Thinking about this some more, it probably makes sense for Tor to contact the software freedom law center at
http://www.softwarefreedom.org/ help _at_ softwarefreedom _dot_ org directly. Helping with this kind of stuff is an explicit part of their mission. Everything that happens e.g. after a CLA / grant is signed is then part of what Apache has all the right things in place for to take care of. cheers, Leo
