Question 470
A developer working in a governed organization reports, the following condition is confirmed: A reviewer finds a public-code match with no detected license. What should the team do first?
Explanation
Correct Answer
Given that A reviewer finds a public-code match with no detected license, choose "Investigate repository licensing instead of treating absence as permission". Unspecified licensing requires further rights assessment. This targets the identified problem rather than a neighboring issue.
Incorrect Answers
The action "Verify effective public-code policy and reference support first" is useful when A developer wants to suppress all references without checking an enterprise rule. Policy determines whether matching outputs are blocked or referenced. Under the stated condition A reviewer finds a public-code match with no detected license, instead choose "Investigate repository licensing instead of treating absence as permission". Unspecified licensing requires further rights assessment.
The alternative "Perform ordinary provenance and security review anyway" fits another situation: A team has no matching-code reference for a long generated function. Lack of a match does not prove originality. Here the condition is A reviewer finds a public-code match with no detected license; use "Investigate repository licensing instead of treating absence as permission" instead. Unspecified licensing requires further rights assessment.
The alternative "Escalate license compatibility review before integration" addresses An accepted suggestion displays a matching public source with a copyleft license. A match may require compliance decisions beyond code behavior. It does not resolve A reviewer finds a public-code match with no detected license; the correct choice is "Investigate repository licensing instead of treating absence as permission". Unspecified licensing requires further rights assessment.