These three proof libraries are reproduced without modification from Aave Governance V3 commit 497226efad1ca3723074034c8341fb90931fc2b2. StateProofVerifier and MerklePatriciaProofVerifier carry MIT SPDX licenses. RLPReader carries Apache-2.0 and retains Hamdi Allam's authorship and source notice.

Source repository: https://github.com/aave-dao/aave-governance-v3/tree/497226efad1ca3723074034c8341fb90931fc2b2

Upstream review of the truncated-proof correction: https://github.com/aave-dao/aave-governance-v3/blob/497226efad1ca3723074034c8341fb90931fc2b2/security/certora/reports/MerklePatriciaTrieVerifier_Fix_Review_Report.pdf

Upstream review does not audit the Longer integration. Keep the terminal-branch truncated-proof rejection and test it with positive storage proofs. These libraries validate a supplied root; Longer must independently authenticate that root to the canonical chain and enforce its own token/storage schema.

License texts: [MIT](MIT.txt) and [Apache-2.0](APACHE-2.0.txt).