It looks like allison, the AFL-licensed component of merb, is *already* removed from the upstream tarball by the debian/repack.sh script. I imagine that if mention of the AFL is removed from the copyright file then we'll be all set.