SCHEDULE A — VOLUNTARY LICENSE GRANT FOR IDENTIFIED PAST CONTRIBUTIONS
Proposed version: 1.0-review-2026-10-21
INTERIM v1.0-review-2026-10-21 — ADOPTED AS PROJECT POLICY DIRECTION; UNDER FINAL LEGAL REVIEW; NOT YET OPEN FOR SIGNATURE

> Astra-reviewed proposed revision (2026-10-21). Introducing the CLA policy does
> NOT retroactively bind earlier contributors; additional rights to historical
> contributions require this separate, voluntary, signed schedule. No backdating.

Project: Pentest Swarm AI, https://github.com/Armur-Ai/Pentest-Swarm-AI.
Company: Armur Technologies Inc.
Rights holder (individual or exact organization): [ADD]
Contact and authority of signer: [ADD]

Attached approved agreement: [individual CLA or corporate CLA; exact version]
SHA-256 / attached complete text: [ADD]
Existing agreement record, if any: [ADD or NONE]

Identify the historical contributions below. Include PR and commit identifiers,
affected paths and a short authorship description. If old commits were squashed
or moved, attach patches or other stable evidence relating the original
submission to the retained material. Listing a commit does not claim ownership
of every line or dependency present in that commit.

Item 1: [repository; PR; SHA(s); date; paths; authored material description]
Item 2: [repeat as needed]
Historical authors/GitHub accounts: [ADD]
Rights-owner basis and employer authorization: [ADD]
Excluded Material and upstream sources/licenses: [ADD or explicit NONE]
Current release/retained-material mapping, if known: [ADD]

Affirmative grant:
"I/We have read and accept the complete approved agreement attached to this
Schedule. I/We voluntarily grant its copyright and patent licenses for the
identified historical contributions to the extent of the rights I/we own or
am/are authorized to grant, subject to the disclosed exclusions. I/We understand
that these additional rights include proprietary commercial sublicensing.
The Company undertakes the corresponding obligations in that agreement.
This Schedule does not withdraw existing valid public licenses."

This execution is HISTORICAL-ONLY unless a separate prospective agreement is
also executed. It does not alter prospective coverage already established by
another executed agreement. Earlier contributions not identified here are not
included by implication. The grant takes effect on execution; dates of creation
identify the covered works and are not backdated signature dates. This Schedule
does not itself release claims about earlier conduct or settle any dispute.

Rights holder signature / electronic assent, name and capacity: [ADD]
Date/timezone: [ADD]
Company acceptance, authorized signer and date/timezone: [ADD]
Schedule version, SHA-256 and attached exhibits: [ADD]
Copy supplied to signer: [record]