We've had this for a while now: https://github.com/open-telemetry/community/blob/main/polici...

The wording might be more or less lawyerly but the idea is fairly common, e.g. https://openinfra.org/legal/ai-policy (OpenStack).