Acceptable Use Policy

Version 2026-11-02.1 · Effective November 2, 2026

Safety boundaries for people, agents, repositories, credentials, and spending.

Use systems only with authority

Do not use tavya or an agent to access, test, alter, disrupt, purchase from, or communicate with systems or people unless you have authority to do so.

• No credential theft, phishing, malware, destructive payloads, or bypassing access controls.
• No unlawful surveillance, exploitation, harassment, fraud, or deceptive impersonation.
• No unauthorized vulnerability testing, spam, denial of service, or attempts to evade provider safeguards.
• No content or activity that violates applicable law or another person’s rights.

Agent permissions and spend

Use the least access and spending authority reasonably needed. Review irreversible or high-impact actions and do not use approval limits to conceal or split a prohibited transaction.

You must monitor autonomous work and promptly stop activity that behaves unexpectedly. The operator may preserve relevant audit records and suspend activity while investigating credible abuse or security reports.

Reporting

Report suspected abuse through the security/contact page. Good-faith security research must follow the disclosure instructions there.