# Third-party software and model notices

TORIGHI is Copyright (c) 2026 RIS Institute and is distributed under the MIT License. Third-party software, model weights, fonts, and data retain their own licenses. The TORIGHI MIT License does not replace or modify those licenses.

## Principal runtime components

| Component | Version or artifact | License | Canonical source |
| --- | --- | --- | --- |
| Bonsai 27B GGUF | `Bonsai-27B-Q1_0.gguf` | Apache-2.0 | https://huggingface.co/prism-ml/Bonsai-27B-gguf |
| Qwen3.6-27B base model | As identified by the Bonsai NOTICE | Apache-2.0 | https://huggingface.co/Qwen/Qwen3.6-27B |
| `@reeselevine/wllama-webgpu` | 1.0.0 | MIT | https://github.com/reeselevine/wllama |
| llama.cpp included through wllama | wllama-pinned source | MIT | https://github.com/ggml-org/llama.cpp |
| `@huggingface/transformers` | 4.2.0 | Apache-2.0 | https://github.com/huggingface/transformers.js |
| React / React DOM | 19.2.7 | MIT | https://github.com/facebook/react |
| Astro | 7.0.9 | MIT | https://github.com/withastro/astro |
| `@astrojs/react` | 6.0.1 | MIT | https://github.com/withastro/astro |
| Lucide React | 0.468.0 / 1.24.0 | ISC | https://github.com/lucide-icons/lucide |
| PDF.js | 5.7.284 | Apache-2.0 | https://github.com/mozilla/pdf.js |
| Tesseract.js | 7.0.0 | Apache-2.0 | https://github.com/naptha/tesseract.js |
| Inter, Space Grotesk, JetBrains Mono | Fontsource packages used by the frontend | SIL Open Font License 1.1 | https://fontsource.org |

## Bonsai model notice

The model repository distributes an Apache-2.0 `LICENSE.txt` and a `NOTICE.txt`. Its notice identifies Prism ML, Inc. as the copyright holder, requests attribution such as “Created using Bonsai by Prism ML,” and identifies Qwen3.6-27B by Alibaba Cloud as the base model under Apache-2.0.

TORIGHI displays the attribution “Created using Bonsai by Prism ML” on its license page and preserves the upstream license and notice in the generated legal bundle.

## Complete generated notices

Running either production build generates `dist/legal/THIRD_PARTY_NOTICES.txt`. It inventories installed packages from both the workbench and Astro frontend, records package versions and declared licenses, and includes available license or notice text from each package. This generated file may intentionally include build and development dependencies in addition to browser runtime dependencies.

Canonical upstream license files remain authoritative. Before a public release, regenerate the legal bundle from the locked dependencies used for that release.