Remove application license gate

docs/APP_LICENSE_REMOVAL_AUDIT_20260702.md

@@ -0,0 +1,32 @@
+# Application License Removal Audit
+
+Date: 2026-07-02
+
+## Decision
+
+The application-level offline license gate has been removed. The system now relies on login sessions, role checks, audit logging, deployment network controls, and operation-level guards. LandSAR vendor license configuration is not part of this removal and remains required for LandSAR production runtimes.
+
+## Removed Scope
+
+- Global FastAPI license dependency and `/api/license/*` routes.
+- Backend LIC2 verification service and bundled license issuer tools.
+- Frontend license status store fields, license overlay, login-page license warning, and header license chip.
+- Deployment example variable `LICENSE_PATH`.
+- Audit-log display labels for removed license upload/refresh actions.
+
+## Preserved Scope
+
+- User authentication and session cookie flow.
+- Admin versus read-only write protection.
+- High-risk write audit logging.
+- LandSAR runtime license settings such as `LANDSAR_LICENSE_MODE`, `LANDSAR_LICENSE_HOST`, and `LANDSAR_LICENSE_PORT`.
+
+## Operational Result
+
+Startup and API availability no longer depend on a local `.lic` file or issuer-generated public/private key material. Removing the gate also removes a misleading security boundary: application access control must be handled by account roles, network exposure, and deployment policy rather than a local offline license file.
+
+## Follow-up Checks
+
+- Keep `.env` and initial admin credentials out of deployable artifacts.
+- Keep LandSAR license server settings documented as vendor runtime requirements, not application authorization.
+- Continue using the operations maintenance panel for failed task cleanup and audit review.

docs/FRONTEND_PRODUCTION_UI_REFINEMENT.md

@@ -45,7 +45,7 @@
 ## 2026-06-21 页眉与生产面板补充
 
 - 页眉移除 DB、Worker、IDL、Ollama、Nginx 等运行状态灯，系统健康状态集中放在“运行维护”模块。
-- 页眉改为单位 logo、单位名称、系统名称、授权摘要、任务摘要和用户操作。
+- 页眉改为单位 logo、单位名称、系统名称、任务摘要和用户操作。
 - 单位名、系统名、页眉标语和 logo URL 支持通过 `VITE_APP_*` 环境变量配置，默认使用 `frontend/src/logo.jpg`。
 - 新增 `PRODUCT.md`，记录系统面向科研工程单位的产品定位：科研、专业、克制，同时要求严谨、稳定、工程化。
 - SBAS 生产面板中高曝光的 Runtime Status、Task queue、Workflow 说明文案改为中文表达，保留必要英文术语。