The first meeting of the Legal Work Group took place on the 25th of April 2023 to explore model provisions for OpenChain ISO/IEC 5230 or ISO/IEC DIS 18974 in procurement contracts and similar material. We decided to proceed via mirroring the format of the pre-existing public domain Risk Grid:
https://github.com/OpenChain-Project/Reference-Material/tree/master/General-Compliance-Support-Material/Risk-Grid
Our 2nd meeting will take place on 2023-05-25 at 16:00 UTC (09:00 PDT / 18:00 CEST / 00:00 CST) to continue our work. Meanwhile, keep up-to-date via our mailing list:
https://lists.openchainproject.org/g/legal-wg
Reminder:
The goal is to ensure people can understand options. We will not be prescriptive and these model provisions will remain part of the OpenChain reference material. They will not be included in the standards themselves.