# Upstream notices

Prepared by **HeyDonto Labs**. Responsible contact: **Reza Nehzati, Ph.D.** Upstream authors retain their respective copyrights and licenses.

## Qwen base and adapters

The recorded upstream model is **Qwen/Qwen3.8-27B**, revision `1d4bf0f2ff6012fd82039f2fa52739d0dd7c60c0`. Its configuration declares `Qwen3_5ForConditionalGeneration`. The pinned upstream configuration, README and LICENSE were independently retrieved and matched the metadata in the selected image. The original model card identifies Apache License 2.0. See the [pinned model card](https://huggingface.co/Qwen/Qwen3.8-27B/blob/1d4bf0f2ff6012fd82039f2fa52739d0dd7c60c0/README.md) and [license](https://huggingface.co/Qwen/Qwen3.8-27B/blob/1d4bf0f2ff6012fd82039f2fa52739d0dd7c60c0/LICENSE).

The original [LICENSE](image_root/app/artifacts/q38_base/LICENSE) is included with SHA-256 `bbedc3fda3305820b977265f01b8619d87570a6739de3a5582c3464840f1e57a`, together with the [upstream README](image_root/app/artifacts/q38_base/README.md). [MODIFICATIONS.md](MODIFICATIONS.md) describes the team's quantization and Dense48/Point320 adaptations. Upstream attribution remains applicable to those components.

## OWLv2 detector

The auxiliary detector is **google/owlv2-large-patch14-ensemble**, revision `95e26936e865f87db1742128404b3c035d47d89d`. Its [pinned Google model card](https://huggingface.co/google/owlv2-large-patch14-ensemble/blob/95e26936e865f87db1742128404b3c035d47d89d/README.md) identifies Apache License 2.0 and cites the OWL-ViT/OWLv2 work. The independently retrieved card matches the cached copy, SHA-256 `a2e10c3916166f08eaf2ab43ca1eb63c6116df228dea655c56e4c8e1607ecfe9`.

Both verified cached weight formats and their metadata are included. [MODEL_ALIASES.json](MODEL_ALIASES.json) records the relative cache links so that each physical file is stored once.

## Runtime software

The reference image uses PyTorch, Transformers, PEFT, bitsandbytes, Accelerate, safetensors, tokenizers, Hugging Face Hub, Pillow and PyAV. [EXACT_DEPENDENCIES.json](EXACT_DEPENDENCIES.json) records the installed versions. Each package retains its applicable license and notices. This repository provides extracted model assets and serving source, not the complete Python/CUDA environment.

The original image also contains inactive Qwen3-VL-8B weights, older adapters/checkpoints and optimizer files. [ASSET_MANIFEST.json](ASSET_MANIFEST.json) classifies these separately; they are excluded from the selected HF assets and are not active bases in the published loader.

## Data-derived assets

Six training/annotation-derived prior and statistic JSON files are included with the runtime. Their source-specific restrictions are documented in [DATA_PROVENANCE.md](DATA_PROVENANCE.md) and [LICENSE_PROVENANCE.md](LICENSE_PROVENANCE.md). Base-model licenses do not grant rights to private datasets. Private media and per-question evaluation records are excluded; original unit-test fixtures may remain in the preserved source.