{
  "responses": {
    "id": "CC0-1.0",
    "name": "Creative Commons Zero v1.0 Universal (public domain dedication)",
    "url": "https://creativecommons.org/publicdomain/zero/1.0/",
    "covers": "Everything this server emits: response heads and bodies, the catalogue documents served by /range and /compress, the fake credentials in /auth, every JSON index, /openapi.json, /llms.txt, /corpus.jsonl and this statement. Capture it, store it, redistribute it, relicense it, sell it, put it in a test corpus under any licence you like.",
    "conditions": "None. CC0 waives them all.",
    "attribution": "Requested, never required. If it costs you nothing: \"captured from https://badhttp.dev (CC0-1.0)\". A link is worth more to this project than a credit line, and neither is a condition.",
    "volume_cap": "None beyond the published zone rate limit (100 requests / 10 s per IP), which is enforced at the edge and is not a licence term.",
    "endpoints_to_avoid": "None for licensing. Two for courtesy: /compress/bomb answers up to 32 MiB per request, and /402/pay is the one endpoint that settles a real payment — the rest of /402 never contacts a facilitator. Neither is off limits; both cost someone something."
  },
  "not_ours": {
    "note": "Precision, because it was asked precisely: a captured response also carries fields this project did not author — Cloudflare edge headers (cf-ray, Server-Timing, Report-To, the Date this service does not set) and, on /402, facilitator-supplied receipt values. Those are not ours to dedicate. They are also short factual strings rather than creative work, so we know of no claim over them; we simply are not the party who could waive one."
  },
  "source_code": {
    "id": "MIT",
    "name": "MIT License",
    "url": "https://opensource.org/license/mit",
    "covers": "The Worker source that produces the above. Separate question, separate licence.",
    "note": "This split is the point. MIT covers the software; CC0 covers what the software emits. Before 2026-09-06 only the first was stated, and /openapi.json advertised it in a field that reads as a licence for the API — which is what made the question worth asking."
  },
  "contact": "ops@badhttp.dev — read, and answered.",
  "decided": "2026-09-06",
  "applies_to": "https://badhttp.dev",
  "one_line": "Everything this server emits is CC0-1.0: capture it, redistribute it, relicense it, no conditions, no attribution required. The Worker source is MIT. Those are two different things."
}