Spike for licences, entities etc

Isn't this covered by the top-level source_url for a data object?