Open-source model licenses: weights, data, and who may sell the output

The kickoff model list runs two pages. Most filenames say Open. Nobody opened the terms. Security asked one question: may this code and these logs leave the boundary. Next to that: weights, training-data statements, generated output — who may sell, who may redistribute. One box empty, a loud local fan gets written as already compliant. Research-only is not commercial redistribute. Those are not the same. Forwarded weights will bring legal in. A blog post is not a model card.