So as a layperson, for my own clarity, the code is observable and verifiable but there are legal constraints surrounding how another person implements it in their own project, is that correct?