Acceptable Use Policy

This Acceptable Use Policy governs your use of decisionhypervisor.com (the “Site”) and any access to the DecisionHypervisor API or runtime made available to you, including under the private preview program. It supplements the Terms of Use and the API Terms of Service; where they conflict, the more restrictive rule applies.

Because DecisionHypervisor is an execution control layer that authorizes consequential actions, misuse is measured not only by harm to us but by harm to the people and systems your agents can reach.

You may not use the Site or the Service to:

• Gain unauthorized access to any system, account, network, or data, or use another party's credentials, API keys, or Execution Grants without authorization.
• Bypass, disable, degrade, or interfere with authority controls, policy evaluation, approval gates, rate limits, or audit and Decision Trace recording in any deployment.
• Circumvent or game the evaluation of an Execution Intent — for example by splitting, obfuscating, relabeling, or staging actions so that a consequential action escapes review.
• Forge, replay, or alter a Grant Token or Decision Object, or present an authorization outside the scope it was issued for.
• Plan, authorize, or execute harmful automation, fraudulent or deceptive transactions, or market manipulation.
• Introduce malicious code, or use the Service to operate malware, botnets, or denial-of-service activity.
• Exercise unauthorized control over physical systems, machinery, vehicles, or infrastructure.
• Bypass or weaken safety controls in any system that interacts with people or physical environments.
• Violate sanctions or export-control laws, or route activity through the Service to evade them.
• Exfiltrate, copy, or process data you are not entitled to access, or use the Service in violation of privacy, intellectual-property, or other third-party rights.
• Scrape, crawl, or extract Site content by automated means beyond what a search engine reasonably needs to index public pages.
• Probe, scan, or test the vulnerability of any system without our prior written authorization, except as permitted by the vulnerability disclosure policy described below.

We welcome good-faith security research conducted under our Vulnerability Disclosure Policy (/legal/vulnerability-disclosure). Research within that policy's scope and guardrails is authorized; any other probing, scanning, or exploitation testing requires prior written authorization from us.

We may investigate suspected violations, suspend or terminate access, preserve relevant records, and report unlawful activity to the appropriate authorities. We may also remove or disable any integration that puts other users or third parties at risk.

To report a violation of this policy, contact us at the address below.