diff --git a/whitepaper/index.html b/whitepaper/index.html
index 835adbf..708542c 100644
--- a/whitepaper/index.html
+++ b/whitepaper/index.html
@@ -223,7 +223,7 @@
 <p><b>Public surfaces</b></p>
 <ul><li>Theseus: <a href="https://navigate.st/bns/theseus.x/">theseus.x</a> through the gateway, <a href="https://silentmode.st/theseus">silentmode.st/theseus</a> on ICANN DNS</li><li>Downloads and release manifest: <a href="https://dl.silentmode.st/releases-manifest.json">dl.silentmode.st</a>, mirrored at <a href="https://navigate.st/bns/silentmode.bch/releases">silentmode.bch</a></li><li>Registrar: <a href="https://navigate.st/bns/sirius.x/">sirius.x</a></li><li>Source: <a href="https://code.silentmode.st/silentmode/theseus">code.silentmode.st/silentmode/theseus</a></li><li>Gateway API root: <a href="https://navigate.st/api/tlds">navigate.st/api/tlds</a>, <code>/api/registry</code>, <code>/api/dns/&lt;name&gt;</code>, <code>/api/records/&lt;name&gt;</code>, <code>/api/market</code>, <code>/api/cosign</code>, <code>/api/site</code>, <code>/api/ext</code></li></ul>
 <p><b>Design documents in the repository</b> (paths under the Silent Mode monorepo): <code>Decentralized.DNS/PROTOCOL.md</code>, <code>Decentralized.DNS/DESIGN-tld-registry.md</code>, <code>Decentralized.DNS/DESIGN-signed-records-manifest.md</code>, <code>Decentralized.DNS/INTEGRATION-signed-records-clients.md</code>, <code>Argus/DESIGN-collision-modes.md</code>, <code>TheseusNavigator/docs/ADDON-UPDATES.md</code>, <code>Argus/src/lib/resolver-web.js</code> (the network table and reduction rules), <code>Argus/src/lib/manifest.js</code> (manifest validity), <code>Argus/src/lib/register-tx.js</code> (transaction shapes).</p>
-<p><b>Licensing.</b> The Theseus, Argus and Ariadne source trees carry no license file yet; the Argus package declares ISC and Sirius Press is GPL-2.0-or-later. Bundled third-party components: Chromium via Electron, Tor, DuckDuckGo autoconsent (MPL-2.0), Ghostery adblocker, GrapesJS (BSD-3), web-llm (Apache-2.0), WizardConnect (LGPL-3.0-or-later), sing-box, Node.js (MIT). Settling the project's own license is a prerequisite for the whitepaper's public release.</p>
+<p><b>Licensing.</b> Theseus Navigator, Ariadne's Thread and Ariadne for Android are published under the Mozilla Public License 2.0, the file-level copyleft Firefox and Brave use: changes to the project's own files stay open, and anything may be built on the browser. The resolver, gateway and protocol libraries are under the Apache License 2.0, so that other implementations of the registry can reuse them freely; the protocol documents and this paper are under Creative Commons Attribution 4.0. Sirius Press is GPL-2.0-or-later, as WordPress requires. Each build ships a third-party notices file: Chromium via Electron, Tor, DuckDuckGo autoconsent and the Ghostery adblocker (MPL-2.0), EasyList and EasyPrivacy, pdf.js, pdf-lib, mammoth, WizardConnect (LGPL-3.0), and the sing-box binary the VPN add-on fetches (GPL-3.0), whose complete source is published beside the binary. The project's names and marks are reserved and not covered by any of these licenses, so a fork must ship under its own name.</p>
 <p>All facts in this paper were read from the source tree and the live surfaces on 2026-09-28 and describe Theseus Navigator 0.3.59, Ariadne's Thread 0.1.9 and Ariadne for Android 0.21.</p>
     </article>
   </main>
@@ -234,6 +234,10 @@
   <p>theseus.x is a BCNR name resolving to a Sia-hosted static site.
      Source and issues: <a href="https://silentmode.st/">silentmode.st</a>.
      Alpha software on a test network.</p>
+  <p>This paper is published under <a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0</a>.
+     Theseus Navigator is free software under the <a href="https://code.silentmode.st/silentmode/theseus/src/branch/master/LICENSE">Mozilla Public License 2.0</a>;
+     its <a href="https://code.silentmode.st/silentmode/theseus/src/branch/master/THIRD-PARTY-NOTICES.md">third-party notices</a> and
+     <a href="https://code.silentmode.st/silentmode/theseus/src/branch/master/TRADEMARKS.md">trademark note</a> are in the source repository.</p>
 </footer>
 <script>
   const links = [...document.querySelectorAll('.toc a')], heads = links.map(a => document.getElementById(a.getAttribute('href').slice(1)));