just got a 15 page document from a 'regulatory expert' explaining why my open source project needs