Sources and license boundaries — 0.2.0
Software Sushi's original extractor application is Apache-2.0; the application license is provided with this bundle. This does not relicense the whole container. Every third-party component keeps its own retained notices, ownership and source provenance.
| Component |
Primary source and boundary |
| Tesseract 5.5.4 |
Official release, Apache-2.0. Source-built with one documented deterministic convolution-noise compatibility patch; recognition weights are unchanged. |
| Tesseract eng/spa/por weights |
tessdata_fast, Apache-2.0. Exact revisions and file SHA256 values are retained in the image manifest; no runtime downloads. |
| PP-OCRv6 small recognizer |
PaddlePaddle's pinned model revision, upstream Apache-2.0 declaration and model card retained. Source ONNX and converted artifacts are hash-verified. No fine-tuning occurred. |
| NCNN 20261020 |
Tencent's official release, retained BSD/zlib notices. A static CPU wrapper executes the crop model; its sources, build settings and ownership are retained. |
| pnnx converter |
Official release, build-only. Converter and its bundled ONNX Runtime are absent from inference. |
| TIFF 4.7.2 |
Upstream release, retained permissive notice. Source-built native library; no TIFF tools or build toolchain in inference. |
| pypdf 7.0.0 |
Official project license, BSD-3-Clause. Runtime wheel is hash-pinned. |
| pypdfium2 5.15.0 / PDFium |
Upstream licensing register. Wrapper, PDFium and complete bundled-library notices are retained; one top-level license is not a license for every bundled component. |
| Pillow 13.0.0 |
Upstream license, permissive HPND-style terms with retained bundled-library notices. |
| CPython 3.12.16 |
Python license and incorporated-software notices. The unchanged interpreter comes from the pinned official Python image; pip and its vendored notices remain separate components. |
| Ubuntu 26.04 LTS |
Ubuntu licensing policy. OS libraries keep their individual licenses, including GNU runtime/system terms. Ubuntu-owned glibc/zlib packages include vendor security updates; they are not relabeled Software Sushi packages. |
Tesseract, TIFF and the NCNN wrapper use truthful Software Sushi package revisions with dependency, source, file-integrity and copyright records. The previous custom zlib source remains a build-time diagnostic control; the current inference image uses Ubuntu's vendor-patched zlib. A pinned packaging tar is builder-only and is absent from inference. Official package metadata and complete available notices are retained; omitted upstream libc NEWS/README files were restored from the matching authenticated package.
Official invoice references
- SAT CFDI documentation: context for named Mexico XML fields; no issuer lookup, signature or statutory-validity claim.
- CONFAZ MOC7 AnnexI: historical legacy NF-e structure reviewed for the declared subset, not complete current tax-reform or DANFE conformity.
- National NFS-e technical documentation: narrow provider-issued 1.01 mapping. Official files are linked, not bundled or relicensed; the portal's CC BY-ND and separate XMLDSig W3C terms are not application licenses. The known series-regex incompatibility precludes a full reference-XSD-conformance claim.
All evaluation PDFs/XML and labels used for this release are original fictional synthetic material. No real taxpayer invoice, customer record or external bank-message corpus is redistributed. Synthetic identifiers are not issuance or authenticity evidence.
Security evidence and its limits
The final immutable release image (sha256:2fd2952929bf8f2d7be4b352528662b75d948785e69fea8ba82ed9b26264b9ac) completed ECR scanning on 8 November 2026 with no findings reported. Ubuntu 26.04 is a supported scanner OS. Vendor glibc 2.43-2ubuntu2.4 and zlib 1:1.3.dfsg+really1.3.1-1ubuntu3.2 replace the earlier Debian platform with unresolved HIGH findings; those earlier failed reports remain preserved. The exact current image passed 320 model tests, native ownership/source/integrity checks and an actual HTTP startup/invocation smoke.
ECR basic scanning covers supported OS packages; it does not establish absence of unknown vulnerabilities or clear hidden/static copies inside every wheel. Official PyPI release-advisory metadata was checked separately for the three declared Python distributions. Source/loaded-library/notice inventories and bounded-process tests provide additional engineering evidence, not blanket legal or security certification. Retain the model card's review and workload-evaluation requirements.