heavyai · misiugodfrey · Jun 10, 2026 · Jun 11, 2026 · Jun 11, 2026 · Jun 15, 2026
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -0,0 +1,14 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+repos:
+  # Insert/maintain the NVIDIA SPDX header.
+  - repo: https://github.com/rapidsai/pre-commit-hooks
+    rev: v1.5.1
+    hooks:
+      - id: verify-copyright
+        args: [--fix, --spdx]
+        files: |
+          (?x)
+            [.](py|sh)$
+
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,40 @@
+# Security
+
+## Reporting Security Issues
+
+> [!WARNING]
+> Do not report security vulnerabilities through public GitHub issues!
+
+Instead, please submit a private vulnerability report, see below.
+
+## Reporting a Vulnerability
+
+1. **NVIDIA Vulnerability Disclosure Program (preferred)**
+   Submit through the NVIDIA Product Security Incident Response Team (PSIRT) web form (<https://www.nvidia.com/en-us/security/report-vulnerability/>)
+   This is the fastest path to triage and tracking.
+
+2. **Email NVIDIA PSIRT**
+   `psirt@nvidia.com` — encrypt sensitive reports with the
+   [NVIDIA PSIRT PGP key](https://www.nvidia.com/en-us/security/pgp-key).
+
+3. **GitHub Private Vulnerability Reporting**
+   Use the **Security and quality** tab on this repository → *Report a vulnerability*.
+
+## Report Details
+
+We prefer all communications to be in English.
+
+Reports should include the following:
+
+* reproducible example showing how the vulnerability can be exploited
+* statement about the impact (including affected versions)
+
+And we'd appreciate if they also include:
+
+* statement about whether you are interested in implementing the fix yourself
+
+## Disclosure Policy
+
+NVIDIA PSIRT will acknowledge receipt and coordinate triage, fix development, and coordinated disclosure.
+
+More on NVIDIA's response process: <https://www.nvidia.com/en-us/security/psirt-policies/>.
diff --git a/doc/_ext/numbadoc.py b/doc/_ext/numbadoc.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """
 Based on https://github.com/numba/numba/issues/5755
 """

diff --git a/doc/conf.py b/doc/conf.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 # flake8: noqa
 
 # Configuration file for the Sphinx documentation builder.

diff --git a/notebooks/util.py b/notebooks/util.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 from rbc.tests import test_classes
 
 

diff --git a/notebooks/utils.py b/notebooks/utils.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 from rbc.tests import test_classes
 
 

diff --git a/rbc/__init__.py b/rbc/__init__.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 import os
 os.environ["NUMBA_CAPTURED_ERRORS"] = "new_style"
 os.environ["NUMBA_LOOP_VECTORIZE"] = "0"

diff --git a/rbc/_version.py b/rbc/_version.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 
 # This file helps to compute a version number in source trees obtained from
 # git-archive tarball (such as those provided by githubs download-from-tag

diff --git a/rbc/config.py b/rbc/config.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 import os
 
 

diff --git a/rbc/ctools.py b/rbc/ctools.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 __all__ = ['Compiler']
 
 import os

diff --git a/rbc/errors.py b/rbc/errors.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """
 rbc-specific errors and warnings.
 """

diff --git a/rbc/external.py b/rbc/external.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Low-level intrinsics to expose external functions
 """
 

diff --git a/rbc/externals/__init__.py b/rbc/externals/__init__.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 import inspect
 from rbc.targetinfo import TargetInfo
 from numba.core import funcdesc

diff --git a/rbc/externals/cmath.py b/rbc/externals/cmath.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """https://en.cppreference.com/w/c/numeric/math
 """
 

diff --git a/rbc/externals/heavydb.py b/rbc/externals/heavydb.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """External functions defined by the HeavyDB server
 """
 

diff --git a/rbc/externals/libdevice.py b/rbc/externals/libdevice.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """https://docs.nvidia.com/cuda/libdevice-users-guide/index.html
 """
 

diff --git a/rbc/externals/macros.py b/rbc/externals/macros.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """This module provides the following tools:
 
 Intrinsics:

diff --git a/rbc/externals/stdio.py b/rbc/externals/stdio.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """https://en.cppreference.com/w/c/io
 """
 

diff --git a/rbc/heavydb/__init__.py b/rbc/heavydb/__init__.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 from .array import *  # noqa: F401, F403
 from .allocator import *  # noqa: F401, F403
 from .column import *  # noqa: F401, F403

diff --git a/rbc/heavydb/allocator.py b/rbc/heavydb/allocator.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 __all__ = ['allocate_varlen_buffer']
 
 from numba.core import cgutils

diff --git a/rbc/heavydb/array.py b/rbc/heavydb/array.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement HeavyDB Array type support
 """
 

diff --git a/rbc/heavydb/buffer.py b/rbc/heavydb/buffer.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement Buffer type as a base class to HeavyDB Array and Column types.
 
 HeavyDB Buffer represents the following structure:

diff --git a/rbc/heavydb/column.py b/rbc/heavydb/column.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement Heavydb Column type support
 
 Heavydb Column type is the type of input/output column arguments in

diff --git a/rbc/heavydb/column_array.py b/rbc/heavydb/column_array.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 
 """Implement Heavydb Column<Array<T>> type support
 

diff --git a/rbc/heavydb/column_flatbuffer.py b/rbc/heavydb/column_flatbuffer.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """
 Base class for Column<Geo*> types
 """

diff --git a/rbc/heavydb/column_geolinestring.py b/rbc/heavydb/column_geolinestring.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement Heavydb Column<GeoLineString> type support
 
 Heavydb Column<GeoLineString> type is the type of input/output column arguments in

diff --git a/rbc/heavydb/column_geomultilinestring.py b/rbc/heavydb/column_geomultilinestring.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement Heavydb Column<GeoMultiLineString> type support
 
 Heavydb Column<GeoMultiLineString> type is the type of input/output column arguments in

diff --git a/rbc/heavydb/column_geomultipoint.py b/rbc/heavydb/column_geomultipoint.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement Heavydb Column<GeoMultiPoint> type support
 
 Heavydb Column<GeoMultiPoint> type is the type of input/output column arguments in

diff --git a/rbc/heavydb/column_geomultipolygon.py b/rbc/heavydb/column_geomultipolygon.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement Heavydb Column<GeoMultiPolygon> type support
 
 Heavydb Column<GeoMultiPolygon> type is the type of input/output column arguments in

diff --git a/rbc/heavydb/column_geopoint.py b/rbc/heavydb/column_geopoint.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement Heavydb Column<GeoPoint> type support
 
 Heavydb Column<GeoPoint> type is the type of input/output column arguments in

diff --git a/rbc/heavydb/column_geopolygon.py b/rbc/heavydb/column_geopolygon.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement Heavydb Column<GeoPolygon> type support
 
 Heavydb Column<GeoPolygon> type is the type of input/output column arguments in

diff --git a/rbc/heavydb/column_list.py b/rbc/heavydb/column_list.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 __all__ = ['HeavyDBColumnListType', 'ColumnList']
 
 

diff --git a/rbc/heavydb/column_list_array.py b/rbc/heavydb/column_list_array.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 
 """Implement Heavydb Column<Array<T>> type support
 

diff --git a/rbc/heavydb/column_text_encoding_none.py b/rbc/heavydb/column_text_encoding_none.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implement Heavydb Column<TextEncodingNone> type support
 
 Heavydb Column<TextEncodingNone> type is the type of input/output column arguments in

diff --git a/rbc/heavydb/day_time_interval.py b/rbc/heavydb/day_time_interval.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """RBC DayTimeInterval type."""
 import operator
 from rbc import typesystem

diff --git a/rbc/heavydb/flatbuffer_text_encoding_none.py b/rbc/heavydb/flatbuffer_text_encoding_none.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """RBC FlatBuffer_TextEncodingNone type that corresponds to HeavyDB type
 flatbuffer::TextEncodingNone.
 """

diff --git a/rbc/heavydb/geo_nested_array.py b/rbc/heavydb/geo_nested_array.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """
 Base classes for GEO types
 """

diff --git a/rbc/heavydb/geolinestring.py b/rbc/heavydb/geolinestring.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """RBC GeoLineString type that corresponds to HeavyDB type GEOLINESTRING.
 """
 

diff --git a/rbc/heavydb/geomultilinestring.py b/rbc/heavydb/geomultilinestring.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """RBC GeoMultiLineString type that corresponds to HeavyDB type GeoMultiLineString.
 """
 

diff --git a/rbc/heavydb/geomultipoint.py b/rbc/heavydb/geomultipoint.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """RBC GeoMultiPoint type that corresponds to HeavyDB type GeoMultiPoint.
 """
 

diff --git a/rbc/heavydb/geomultipolygon.py b/rbc/heavydb/geomultipolygon.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """RBC GeoMultiPolygon type that corresponds to HeavyDB type GeoMultiPolygon.
 """
 

diff --git a/rbc/heavydb/geopoint.py b/rbc/heavydb/geopoint.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """RBC GeoPoint type that corresponds to HeavyDB type GEOPOINT.
 """
 

diff --git a/rbc/heavydb/geopolygon.py b/rbc/heavydb/geopolygon.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """RBC GeoPolygon type that corresponds to HeavyDB type GeoPolygon.
 """
 

diff --git a/rbc/heavydb/mathimpl.py b/rbc/heavydb/mathimpl.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 import math
 from rbc.externals import gen_codegen, dispatch_codegen
 from numba.core.typing.templates import infer_global

diff --git a/rbc/heavydb/metatype.py b/rbc/heavydb/metatype.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """Implements type meta
 """
 

diff --git a/rbc/heavydb/npyimpl.py b/rbc/heavydb/npyimpl.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 import numpy as np
 from llvmlite import ir
 from rbc.externals import gen_codegen, dispatch_codegen

diff --git a/rbc/heavydb/opaque_pointer.py b/rbc/heavydb/opaque_pointer.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """
 Implements a common interface for pointers to structs defined in HeavyDB.
     + TableFunctionManager

diff --git a/rbc/heavydb/pipeline.py b/rbc/heavydb/pipeline.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 from numba.core import ir
 from numba.core.compiler import CompilerBase, DefaultPassBuilder
 from numba.core.compiler_machinery import FunctionPass, register_pass

diff --git a/rbc/heavydb/point2d.py b/rbc/heavydb/point2d.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 
 '''RBC Point2D type.
 '''

diff --git a/rbc/heavydb/python_operators.py b/rbc/heavydb/python_operators.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 import operator
 from llvmlite import ir
 from .array import ArrayPointer, Array

diff --git a/rbc/heavydb/remoteheavydb.py b/rbc/heavydb/remoteheavydb.py
@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
 """HeavyDB client config functions
 """