Provenance

ThreadCells is an independent downstream derived from AWS Labs CLI Agent Orchestrator. The retained upstream license and attribution are in the source candidate's LICENSE and NOTICE files. This repository retains compatible internal cao names and commands where they preserve existing behavior; public product surfaces use ThreadCells. No AWS sponsorship or endorsement is implied.

Each local candidate records its committed source revision, file manifest, SHA-256 checksums, and direct dependency evidence in candidate-manifest.json, SHA256SUMS, and sbom.cdx.json. The SBOM is evidence of declared/resolved direct dependencies, not a license clearance, vulnerability assessment, or statement of upstream parity. Public distribution still requires owner approval of the public repository, security contact, branding provenance, and dependency/license review.