Check every third-party input of a deliverable and issue a signed rights manifest to ship with it

Intended use: every true flag is a right the check must find documented; omitted flags are false; unknown fields are refused. For instance {"commercial_use":true,"deployment":true,"attribution_planned":true,"duration_days":365}