Terms add software hardware

[gregshue]

Added proposed definitions for the following terms:

• computer hardware
• computer program
• firmware
• hardware
• information system
• software
• system

These are needed to clearly identify which definition we are using form these common terms, especially due to SPDX changing scope from Software to System.

[gregshue]

The ISO/IEC publishing of this spec considers the terms and definitions to be informative content and freely available. Are there any licensing or copyright issues with reusing publicly accessible definitions?

[zvr]

If we are to add these, all the referenced material has to be added to the list of references.

[gregshue]

If we are to add these, all the referenced material has to be added to the list of references.

I'll update the reference material once we align on definitions.

[goneall]

Reviewed on the 4 Nov 2025 tech call:

• No one objected to the definitions or inclusion of the terms - with the possible exception of the comments related to firmware
  • Note that in the comment we came up with a suggestion on how to decide which terms would be defined in the glossary
• Some discussion on the Software definition - it's inclusion of "data" - agreed after discussion it was OK - no conflict with DataSET profile

[kestewart]

Looks reasonable to me. They all have citations at this point, and I'm not seeing additional comments.

[goneall]

Discussed on 11 Nov call - approved

[kestewart]

Discussed in call. Greg to add in Normative references in separate PR.

[bact]

For IETF RFC links, try to keep it in one format:

https://datatracker.ietf.org/doc/<number>/

According to https://github.com/spdx/spdx-3-model/blob/develop/docs/format.md#writing-style