# TRAKCAST FFmpeg compliance bundle

TRAKCAST invokes FFmpeg as a separate executable through bounded PCM stdin and MP3 stdout pipes. TRAKCAST does not link FFmpeg libraries into its proprietary application code, and inclusion of this executable does not claim that TRAKCAST itself is licensed under the LGPL.

The shipped encoders are thin, architecture-specific builds of FFmpeg 7.1.1 with LAME 3.100 for macOS arm64 and x86_64. Each app contains only its matching encoder. They report `LGPL version 2.1 or later`; neither `--enable-gpl` nor `--enable-nonfree` is enabled. LAME is statically included solely to provide the `libmp3lame` encoder. The corresponding license texts are in `licenses/`.

Exact source, archive, and binary SHA-256 values are recorded in `manifest.json`. Obtain the corresponding source using the HTTPS URLs in that manifest, verify each archive with `shasum -a 256`, then run `scripts/build-macos-arm64.sh` or `scripts/build-macos-x64.sh` from the repository root. The scripts pin the compiler and SDK and fail if the output hash changes. No patches are applied.

The release website must host the exact corresponding FFmpeg and LAME source archives alongside the TRAKCAST download, or link to TRAKCAST-hosted copies that remain available for the required compliance period. See `website-download-notice.html` for the prepared download-page notice. This bundle implements an engineering compliance baseline and is not final legal advice or approval.