Re: [open-regulatory-compliance] Kicking off the CRA Attestations projec

[Mathias Schindler <mathiasschindler@xxxxxxxxxx>]

Dear Greg,

thank you for your email and the replies to my questions.

 

For the FreeBSD SSDF Attestation, we chose to bind the Attestation to both the SW Version and the recipient. At the time, it was felt that this was the best way to ensure fairness. The Foundation includes the Attestation with any Corporate Partnership (https://freebsdfoundation.org/our-donors/freebsd-foundation-partnership-program/). 

What is the legal instrument FreeBSD relies on that an attestation is bound to a specific recipient? 

Mathias