版本： 1.0 生效日期： 2026 年 11 月 1 日 适用仓库： SECTL/SecRandom 语言： 本协议以简体中文版本为准；英文版本仅为参考译文（见文末）。
在向本项目提交贡献之前，请完整阅读本协议。 您按第 9 条所述方式作出签署声明，即表示您接受本协议全部条款。
1.1 "本项目"：本仓库（SECTL/SecRandom）及其维护者在仓库范围内维护的软件、文档、构建脚本与素材。
1.2 "维护者"：本仓库的所有者（SECTL 组织）及其指定的管理者。
1.3 "您"：向本项目提交贡献的自然人或法人，包括代表雇主或其他法人提交的情形。
1.4 "贡献"：您以任何形式向本项目提交的作品，包括但不限于源代码、测试、构建与发布脚本、配置文件、文档、设计稿、图片、音视频素材，以及 Issue、Discussion 或评论中提交的补丁与代码片段。
1.5 "第三方作品"：非由本项目维护者或贡献者创作、以其他许可证提供的作品，包括 vendors/ 下的子模块、NuGet 及其他包管理器引入的依赖，以及任何明确标注来源的作品。
2.1 您保留您贡献的版权。
2.2 您就您的贡献向维护者授予一项全球范围、非独占、永久、不可撤销、免许可费、可再许可且可转让的版权许可，允许维护者及其继承者与受让人：
- (a) 复制、修改、演绎、汇编、公开发行、公开传播、公开展示与公开执行您的贡献及其衍生作品；
- (b) 将您的贡献与其他作品结合或并入其他作品；
- (c) 在遵守第 4 条的前提下，以任何许可证条款许可或再许可您的贡献，包括与本项目当前采用的开源许可证不同的开源许可证，以及商业或许可证。
3.1 您就您的贡献向维护者及本项目使用者授予一项全球范围、永久、不可撤销、免许可费且可再许可的专利许可，仅用于制造、委托制造、使用、销售、许诺销售、进口及以其他方式实施您的贡献。
3.2 若您（或您的关联方）就本项目或您的贡献向维护者或本项目使用者提起专利诉讼（包括诉讼中的交叉请求与反诉），则本条第 3.1 条自该诉讼提起之日起对您终止。
4.1 默认出站许可：在维护者依本条作出调整之前，您的贡献随本项目以 GNU GPLv3 分发。
4.2 调整权：维护者有权调整本项目就您的贡献（以及包含您贡献的整体作品）所适用的出站许可证条款。
4.3 公示义务：若该调整会改变您的贡献所适用的许可证，维护者必须在不少于 30 个自然日前在本仓库公开公示（Release Note、README、专用公告文件或等价渠道均可），并说明拟采用的新许可证与生效日期。
4.4 异议期：公示期内，任何贡献者可通过本仓库 Issue 或维护者公开邮箱提出异议。维护者应善意协商。
4.5 不适用范围：本条不适用于：
- (a) 第三方作品——该部分始终适用其原始许可证；
- (b) 从其他项目继承或引入、由第三方享有版权的作品；
- (c) 维护者未取得相应授权的任何作品。
4.6 不溯及既往：本协议生效前已存在的历史贡献，仅在其版权持有人依第 9.5 条另行明确同意后方受本协议约束。
您声明并保证：
- (a) 您是您的贡献的版权所有人，或已取得足以授予本协议第 2、3 条权利的完整授权；
- (b) 您的贡献为原创作品，或您已明确标注其来源与适用许可证，且该许可证允许本项目以其当前许可证分发；
- (c) 若您代表雇主或其他法人提交贡献，您已获得该法人的授权，或该法人已放弃对该贡献的权利主张；
- (d) 您的贡献不侵害任何第三方的著作权、专利权、商标权或其他权利；
- (e) 您的贡献不包含您无权披露的机密信息或第三方专有信息。
6.1 本项目在 Git 提交历史中保留每位贡献者的署名，并在需要时于 README.md 或独立的贡献者列表中列出贡献者。
6.2 在法律允许的范围内，您同意不针对维护者依本协议行使权利所必需的行为主张精神权利，包括为合并、重构、格式化、本地化或跨平台适配而修改您的贡献。
6.3 本条第 6.2 条不适用于歪曲、篡改您的贡献或以其方式使用而损害您声誉的情形。
7.1 不改变已发布版本：本协议不改变本项目任何已发布版本在 GNU GPLv3 下的授权。任何人依 GPLv3 就那些版本已经取得的权利，不受本协议影响。
7.2 不减损您的权利：本协议是您与维护者之间的额外授权。它不减损您依 GPLv3 对任何第三方享有的权利，也不限制您以任何其他方式使用您自己的贡献。
7.3 可随时停止贡献：您可随时停止向本项目提交贡献，但这不影响已经授予的许可的效力。
8.1 第三方作品不属于本协议范围，本协议不改变其原有许可条款。
8.2 若您的贡献包含第三方代码或素材，您必须在提交时明确标注来源与许可证。
8.3 本项目分发第三方作品时，遵循 THIRD-PARTY-NOTICES.md 与各作品自身的许可证要求。
9.1 签署方式：您可在本仓库的 Pull Request 中，以评论发送维护者指定的签署语句（当前为 I have read the CLA Document and I hereby sign the CLA），由 CLA Assistant 等自动化工具记录完成签署；或按维护者指定的其他方式完成。
9.2 记录内容：签署记录包括您的 GitHub 账号、签署时间、本协议版本号与文件哈希；该记录由自动化工具保存在本仓库 cla-signatures 分支的 signatures/version1/cla.json 文件中，并可通过该分支的提交历史追溯。
9.3 版本升级：本协议发布新版本后，新的贡献适用新版本；若变更实质性扩大维护者权利，维护者可要求贡献者重新签署。
9.4 生效：自您完成第 9.1 条签署之时起，本协议在您与维护者之间生效，适用于您在签署日之后向本项目提交的贡献。
9.5 历史贡献（可选）：签署时，您可同时声明本协议亦适用于您在本协议生效日前向本项目提交的历史贡献。具体做法为在第 9.1 条的签署语句之后追加 , and I agree that this CLA also covers my prior contributions，或将这两句合并为一条评论发送；亦可按维护者指定的其他方式作出该声明。未作该声明的，本协议仅适用于您在签署日之后提交的贡献；已作出该声明的，第 2、3、4 条自签署之时起同样适用于您此前的贡献。
10.1 您的贡献按"现状"提供，不附带任何明示或默示的担保，包括但不限于适销性、特定用途适用性与不侵权的担保。
10.2 除法律强制规定的情形外，贡献者不对因使用其贡献而产生的任何直接、间接、附带或后果性损失承担责任。
10.3 本协议不构成雇佣、合伙、代理或合资关系，也不构成任何一方对另一方作出任何形式的商业承诺。
11.1 本协议适用中华人民共和国法律（不含冲突法规则）。
11.2 因本协议产生的争议，双方应先行友好协商；协商不成的，提交维护者住所地有管辖权的人民法院解决。
12.1 维护者可发布本协议的新版本，并在仓库中公示。
12.2 新版本仅适用于其生效日期之后提交的贡献，除非贡献者依第 9 条另行明确同意。
The Simplified Chinese version prevails. This translation is provided for convenience only.
SecRandom Contributor License Agreement (CLA) — Version 1.0 — Effective 1 November 2026
1. Definitions. "Project" means this repository (SECTL/SecRandom) and the software, documentation, build scripts and assets maintained in it. "Maintainer" means the owner of this repository (the SECTL organization) and its designated administrators. "You" means the individual or legal entity submitting a Contribution, including on behalf of an employer. "Contribution" means any work you submit to the Project in any form, including source code, tests, build and release scripts, configuration, documentation, designs, images, audio/video assets, and patches or code snippets posted in issues, discussions or comments. "Third-Party Works" means works not created by the Maintainer or contributors and provided under other licenses, including submodules under vendors/, dependencies pulled through NuGet or other package managers, and any work with an explicit upstream attribution.
2. Copyright License Grant. You retain copyright in your Contribution. You grant the Maintainer a worldwide, non-exclusive, perpetual, irrevocable, royalty-free, sublicensable and transferable copyright license to (a) reproduce, modify, adapt, compile, publish, publicly communicate, publicly display and publicly perform your Contribution and derivative works of it; (b) combine or incorporate your Contribution with or into other works; and (c) subject to Section 4, license or sublicense your Contribution under any license terms, including open-source licenses different from the Project's current license and commercial or proprietary licenses.
3. Patent License Grant. You grant the Maintainer and users of the Project a worldwide, perpetual, irrevocable, royalty-free and sublicensable patent license to make, have made, use, sell, offer for sale, import and otherwise exploit your Contribution. This patent grant terminates for you as of the date you (or your affiliate) initiate patent litigation against the Maintainer or users of the Project regarding the Project or your Contribution.
4. Outbound License and Change Procedure. (4.1) Until the Maintainer acts under this Section, your Contribution is distributed with the Project under GNU GPLv3. (4.2) The Maintainer may adjust the outbound license applicable to your Contribution and to the combined work containing it. (4.3) Where such an adjustment changes the license applicable to your Contribution, the Maintainer must give at least 30 calendar days' public notice in this repository (release note, README, dedicated notice file or equivalent), stating the proposed new license and its effective date. (4.4) During that period any contributor may raise objections via this repository's issues or the Maintainer's public email, and the Maintainer shall negotiate in good faith. (4.5) This Section does not apply to (a) Third-Party Works, which remain under their original licenses; (b) works inherited from or introduced from other projects and copyrighted by third parties; (c) any work for which the Maintainer has not obtained the necessary authorization. (4.6) Contributions existing before this Agreement takes effect are governed by this Agreement only if their copyright holder separately consents under Section 9.5.
5. Your Representations and Warranties. You represent and warrant that (a) you own the copyright in your Contribution or hold sufficient authorization to grant Sections 2 and 3; (b) your Contribution is original, or its source and applicable license are clearly marked and that license permits distribution under the Project's current license; (c) if you contribute on behalf of an employer or other legal entity, you are authorized by that entity or it has waived claims to the Contribution; (d) your Contribution infringes no third party's copyright, patent, trademark or other rights; and (e) your Contribution contains no confidential or third-party proprietary information you are not entitled to disclose.
6. Attribution and Moral Rights. The Project preserves each contributor's attribution in Git history and, where appropriate, lists contributors in README.md or a dedicated contributors file. To the extent permitted by law, you agree not to assert moral rights against acts the Maintainer necessarily performs to exercise the rights granted here, including modifying your Contribution for merging, refactoring, formatting, localization or cross-platform adaptation. This waiver does not apply to distortion, mutilation or other modification of your Contribution that would be prejudicial to your honour or reputation.
7. Relationship to Other Grants. (7.1) This Agreement does not alter the licensing of any released version of the Project under GNU GPLv3; rights already obtained by anyone under GPLv3 with respect to those versions are unaffected. (7.2) This Agreement is an additional grant between you and the Maintainer. It does not diminish your rights under GPLv3 against any third party, nor restrict your own use of your Contribution in any way. (7.3) You may stop contributing at any time; this does not affect the effect of licenses already granted.
8. Third-Party Works. Third-Party Works are outside the scope of this Agreement and remain under their original license terms. If your Contribution includes third-party code or assets, you must clearly mark their source and license when submitting. The Project distributes Third-Party Works in accordance with THIRD-PARTY-NOTICES.md and each work's own license.
9. Signing, Effectiveness and Records. You may sign by posting the signing statement designated by the Maintainer (currently I have read the CLA Document and I hereby sign the CLA) as a comment in a pull request of this repository, recorded by an automated tool such as CLA Assistant, or by another method designated by the Maintainer. The record includes your GitHub account, the signing time, this Agreement's version and file hash, and is kept by the automated tool in signatures/version1/cla.json on this repository's cla-signatures branch, traceable through that branch's commit history. New contributions are governed by the latest version of this Agreement; where a revision materially expands the Maintainer's rights, the Maintainer may require contributors to sign again. This Agreement takes effect between you and the Maintainer when you complete signing under this Section, and applies to contributions you submit after the signing date. (9.5) When signing, you may also declare that this Agreement applies to contributions you submitted to the Project before its effective date — for example by adding "and I agree that this CLA also covers my prior contributions" to your signing comment, or by another method designated by the Maintainer. Without such a declaration this Agreement covers only contributions submitted after the signing date; with it, Sections 2, 3 and 4 apply to your prior contributions as of the moment of signing.
10. Disclaimer and Limitation of Liability. Your Contribution is provided "as is", without any express or implied warranty, including warranties of merchantability, fitness for a particular purpose and non-infringement. Except where mandatory law provides otherwise, a contributor is not liable for any direct, indirect, incidental or consequential loss arising from use of their Contribution. This Agreement creates no employment, partnership, agency or joint-venture relationship and no commercial commitment by either party.
11. Governing Law and Disputes. This Agreement is governed by the laws of the People's Republic of China, excluding its conflict-of-laws rules. Disputes shall first be resolved through friendly negotiation; failing that, they shall be submitted to the competent people's court at the Maintainer's domicile.
12. Changes to this Agreement. The Maintainer may publish new versions of this Agreement and announce them in the repository. A new version applies only to contributions submitted after its effective date, unless a contributor separately consents under Section 9.