Add open-source requirement to AI vetting criteria

[JohnRDOrazio]

Context

An audit of all repo documents against the CDCF bylaws and manifesto found that the AI vetting criteria contain no open-source licensing requirement.

Problem

Bylaws purpose 1 specifically refers to "open-source software," and the manifesto describes the CDCF as a commons for "open-source digital tools." The AI vetting criteria document (ai-governance/ai-vetting-criteria.md) never mentions open-source licensing as a requirement or consideration for incubation or graduation. A tool could theoretically pass all eight criteria while being entirely proprietary.

This is a significant omission given that open-source is foundational to both the bylaws and the manifesto's commons model.

Suggested approach

Add an explicit open-source licensing requirement (or criterion) to the AI vetting criteria. Consider whether this should be:

• A hard gate requirement (must be open-source to enter incubation)
• A graduation requirement (must be open-source to graduate)
• A weighted criterion with exceptions for proprietary tools that meet other criteria

The project-governance vetting criteria should also be checked for consistency on this point.

Affected files

• ai-governance/ai-vetting-criteria.md
• project-governance/project-vetting-criteria.md (for consistency)

Dependencies

Should be implemented after #8 / PR #9 is merged.

Identified during bylaws/manifesto alignment audit.