Pyodide 314.0.7 and Hiwire — MPL-2.0 covered source availability

The unmodified upstream Pyodide runtime and its linked Hiwire bridge portions
remain available under the Mozilla Public License, version 2.0. The full licence
is in python/pyodide-LICENSE. Sections 3.1–3.4 describe source/executable/larger-
work distribution and preservation of notices. Recipients retain the rights
granted there; Ambar's separate commercial terms do not restrict those rights.

Exact upstream repository commit (the official tag 314.0.7 and NPM gitHead):
  b1e4fcc2488962f6360a97f19b9982d6fdb5d16f

Local source archive accompanying this runtime:
  /cad-runtime/licenses/pyodide/source/pyodide-314.0.7-source.tar.gz
  bytes: 1465591
  SHA-256: a9c7ac66311ed7e0805b9970054ee5be4f69d02204d28bffe4b017310a24bad9

The archive preserves the tracked upstream repository snapshot at that commit,
including Pyodide source, licence, build files and CPython integration patches.
It retains .gitmodules references, rather than checking out external submodules.
The pyodide-build submodule is a package-build tool; it is not part of the
selected runtime payload. The linked Hiwire source is provided separately below.
It was retrieved verbatim, not reconstructed from minified JavaScript. Its root
LICENSE matches python/pyodide-LICENSE byte for byte. It is provided with this
runtime without a separate charge.

The same source is available from the upstream project:
  https://github.com/pyodide/pyodide/tree/b1e4fcc2488962f6360a97f19b9982d6fdb5d16f
  https://codeload.github.com/pyodide/pyodide/tar.gz/b1e4fcc2488962f6360a97f19b9982d6fdb5d16f

Pyodide's cpython/Makefile pins the linked Hiwire source at:
  6a1e67280a15d929ebeceee54a6358c9c8d5f697
Its licence is the same MPL-2.0 text, retained separately at
  /cad-runtime/licenses/linked/hiwire-6a1e672-LICENSE.txt
The complete, unmodified corresponding source is also included locally:
  /cad-runtime/licenses/pyodide/source/hiwire-6a1e672-source.tar.gz
  bytes: 27264
  SHA-256: 0d64144f149c0de3bd157551421833c6c16fdc0492c312a6325ffc25d185c93c
Upstream source and archive:
  https://github.com/pyodide/hiwire/tree/6a1e67280a15d929ebeceee54a6358c9c8d5f697
  https://codeload.github.com/pyodide/hiwire/tar.gz/6a1e67280a15d929ebeceee54a6358c9c8d5f697

Both source archives are provided with this runtime without a separate charge.
Keep both available when distributing this exact upstream runtime.

Upstream's Makefile.envs pins Python 3.14.2 and Emscripten 5.0.3. The downloaded
NPM tarball's SHA-512 integrity was checked; each of the five selected runtime
files matched that tarball byte for byte. This is origin/integrity verification,
not a claim that Ambar independently reproduced the upstream WASM build.

Ambar does not patch these upstream runtime files. Its worker adapter and CAD/
model modules are separate files. The generated source bundle retains Ambar's
licence separately and preserves pure-Python package metadata and notices. If
future work modifies MPL-covered files or combines their code into new files,
those changes require a fresh source-availability and licence review.