maybe we just need License-Aware Vibe Coding that can link back to code snippet provenance similar to SBOMs?