Assay third-party notices

Original Assay code is dual-licensed MIT OR Apache-2.0. Third-party
components retain their own licenses. The Cargo lockfiles pin exact versions
and registry checksums; the adjacent dependency inventory records declared
licenses, not a relicensing of those packages. Source builds retrieve their
original notices from the upstream packages. Distributed binary wheels must
retain applicable dependency license and notice text.

Apache Arrow and Parquet: Apache-2.0, Apache Software Foundation.
SQLite sqllogictest corpus: official upstream frozen check-in
ab599cbdd0976a63c5cfc7755588f716a7621f27; fetched separately with its
license/source hashes, not bundled as benchmark data. SQLite source is
public domain; corpus files retain their original notices.
Benchmark reference engines and optional Python integrations are separate
packages: DuckDB (MIT), Polars (MIT), DataFusion and PyArrow (Apache-2.0),
pandas (BSD-3-Clause). No upstream engine executes Assay SQL as a fallback.
See benchmark source manifests for generator/query provenance.

Contributor Covenant 2.1: Coraline Ada Ehmke and contributors, CC-BY-4.0.
CODE_OF_CONDUCT.md retains upstream attribution and adds a draft notice and
project reporting route. This policy text is not relicensed MIT/Apache.
Source: https://www.contributor-covenant.org/version/2/1/code_of_conduct/
License: https://creativecommons.org/licenses/by/4.0/
