chore: OSS attribution — avalanchego (BSD-3-Clause) + go-ethereum (LGPL-3.0) NOTICE + retained notices

LICENSING.md

@@ -10,3 +10,24 @@ For the canonical Lux IP and licensing strategy, see:
 
 For commercial inquiries that go beyond BSD-3 (e.g. private moat
 acceleration kernels), contact `licensing@lux.network`.
+
+## Upstream attribution
+
+See [NOTICE](NOTICE) for the full attribution. In summary:
+
+- **avalanchego** (Ava Labs, Inc.) — this repository is derived from
+  [ava-labs/avalanchego](https://github.com/ava-labs/avalanchego), licensed
+  under the **BSD 3-Clause License** (© 2019 Ava Labs, Inc.). BSD-3 is
+  permissive; the Lux additions here are likewise BSD-3-Clause.
+- **go-ethereum** (The go-ethereum Authors) — EVM support derives from
+  [go-ethereum](https://github.com/ethereum/go-ethereum). It is **not**
+  vendored in-tree; it is consumed as the external Go module
+  `github.com/luxfi/geth`, which retains go-ethereum's original licenses:
+  the library is **LGPL-3.0-or-later** and the command-line tools are
+  **GPL-3.0**.
+
+**Copyleft flag:** the LGPL-3.0/GPL-3.0 terms of the go-ethereum-derived code
+(via `github.com/luxfi/geth`) are **not** superseded by this repository's
+BSD-3-Clause license. Distributing compiled node binaries must honor LGPL-3.0
+for the linked geth library (published source of that code and its
+modifications at <https://github.com/luxfi/geth>, and user ability to relink).

NOTICE

@@ -0,0 +1,38 @@
+Lux Node
+Copyright (c) 2019-2025 Lux Industries Inc.
+
+This product includes software from avalanchego by Ava Labs, Inc.
+(https://github.com/ava-labs/avalanchego), licensed under the BSD 3-Clause
+License:
+
+    Copyright (C) 2019, Ava Labs, Inc.
+
+Lux Node is derived from avalanchego. The Lux additions and modifications in
+this repository are licensed under the BSD 3-Clause License (see the LICENSE
+file). The BSD 3-Clause terms of the upstream avalanchego code are retained;
+this NOTICE preserves the required Ava Labs copyright attribution at the
+repository level.
+
+--------------------------------------------------------------------------
+
+Ethereum Virtual Machine support is derived from go-ethereum by The
+go-ethereum Authors (https://github.com/ethereum/go-ethereum). In this
+repository that code is NOT vendored in-tree; it is consumed as an external
+Go module through the Lux fork github.com/luxfi/geth, which retains
+go-ethereum's original licenses:
+
+  * The go-ethereum library packages are licensed under the GNU Lesser
+    General Public License, version 3 (LGPL-3.0-or-later).
+  * The go-ethereum command-line tools are licensed under the GNU General
+    Public License, version 3 (GPL-3.0).
+
+    Copyright (C) The go-ethereum Authors
+
+COPYLEFT NOTICE: The LGPL-3.0/GPL-3.0 terms continue to apply to the
+go-ethereum-derived portions provided via github.com/luxfi/geth, and are NOT
+superseded by the BSD 3-Clause license of this repository. Distribution of
+compiled Lux Node binaries must honor LGPL-3.0 for the linked go-ethereum
+library code (source availability for that code and its modifications, and
+the ability for users to relink against a modified library). The luxfi/geth
+source, including Lux modifications, is published at
+https://github.com/luxfi/geth.