, so the obligation was live and unmet. The verbatim texts now ship alongside the app in licenses/, and licenses/README.txt names the upstream repository and exact version of every MPL- and BSD-covered component so a recipient can obtain the Source Code Form without access to this repository. COMPILED DEPENDENCY — QUADRIFLOW (2026-07-25, Phase 39.1) ----------------------------------------------------------- QuadriFlow: A Scalable and Robust Method for Quadrangulation. Jingwei Huang, Yichao Zhou, Matthias Niessner, Jonathan Richard Shewchuk, Leonidas J. Guibas. Computer Graphics Forum (SGP) 2018. Upstream: github.com/hjwdzh/QuadriFlow, revision 27a6867. Vendored from BLENDER's extern/quadriflow tree, not from raw upstream, and that distinction is deliberate: Blender's copy has Boost removed (replaced by its own MIT max-flow header, credited below), TBB/OpenMP/GUROBI removed, and upstream's exit(0) calls converted to bool returns — plus years of production mileage in Blender's own Remesh modifier. Blender's patch record is kept at remesh/build/quadriflow/patches/blender.patch. Note that only the CMakeLists.txt in that directory is Blender's own GPL-2.0-or-later file, and Pgon does not use it — the build goes through remesh/build/build.sh instead. No Blender source is compiled into quadriflow.wasm. LICENSE — verified by reading each project's own license file, not its README. QuadriFlow's README says "MIT"; its actual LICENSE.txt is not MIT, and this list follows the files: 1. QuadriFlow itself — BSD 3-Clause, plus a "no obligation to provide Enhancements" rider. Full text SHIPS WITH THE APP at licenses/QuadriFlow-BSD-3-Clause.txt (source-tree copy: remesh/build/quadriflow/LICENSE.txt). "Copyright (c) 2018 Jingwei Huang, Yichao Zhou, Matthias Niessner, Jonathan Shewchuk and Leonidas Guibas. All rights reserved." Redistribution in source and binary form is permitted with retention of the copyright notice, the conditions and the disclaimer, and without using the copyright holder's or contributors' names to endorse derived products. The rider adds: "You are under no obligation whatsoever to provide any bug fixes, patches, or upgrades ... however, if you choose to make your Enhancements available ... you hereby grant [a] non-exclusive, royalty-free perpetual license" over those Enhancements. Pgon's own modifications are the new module API (remesh/build/qf_api.cpp) and the removal of src/main.cpp from the build; both are in this repo in the open. 2. Blender's Boost replacement — MIT. remesh/build/quadriflow/patches/boykov_kolmogorov_max_flow.hpp SPDX-FileCopyrightText: 2006 Stephan Diederich SPDX-FileCopyrightText: 2024 Blender Authors SPDX-License-Identifier: MIT ("Adapted from boost::graph", per the file's own header.) This is why Pgon ships no Boost. 3. LEMON 1.3.1 (Library for Efficient Modeling and Optimization in Networks) — Boost Software License, Version 1.0. Full text SHIPS WITH THE APP at licenses/LEMON-BSL-1.0.txt (source-tree copy: remesh/build/quadriflow/3rd/lemon-1.3.1/LICENSE), which states "LEMON code without an explicit copyright notice is covered by the following copyright/license. Copyright (C) 2003-2012 Egervary Jeno Kombinatorikus Optimalizalasi Kutatocsoport (Egervary Combinatorial Optimization Research Group, EGRES)." Six of its .cc files are compiled in (arg_parser, base, color, lp_base, lp_skeleton, random). 4. pcg32 — Apache License 2.0. Full text SHIPS WITH THE APP at licenses/Apache-2.0.txt. remesh/build/quadriflow/3rd/pcg32/pcg32/pcg32.h, whose header reads: "Tiny self-contained version of the PCG Random Number Generation for C++ put together from pieces of the much larger C/C++ codebase. Wenzel Jakob, February 2015. The PCG random number generator was developed by Melissa O'Neill . Licensed under the Apache License, Version 2.0." 5. pss (parallel stable sort) — BSD 3-Clause. The three conditions and the disclaimer are reproduced verbatim in licenses/QuadriFlow-BSD-3-Clause.txt, which carries the same standard BSD-3 body. remesh/build/quadriflow/3rd/pss/pss/parallel_stable_sort.h and pss_common.h, both headed "Copyright (C) 2014 Intel Corporation. All rights reserved." with the standard three-condition BSD text including the no-endorsement clause. Header-only. 6. Eigen 3.5.0.1 (EIGEN_VERSION_STRING "5.0.1") — Mozilla Public License 2.0, with one Apache-2.0 file. Both texts SHIP WITH THE APP at licenses/MPL-2.0.txt and licenses/Apache-2.0.txt; Eigen is used UNMODIFIED, so the Source Code Form required by MPL sec 3.2(b) is upstream at gitlab.com/libeigen/eigen tag 5.0.1, as recorded in licenses/README.txt. Vendored at remesh/build/eigen/ together with Eigen's own COPYING.MPL2, COPYING.APACHE, COPYING.BSD, COPYING.MINPACK, COPYING.README and LICENSE. Provenance, version and the full license audit are written up in remesh/build/eigen/EIGEN_PROVENANCE.txt. Short version, verified by grep over the vendored tree: 341 files carry a license header, 340 MPL2 and one Apache-2.0 (Eigen/src/Core/arch/Default/BFloat16.h, Copyright 2017 The TensorFlow Authors); ZERO files carry GPL or LGPL. QuadriFlow's README warns that Eigen's SparseCholesky brings an LGPL dependency — that warning is stale and does not apply. The file in question, SimplicialCholesky_impl.h, is MPL2 and records in its own text that LDL's author Timothy A. Davis "has executed a license with Google LLC to permit distribution of this code and derivative works as part of Eigen under the Mozilla Public License v. 2.0." Toolchain: built with Emscripten 6.0.3-git (MIT / University of Illinois NCSA, see emscripten.org). The emitted loader remesh/quadriflow.js is generated Emscripten runtime glue rather than hand-written Pgon code. It carries no copyright or license header of its own -- an earlier version of this file claimed it "carries Emscripten's own license", which was not true: grepping the shipped glue for either word returns nothing. Emscripten's own terms (MIT/NCSA) are the ones that govern its generated output, and they are reproduced in full below. Emscripten is a BUILD tool here — no Emscripten source is vendored in this repo, only its generated output. 3D DATA ----------------------------------------------------------- gnmghost/presets/*.bin, gnmghost/gnmghost.triangles.bin — derived from google/GNM (github.com/google/gnm), Apache License 2.0, a real published parametric 3D statistical model of the human face and head. Pgon does NOT vendor GNM's own source, decoder weights, or basis vectors — it bundles 8 static, pre-baked mesh presets (one per GNM's own Gender x Ethnicity training-data category, at neutral expression), quantized to compact binary files by `gnmghost/bake_gnmghost.mjs` (a one-time build script, not run by the shipped app). The reconstruction math (template + weighted identity basis) and the source assets it ran against are the same already-verified, already-licensed pipeline built for Pgon's sibling app FACE (Fabricated Anthropometric Composite Engine, `~/Documents/claude/FACE/`) — reused, not re-derived independently. Presented in-app as an inert comparison reference only (see the "Ghost" provenance card): never live-inferred, never editable, never a claim about any individual sculpt's own anatomy. skullquads/skullquads.pos.bin, skullquads/skullquads.quad.bin — derived from "Anatomically Correct Human Skull (Homo Sapiens Sapiens)" by 3D-mon, published on Thingiverse as thing:6499584, https://www.thingiverse.com/thing:6499584 LICENCE: Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0), https://creativecommons.org/licenses/by-sa/4.0/ EVIDENCED, NOT ASSERTED. The licence Thingiverse bundles INTO the download is archived at skullquads/SOURCE_LICENSE_from_thingiverse_ download.txt and reads in full: "This thing was created by Thingiverse user 3D-mon, and is licensed under Creative Commons - Attribution - Share Alike". The bundled README and the thing page as fetched on 2026-08-17 are archived beside it. An uploader can change a Thingiverse licence at any time, so a claim with no archived copy is one that cannot be defended later. ⚠ THE BUNDLED FILE GIVES NO VERSION NUMBER. "4.0" comes from the page's own schema.org metadata (also archived), not from the LICENSE.txt shipped with the files. Recorded here rather than smoothed over, because the most authoritative of the three sources is the one that is silent on it. Nothing that matters turns on it: attribution and ShareAlike are the same across BY-SA versions. This is a DIFFERENT and more demanding licence than the asset it replaced, and both halves of it bind Pgon: ATTRIBUTION — 3D-mon is credited here, on the in-app "Skull" provenance card, and in the asset's own manifest.json. The in-app card names the author and links the source. SHAREALIKE — any redistribution of this mesh, or of a work derived from it, must itself be under CC BY-SA 4.0. That applies to the mesh, not to Pgon's own source code, which is separate and carries its own terms (see LICENSE). Anything a student exports from Pgon that STARTED as this skull is a derivative of a CC BY-SA 4.0 work and inherits that obligation. The card says so, because a student who exports an OBJ and publishes it has taken on a licence condition and deserves to know. Preparation: the quad cage was rebuilt in Rhino by Phil Renato from the source model. Two stray triangles were repaired into quads by Pgon's own bake step — they and the quad between them formed a hexagon around a single vertex, which splits into three quads with a centre vertex, a purely local change. The result is 43,568 vertices / 43,624 quads, closed and manifold, Euler characteristic -56 (genus 29: its own foramina, orbits and nasal aperture, kept as real openings rather than capped). ⚠ WHAT THIS REPLACED, AND WHY. Pgon previously shipped a Smithsonian Cro-Magnon 1 cranium scan under that institution's non-commercial/educational terms. It was withdrawn because it was unusable, not because of any licence problem: the bake had taken the Smithsonian's 20,000-face "Thumb" (thumbnail) tier — the smallest of five derivatives they publish — and the app then shrink-wrapped a 24x24 quad cage onto it. At that density the brow ridge, temporal line, zygomatic arch and orbital rims are already gone, and a 576-quad cage cannot carry a cranium's features from any source. The pipeline worked correctly on information that had already been destroyed. The Smithsonian files and their loader are no longer shipped. FONTS ----------------------------------------------------------- IBM Plex Mono — SIL Open Font License 1.1, © IBM. Vendored locally (vendor/font/) as of 2026-07-06 so the app renders the same typeface online and offline — previously fallback-stack only, which meant an installed/offline Pgon rendered a different font than the online version, breaking the suite's own offline-vendoring discipline. Same files rendre-web already vendors under the same license. Syne — SIL Open Font License 1.1, © the Syne Project Authors. Bold weight only, used for the "Pgon" wordmark — the same display face rendre-web's own wordmark and renato.design's marketing pages set their headings in (2026-07-15, Phil: "the Pgon wordmark is clumsy, use something more like Rendre uses"). Vendored locally the same way as IBM Plex Mono above (vendor/font/syne-700.woff2), same file rendre-web already vendors under the same license. TRADEMARKS REFERENCED (comparative/nominative use, no affiliation) ----------------------------------------------------------- Pgon is an "AI Covers" genre app: every tool is presented as a named cover of a ZBrush original, credited on its own provenance card (press-and-hold any tool button). This is educational, comparative reference — "the tool ZBrush calls Transpose," never a claim of affiliation, sponsorship, or endorsement. ZBrush® and Pixologic® are trademarks of Maxon Computer GmbH. Dynamesh, PolyPaint, ClayBuildup, Transpose, SubDivision Levels, Move, Smooth, Mask, Inflate, Crease, Pinch, Flatten, and MatCap are Maxon/Pixologic product feature names, referenced here solely to describe which real-world tool and convention each Pgon control corresponds to. Nomad Sculpt is a trademark of its respective owner (Stéphane Ginier). Referenced for the touch-gesture undo/redo convention, and — as of 2026-07-15 — acknowledged more broadly as Pgon's closest real-world competitor/precedent, not just a footnote: it's the dominant touch-first sculpting app design students already own or will buy for iPad (~$20 one-time, vs. ZBrush for iPad's subscription), and its own brush vocabulary (Clay, Crease, Move, Flatten, Smooth, Mask, Voxel Remesh) is almost entirely Blender-derived — meaning Pgon's existing Blender-name crosswalk (Phase 16) already carries most of Nomad's own transfer value for free, without a redundant fourth card register. Nomad's two genuinely distinct features — a Trim tool (lasso/rectangle hard-surface cuts, no Pgon equivalent) and non-destructive sculpt Layers — are noted in HANDOFF Phase 17 as a candidate (Trim) and a deliberate non-goal (Layers, same production-workflow reasoning that ruled out Mudbox's own layer system). Mudbox is a trademark of Autodesk, Inc., referenced for the general multires-sculpting paradigm comparison. FBX(R) is a trademark of Autodesk, Inc. Pgon writes the documented ASCII FBX form from scratch and is not an Autodesk product; the mark is used to identify the file format a student is exporting. GoZ(TM) and ZBrush(R) are marks of Maxon Computer GmbH. Pgon's GoZ writer is an independent implementation for interoperability, not a Maxon product and not derived from Maxon code. All trademarks are the property of their respective owners. Pgon is not affiliated with, sponsored by, or endorsed by any of the above. BLENDER — REFERENCE + LICENSE POSTURE (2026-07-15 addition) ----------------------------------------------------------- Blender® is a registered trademark of the Blender Foundation. Blender itself is free/open-source software: its source is licensed GNU GPL v2-or-later at the file level, with the distributed whole (the thing you download and run) under GPL v3 — see blender.org/about/license. Because Blender is actually OSS (unlike ZBrush, which Pgon can only reference comparatively, never build on), every provenance card now carries a THIRD crosswalk register alongside its plain-word and ZBrush-name lines: what Blender itself calls the equivalent tool (e.g. "Blender calls this Grab"), sourced from Blender's own current manual, so a Blender-trained student can map straight across too, not just a ZBrush one. Two things Pgon deliberately does NOT do, on purpose, to respect that GPL license rather than just gesture at it: - No Blender source code is vendored or ported. Pgon's own meshkernel/fieldcore/brush-compute code is written from scratch against the ALGORITHM'S description (what a brush does), never against Blender's C++ implementation (how it does it) — same standard already applied to ZBrush, which isn't even available to read. - No Blender icon assets are vendored. Blender's own toolbar icons (release/datafiles/blender_icons*.svg in the Blender source) are themselves part of Blender's GPL-licensed source, not a separately-licensed asset pack — copying them into an MIT-licensed app like Pgon would require relicensing those files, a real legal step nobody has decided to take. Instead, Pgon's brush/mode/utility-toggle icons (BRUSH_ICONS/MODE_ICONS and the symmetry/wireframe/grid glyphs, all in index.html) are ORIGINAL line-glyphs, drawn in the same stroke-based visual language Blender's toolbar uses per-brush (a mound for "deposit," a move-cross for "drag," a settling wave for "relax"), first added 2026-07-06 per Phil's own "borrow the Blender brush icons" note and extended 2026-07-15 — never a traced or copied path from Blender's actual SVGs. Blender is referenced for the viewport orientation-gizmo convention (pre-existing) and, as of 2026-07-15, for the sculpt-tool naming crosswalk above. CODE PROVENANCE (algorithms re-implemented from literature) ----------------------------------------------------------- Catmull & Clark subdivision: E. Catmull, J. Clark, "Recursively generated B-spline surfaces on arbitrary topological meshes," Computer-Aided Design 10(6):350-355, 1978 — the same algorithm ZBrush's own SubDivision Levels run on, which is why a top-level Pgon export can have its lower levels rebuilt inside ZBrush via Reconstruct Subdiv. Laplacian neighbor-averaging (the Smooth/Anneal brush): a standard mesh-relaxation technique predating ZBrush by decades, not attributable to a single paper.