Acceptable use policy

Test only what you are allowed to test

• Connect only repositories, databases, hosts and accounts you own, or that the owner has given you written permission to test.
• Agencies: hold written permission from each client for each app you connect, keep a record of it, and give it to us if we ask.
• Do not connect an app, database or account to test someone else’s systems through it.

Keep testing away from production and third parties

• Do not try to point tests, test copies or the browser agent at a production system, a live payment account or anyone else’s service.
• Do not give us live payment keys or production credentials. We refuse the ones we can recognize; that does not make others acceptable.
• Do not try to get around the sandbox’s network limits, read other customers’ data, or use our machines for anything but the run they were started for.

Use the Service as intended

• Do not resell the Service or its output, or extract it systematically to build a competing product.
• Do not overload or disrupt the Service, probe it for weaknesses outside our disclosure policy, or interfere with other customers or our providers.
• Do not use the Service for illegal content or activity, or to store or spread malware.

Keep tokens safe

• Never commit an agent token or API key to a repository, paste it into a public place, or share it outside your workspace.
• Revoke a token in Settings as soon as it may have leaked.

What happens if this policy is broken

We may warn you, revoke tokens, pause runs, or suspend or close the workspace, depending on the risk; where testing looks unauthorized we act first and explain after. We may tell the owner of a system that was tested without permission.

Report misuse of Stableship to avery@versionseven.ai.