I was at IBM around the time of the SCO lawsuit and had to help out with blue washing a few projects. It was also around that time that there had been some high

I was at IBM around the time of the SCO lawsuit and had to help out with blue washing a few projects. It was also around that time that there had been some high-profile cases of GPL code getting shipped accidentally. We had a tool that basically grepped through all the source for keywords like "Copyright", "License", or "GPL", and then we had to compile a report and get the lawyers to sign off on it. It didn't seem to me to be a very thorough way of proving provenance because it relied on proper attribution.