{"course":{"slug":"hugging-face","title":"Hugging Face, End to End","url":"https://addaly.com/learn/hugging-face","level":"intermediate","track":"create"},"lesson":{"slug":"licences-in-practice","title":"What the licence tag does and does not settle","url":"https://addaly.com/learn/hugging-face/licences-in-practice","position":67,"of":75,"minutes":10,"answer":"A fine-tune inherits its base model's terms however its own tag reads, so licence checking means following base_model to the root, and the questions the licence does not answer, about training data and output ownership.","keyIdea":"A fine-tune inherits its base model's terms however its own tag reads, so licence checking means following `base_model` to the root, and the questions the licence does not answer, about training data and output ownership, are genuinely unresolved and differ by country rather than merely being undocumented."},"body":{"format":"markdown","text":"## Four families, and what separates them\n\n**Permissive open-source**: Apache 2.0, MIT, BSD. Commercial use, modification and redistribution allowed. Apache 2.0 adds an express patent grant and requires you to keep the notice; MIT is shorter and does neither. For a model you want to build a business on, this is the clean case. Qwen, Mistral's open releases, Whisper, most BERT-family models and a large share of the Hub sit here.\n\n**Copyleft**: GPL, AGPL, and in the model world occasionally applied to code rather than weights. These require derivative works to carry the same licence. AGPL extends that to software offered over a network, which matters for a hosted service. Uncommon for weights, common for the tooling around them, and worth reading when a serving stack you depend on carries it.\n\n**Open weights with conditions**: the Llama community licence, Gemma's terms, and several others. The weights are downloadable and the terms are not open-source by the usual definition. Typical conditions: acceptable-use policies that forbid certain applications, naming requirements for derivatives, and in Llama's case a threshold on monthly active users above which you must ask permission. Most people never reach the threshold; you should still know it exists before you build on it.\n\n**Non-commercial and research-only**: `cc-by-nc-4.0`, bespoke research licences. Fine for learning and for a demo, not for anything that earns money, including internally at a company. This is the trap people fall into, because the model is downloadable and works perfectly.\n\n> Figure: Four licence families, and what separates them. Layers, top to bottom: Permissive: Apache-2.0, MIT, BSD (Commercial use, modification, redistribution. Keep the notice.); Copyleft: GPL, AGPL (Derivatives carry the same terms; AGPL reaches a hosted service.); Open weights with conditions (Use policies, naming rules for derivatives, a monthly user threshold.); Non-commercial and research-only (Downloadable, excellent, and may not earn money, including internally.). And the rule that overrides all four: a fine-tune inherits its base model's terms whatever its own tag reads, so the check is to follow base_model until you reach a repository with no parent. Nothing here is legal advice, and the questions about training data and output ownership are genuinely unresolved.\n\n## The inheritance rule\n\nThe one thing to carry from this lesson:\n\n> **A fine-tune inherits its base model's terms, whatever its own card says.**\n\nAn adapter trained on a non-commercially licensed model is a derivative work of that model. Somebody tagging their repository `apache-2.0` does not change what the base permits, and they frequently do tag it that way: sometimes carelessly, sometimes because they believe a LoRA is a separate artefact.\n\nSo the check is always two-step: read the model's licence, then follow `base_model` and read that one, and keep following until you reach something with no parent. The Hub's model tree makes this a few clicks.\n\nThis applies to data too. A model fine-tuned on outputs generated by a commercial API may be restricted by that API's terms of service, which several providers have written to forbid using their output to train competing models. Whether such a clause is enforceable, and against whom, is not settled, which is exactly why a card should disclose it rather than stay silent.\n\n## What the licence does not cover\n\n**The training data.** A permissively licensed model may have been trained on material whose status is contested. The model's licence is a grant from whoever trained it about the weights they hold. It is not a warranty about what went into them, and almost no card claims otherwise.\n\n**The outputs.** Whether text or images a model generates can be copyrighted, by whom, and whether they can infringe something in the training data, is unresolved and differs by jurisdiction. Some offices have said works without human authorship are not protected; others differ; litigation is ongoing in several countries. Anyone who tells you this is settled is describing one jurisdiction's current position as though it were universal.\n\n**Your use case.** An acceptable-use policy can forbid an application the licence would otherwise permit.\n\n## Where the disagreement actually sits\n\nIt is worth naming the shape of it rather than pretending there is an answer.\n\nOne side holds that training on lawfully accessed material is a transformative, non-expressive use, closer to reading than to copying, and that requiring permission for every work would make the technology impossible. The other holds that copying at scale for commercial gain is not excused by the output being different, and that creators whose work made the model possible are entitled to consent and compensation. Several countries have text-and-data-mining exceptions, usually with conditions such as lawful access and a right for rightsholders to opt out. Others have no such provision. Courts in more than one jurisdiction are actively deciding cases as this is written.\n\nThis course cannot resolve that and will not pretend to. **Nothing here is legal advice.** What it can tell you is what a practitioner should do: record what you used and under what terms, read the base model's licence rather than the fine-tune's tag, and ask a lawyer in your own country before you stake a business on an interpretation.\n\n## The practical checklist\n\nBefore building on a model commercially:\n\n1. Read the licence file in the repository, not the tag on the page.\n2. Follow `base_model` to the root and read that licence too.\n3. Look for an acceptable-use policy: often a separate file or a linked page.\n4. Check for user or revenue thresholds.\n5. Check any datasets you fine-tune on, with the same two-step rule.\n6. Write down what you found, with dates and links. Licences change between versions, and the version you downloaded is the one you agreed to.\n7. For anything material, ask a lawyer. The cost of an hour of advice is small against the cost of rebuilding.\n\n## And the free path\n\nIf licence uncertainty is blocking you, there is almost always a permissively licensed alternative within a few points of quality. Apache 2.0 models exist at every size, for almost every task. Choosing one is often cheaper than resolving the question.\n\n## Do this now\n\nTake the model you are most likely to build on, open its actual `LICENSE` file, and follow `base_model` until you reach a repository with no parent. Note every condition you find. This takes five minutes and it is the difference between a decision and an assumption."},"check":{"question":"A repository tagged `apache-2.0` declares `base_model` as a model released under a non-commercial research licence. What follows?","options":[{"text":"The derivative is bound by the base model's restrictions regardless of its own tag.","correct":true},{"text":"The adapter's own weights are original work, so the permissive tag governs everything the author created.","correct":false,"tempting":"Treats an adapter as separable when it is a derivative that cannot function without the restricted base."},{"text":"Whichever licence is more recent takes precedence, so the fine-tune's terms supersede the base model's.","correct":false,"tempting":"Invents a recency rule; licensing is not chronological."},{"text":"The tags conflict, so no licence applies and the work falls into the public domain by default.","correct":false,"tempting":"Absence of a valid grant means fewer permissions, never more."}]},"prev":{"slug":"tokens-and-gates","title":"A token in a public Space is a token you have given away","url":"https://addaly.com/learn/hugging-face/tokens-and-gates"},"next":{"slug":"leaderboards-lie-a-little","title":"The leaderboard is not measuring your task","url":"https://addaly.com/learn/hugging-face/leaderboards-lie-a-little"},"authorship":"Founder and series editor: Dr Mustafa Mun. Written by AI models to a written standard. Exam keys checked blind by a second model: 3,665 of 3,666 agreed. Academic review invited.","review":{"status":"Draft, open for academic review"},"cite":"Addaly (2026) 'What the licence tag does and does not settle', in Hugging Face, End to End. Edited by M. Mun. Addaly. Available at: https://addaly.com/learn/hugging-face/licences-in-practice (Accessed: 13 October 2026).","licence":{"name":"CC BY-NC-SA 4.0","url":"https://creativecommons.org/licenses/by-nc-sa/4.0/"},"reader":{"schema":1,"title":"What the licence tag does and does not settle","courseTitle":"Hugging Face, End to End","module":{"index":8,"slug":"depending-on-it-and-publishing","title":"Depending on it, and publishing so others can"},"answer":null,"keyIdea":"A fine-tune inherits its base model’s terms however its own tag reads, so licence checking means following `base_model` to the root, and the questions the licence does not answer, about training data and output ownership, are genuinely unresolved and differ by country rather than merely being undocumented.","hero":{"kind":"figure","figure":{"t":"figure","label":"Figure","figure":{"type":"stack","title":"Four licence families, and what separates them","layers":[{"label":"Permissive: Apache-2.0, MIT, BSD","detail":"Commercial use, modification, redistribution. Keep the notice."},{"label":"Copyleft: GPL, AGPL","detail":"Derivatives carry the same terms; AGPL reaches a hosted service."},{"label":"Open weights with conditions","detail":"Use policies, naming rules for derivatives, a monthly user threshold."},{"label":"Non-commercial and research-only","detail":"Downloadable, excellent, and may not earn money, including internally."}],"caption":"And the rule that overrides all four: a fine-tune inherits its base model’s terms whatever its own tag reads, so the check is to follow base_model until you reach a repository with no parent. Nothing here is legal advice, and the questions about training data and output ownership are genuinely unresolved."},"alt":"Figure: Four licence families, and what separates them. Layers, top to bottom: Permissive: Apache-2.0, MIT, BSD (Commercial use, modification, redistribution. Keep the notice.); Copyleft: GPL, AGPL (Derivatives carry the same terms; AGPL reaches a hosted service.); Open weights with conditions (Use policies, naming rules for derivatives, a monthly user threshold.); Non-commercial and research-only (Downloadable, excellent, and may not earn money, including internally.). And the rule that overrides all four: a fine-tune inherits its base model’s terms whatever its own tag reads, so the check is to follow base_model until you reach a repository with no parent. Nothing here is legal advice, and the questions about training data and output ownership are genuinely unresolved."}},"blocks":[{"t":"h2","id":"four-families-and-what-separates-them","runs":[{"text":"Four families, and what separates them"}]},{"t":"p","runs":[{"text":"Permissive open-source","b":true},{"text":": Apache 2.0, MIT, BSD. Commercial use, modification and redistribution allowed. Apache 2.0 adds an express patent grant and requires you to keep the notice; MIT is shorter and does neither. For a model you want to build a business on, this is the clean case. Qwen, Mistral’s open releases, Whisper, most BERT-family models and a large share of the Hub sit here."}]},{"t":"p","runs":[{"text":"Copyleft","b":true},{"text":": GPL, AGPL, and in the model world occasionally applied to code rather than weights. These require derivative works to carry the same licence. AGPL extends that to software offered over a network, which matters for a hosted service. Uncommon for weights, common for the tooling around them, and worth reading when a serving stack you depend on carries it."}]},{"t":"p","runs":[{"text":"Open weights with conditions","b":true},{"text":": the Llama community licence, Gemma’s terms, and several others. The weights are downloadable and the terms are not open-source by the usual definition. Typical conditions: acceptable-use policies that forbid certain applications, naming requirements for derivatives, and in Llama’s case a threshold on monthly active users above which you must ask permission. Most people never reach the threshold; you should still know it exists before you build on it."}]},{"t":"p","runs":[{"text":"Non-commercial and research-only","b":true},{"text":": "},{"text":"cc-by-nc-4.0","code":true},{"text":", bespoke research licences. Fine for learning and for a demo, not for anything that earns money, including internally at a company. This is the trap people fall into, because the model is downloadable and works perfectly."}]},{"t":"h2","id":"the-inheritance-rule","runs":[{"text":"The inheritance rule"}]},{"t":"p","runs":[{"text":"The one thing to carry from this lesson:"}]},{"t":"quote","runs":[{"text":"A fine-tune inherits its base model’s terms, whatever its own card says.","b":true}]},{"t":"p","runs":[{"text":"An adapter trained on a non-commercially licensed model is a derivative work of that model. Somebody tagging their repository "},{"text":"apache-2.0","code":true},{"text":" does not change what the base permits, and they frequently do tag it that way: sometimes carelessly, sometimes because they believe a LoRA is a separate artefact."}]},{"t":"p","runs":[{"text":"So the check is always two-step: read the model’s licence, then follow "},{"text":"base_model","code":true},{"text":" and read that one, and keep following until you reach something with no parent. The Hub’s model tree makes this a few clicks."}]},{"t":"p","runs":[{"text":"This applies to data too. A model fine-tuned on outputs generated by a commercial API may be restricted by that API’s terms of service, which several providers have written to forbid using their output to train competing models. Whether such a clause is enforceable, and against whom, is not settled, which is exactly why a card should disclose it rather than stay silent."}]},{"t":"h2","id":"what-the-licence-does-not-cover","runs":[{"text":"What the licence does not cover"}]},{"t":"p","runs":[{"text":"The training data.","b":true},{"text":" A permissively licensed model may have been trained on material whose status is contested. The model’s licence is a grant from whoever trained it about the weights they hold. It is not a warranty about what went into them, and almost no card claims otherwise."}]},{"t":"p","runs":[{"text":"The outputs.","b":true},{"text":" Whether text or images a model generates can be copyrighted, by whom, and whether they can infringe something in the training data, is unresolved and differs by jurisdiction. Some offices have said works without human authorship are not protected; others differ; litigation is ongoing in several countries. Anyone who tells you this is settled is describing one jurisdiction’s current position as though it were universal."}]},{"t":"p","runs":[{"text":"Your use case.","b":true},{"text":" An acceptable-use policy can forbid an application the licence would otherwise permit."}]},{"t":"h2","id":"where-the-disagreement-actually-sits","runs":[{"text":"Where the disagreement actually sits"}]},{"t":"p","runs":[{"text":"It is worth naming the shape of it rather than pretending there is an answer."}]},{"t":"p","runs":[{"text":"One side holds that training on lawfully accessed material is a transformative, non-expressive use, closer to reading than to copying, and that requiring permission for every work would make the technology impossible. The other holds that copying at scale for commercial gain is not excused by the output being different, and that creators whose work made the model possible are entitled to consent and compensation. Several countries have text-and-data-mining exceptions, usually with conditions such as lawful access and a right for rightsholders to opt out. Others have no such provision. Courts in more than one jurisdiction are actively deciding cases as this is written."}]},{"t":"p","runs":[{"text":"This course cannot resolve that and will not pretend to. "},{"text":"Nothing here is legal advice.","b":true},{"text":" What it can tell you is what a practitioner should do: record what you used and under what terms, read the base model’s licence rather than the fine-tune’s tag, and ask a lawyer in your own country before you stake a business on an interpretation."}]},{"t":"h2","id":"the-practical-checklist","runs":[{"text":"The practical checklist"}]},{"t":"p","runs":[{"text":"Before building on a model commercially:"}]},{"t":"ol","start":1,"items":[[{"text":"Read the licence file in the repository, not the tag on the page."}],[{"text":"Follow "},{"text":"base_model","code":true},{"text":" to the root and read that licence too."}],[{"text":"Look for an acceptable-use policy: often a separate file or a linked page."}],[{"text":"Check for user or revenue thresholds."}],[{"text":"Check any datasets you fine-tune on, with the same two-step rule."}],[{"text":"Write down what you found, with dates and links. Licences change between versions, and the version you downloaded is the one you agreed to."}],[{"text":"For anything material, ask a lawyer. The cost of an hour of advice is small against the cost of rebuilding."}]]},{"t":"h2","id":"and-the-free-path","runs":[{"text":"And the free path"}]},{"t":"p","runs":[{"text":"If licence uncertainty is blocking you, there is almost always a permissively licensed alternative within a few points of quality. Apache 2.0 models exist at every size, for almost every task. Choosing one is often cheaper than resolving the question."}]},{"t":"h2","id":"do-this-now","runs":[{"text":"Do this now"}],"role":"try"},{"t":"p","runs":[{"text":"Take the model you are most likely to build on, open its actual "},{"text":"LICENSE","code":true},{"text":" file, and follow "},{"text":"base_model","code":true},{"text":" until you reach a repository with no parent. Note every condition you find. This takes five minutes and it is the difference between a decision and an assumption."}]}],"check":{"question":[{"text":"A repository tagged "},{"text":"apache-2.0","code":true},{"text":" declares "},{"text":"base_model","code":true},{"text":" as a model released under a non-commercial research licence. What follows?"}],"options":[{"text":[{"text":"The derivative is bound by the base model’s restrictions regardless of its own tag."}],"correct":true,"tempting":null},{"text":[{"text":"The adapter’s own weights are original work, so the permissive tag governs everything the author created."}],"correct":false,"tempting":[{"text":"Treats an adapter as separable when it is a derivative that cannot function without the restricted base."}]},{"text":[{"text":"Whichever licence is more recent takes precedence, so the fine-tune’s terms supersede the base model’s."}],"correct":false,"tempting":[{"text":"Invents a recency rule; licensing is not chronological."}]},{"text":[{"text":"The tags conflict, so no licence applies and the work falls into the public domain by default."}],"correct":false,"tempting":[{"text":"Absence of a valid grant means fewer permissions, never more."}]}],"order":[3,2,0,1],"why":null},"prev":{"slug":"tokens-and-gates","title":"A token in a public Space is a token you have given away","minutes":8},"next":{"slug":"leaderboards-lie-a-little","title":"The leaderboard is not measuring your task","minutes":9}}}