I didn't have time until now to get caught up with this thread. Having gone through it a couple times, I'd like to up-level and just discuss the requirements.
I can see two possible requirements. One is ensuring that contributions are covered by an appropriate legal agreement. Another is ensuring that the auditing requirements are met for (government) security rating. Are there other requirements that I'm missing? mike