FastLED
diff --git a/ci/cpp_lint_cache.py b/ci/cpp_lint_cache.py
@@ -25,6 +25,8 @@
     "src/**/*.h",
     "src/**/*.hpp",
     "src/**/*.c",
+    "src/**/*.s",
+    "src/**/*.S",
     "examples/**/*.ino",
     "examples/**/*.cpp",
     "examples/**/*.h",
@@ -35,6 +37,7 @@
     "ci/lint_cpp_rs/Cargo.toml",
     "ci/lint_cpp_rs/Cargo.lock",
     "ci/lint_cpp_rs/src/**/*.rs",
+    "ci/lint_cpp_rs/file_legal_policy.yaml",
 ]
 
 
@@ -59,6 +62,7 @@ def _get_cpp_lint_patterns() -> tuple[list[str], list[str]]:
             "ci/lint_cpp_rs/Cargo.toml",
             "ci/lint_cpp_rs/Cargo.lock",
             "ci/lint_cpp_rs/src/**/*.rs",
+            "ci/lint_cpp_rs/file_legal_policy.yaml",
         ]
         for pattern in extra_includes:
             if pattern not in include:

diff --git a/ci/dependencies.json b/ci/dependencies.json
@@ -50,11 +50,14 @@
         "src/**/*.h",
         "src/**/*.hpp",
         "src/**/*.c",
+        "src/**/*.s",
+        "src/**/*.S",
         "examples/**/*.ino",
         "examples/**/*.cpp",
         "examples/**/*.h",
         "examples/**/*.hpp",
-        "ci/lint_cpp/*.py"
+        "ci/lint_cpp/*.py",
+        "ci/lint_cpp_rs/file_legal_policy.yaml"
       ],
       "tools": [
         "clang-format",

diff --git a/ci/lint_cpp/rust_binary_cache.py b/ci/lint_cpp/rust_binary_cache.py
@@ -55,6 +55,7 @@ class _BuildStreamResult:
     # here when introduced — current crate has none of those.
     "ci/lint_cpp_rs/Cargo.toml",
     "ci/lint_cpp_rs/Cargo.lock",
+    "ci/lint_cpp_rs/file_legal_policy.yaml",
 )
 _SRC_DIR = RUST_CRATE_DIR / "src"
 

diff --git a/ci/lint_cpp_rs/Cargo.lock b/ci/lint_cpp_rs/Cargo.lock
diff --git a/ci/lint_cpp_rs/Cargo.toml b/ci/lint_cpp_rs/Cargo.toml
@@ -8,11 +8,13 @@ name = "fastled-lint"
 path = "src/main.rs"
 
 [dependencies]
+blake3 = "1.8"
 glob = "0.3"
 rayon = "1.10"
 regex = "1.11"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
+serde_yaml = "0.9"
 walkdir = "2.5"
 
 # Dev profile = the production build for this lint tool. Cargo defaults

diff --git a/ci/lint_cpp_rs/deep_history_audit.sh b/ci/lint_cpp_rs/deep_history_audit.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+project_root="$(git rev-parse --show-toplevel)"
+cd "$project_root"
+
+uv run soldr --no-cache cargo test \
+  --manifest-path ci/lint_cpp_rs/Cargo.toml \
+  deep_live_history_matches_per_file_git_for_mark_and_sam \
+  -- --ignored --nocapture
diff --git a/ci/lint_cpp_rs/file_legal_policy.yaml b/ci/lint_cpp_rs/file_legal_policy.yaml
@@ -0,0 +1,32 @@
+schema: fastled-file-legal-policy/v1
+enabled: false
+# Capture every historical human author when a notice is first created. Later
+# audits preserve that reviewed holder snapshot while refreshing audit metadata;
+# a future policy version may opt into incremental holder attribution.
+attribution_mode: initial_history_snapshot
+recheck_after_days: 365
+license:
+  spdx_identifier: MIT
+  notice: |-
+    Distributed under the MIT License.
+    See LICENSE for details.
+ignored_identities:
+  - Copilot
+  - Cursor Agent
+  - copilot-swe-agent[bot]
+owners:
+  - name: Daniel Garcia
+    aliases:
+      - Dan Garcia
+      - focalintent
+      - danielgarcia
+    always: false
+  - name: Mark Kriegsman
+    aliases:
+      - kriegsman
+    always: false
+  - name: Zach Vorhies
+    aliases:
+      - Zackees
+      - Zachary Vorhies
+    always: true