HHostingByteSoftware
Ctrl K
ComunidadGuías…

COMMERCIAL.md

Rama main · réplica de lectura del repositorio original.

Archivo original ↗Preguntar a KiBot
# Aegis Latent Core — Commercial Use and Licensing

This document states the licence boundary and what is sold from v5.0.3 forward.
It is for procurement, legal, commercial and technical buyers. It is not legal
advice, a binding offer, a warranty, a support SLA or a regulatory representation.

**Effective:** v5.0.3 · **Status:** draft for counsel review (`docs/legal/COUNSEL_QUESTIONS.md`)
**Last verified:** 2026-10-30 UTC
**Release baseline:** `v5.0.3` published 2026-10-30; the PyPI gateway distribution is published at `5.0.3`
**Licence source:** [`LICENSE`](LICENSE) · **Attribution:** [`NOTICE`](NOTICE)
**Transition record:** [`docs/legal/LICENSE_TRANSITION_5.0.3.md`](docs/legal/LICENSE_TRANSITION_5.0.3.md)

## 1. What the licence grants

From v5.0.3 the gateway, the control plane and the dashboard are licensed under
the **Aegis Commercial License 1.0**: source-available, read and evaluated for
thirty days at no cost, and usable in production only under a paid Order. The
full terms are in [`LICENSE`](LICENSE). In short:

| Use | Without a paid Order | With a paid Order |
|---|---|---|
| Read, compile and run for evaluation (30 days) | Yes | Yes |
| Production use inside your organisation | No | Yes, within the Order's scope |
| Modify for internal use | Yes, not distributed | Yes, not distributed |
| Redistribute, resell or host for third parties | No | Only if the Order says so |
| Remove notices or bypass entitlement checks | No | No |

## 2. What stays Apache-2.0

The client SDKs in [`sdk/python`](sdk/python) and [`sdk/typescript`](sdk/typescript)
remain under the Apache License, Version 2.0, so a customer can integrate them
without a licence review. The examples in [`examples/`](examples) do the same.
They ship their own `LICENSE` and `NOTICE`.

## 3. What was already published cannot be revoked

`v5.0.2` was published on 2026-10-01 (GitHub Release, PyPI and npm read back)
under Apache-2.0. Anyone who received it may keep using, modifying and
redistributing it under those terms, forever. Releases up to `5.0.1` were
published under AGPLv3 or a separate commercial agreement and keep those terms.
No file in this repository changes that. What the commercial licence governs is
v5.0.3 and later.

A fork of `v5.0.2` can therefore compete legally. The commercial defence is the
service, the trademark, the support relationship and the work added after
`v5.0.2` — not a claim over the published source.

## 4. What is sold

| Package | Intended use | Included | Commercial status |
|---|---|---|---|
| Evaluation | Thirty days, one environment, non-production | Source, documentation, issue tracker | Free, no support promise |
| Team | One production environment | Production licence for the Order's scope, release updates, written support window | Paid annual subscription |
| Business | Several environments, quarterly review | Adds procurement artefacts, review calls, priority fixes | Paid annual subscription |
| Enterprise / OEM | Redistribution, air-gap, escrow, assurance | Separate written terms; requires legal review | Custom agreement |

Prices, taxes, refunds and payment terms live in the Order and in the published
price list; this file repeats no figures. The pricing guide remains planning
input, labelled `[HYPOTHESIS-UNVALIDATED]`, until an Order exists.

## 5. What a paid agreement does not include

A paid agreement does not by itself provide SOC 2, HIPAA, FedRAMP, EU AI Act
conformity, GDPR compliance, FIPS 140 validation, court admissibility, a
penetration-test attestation, external cryptographic review, customer references
or regulatory representation. Those are separate organisational, contractual or
independent-assurance matters.

The release also does not approve a constant-time ML-DSA verify claim. The
retained timing experiment returned `p=0.0` for `verify`.

## 6. Support boundary

Evaluation receives no contractual support. Team and Business support require a
named owner, a supported-version policy, a maintenance cadence, response targets,
an escalation path and exclusions. No document should imply 24/7 or
mission-critical coverage until the project can staff and measure it.

## 7. Financial-claim discipline

The figures in the pricing guide are planning inputs, not offers, quotes or
observed contract values. A range may never be restated as a list price. A quote
must name the legal entity, term, environments, scope, assumptions, exclusions
and validity period. Unit-economics ratios may not be published until their
inputs are measured. No customer count, logo, reference or valuation may be
implied: none exists.

## 8. Counsel review points

Counsel should review the right to relicense (including AI-assisted material and
any contribution by anyone other than the copyright holder), the treatment of
agreements already executed against earlier versions, the enforceability of the
production restriction and the anti-hosting clause, the trademark policy, the
AS-IS disclaimer against any support warranty, indemnity, limitation of
liability, privacy and data-processing language, retention and deletion, export
controls, tax, and the governing-law clause. The open list is maintained in
[`docs/legal/COUNSEL_QUESTIONS.md`](docs/legal/COUNSEL_QUESTIONS.md).

## 9. Contact and next step

The practical next step is a bounded evaluation against the buyer's actual
ingress, storage, secret-management, provider and retention boundaries. Start
with [`docs/PRODUCT_BRIEF_US.md`](docs/PRODUCT_BRIEF_US.md),
[`docs/BUYER_GUIDE_US.md`](docs/BUYER_GUIDE_US.md) and
[`docs/FAQ_PROCUREMENT.md`](docs/FAQ_PROCUREMENT.md). Support and services terms
require a separate written agreement.

## Related documents

- [`README.md`](README.md)
- [`LICENSE`](LICENSE)
- [`NOTICE`](NOTICE)
- [`docs/legal/LICENSE_TRANSITION_5.0.3.md`](docs/legal/LICENSE_TRANSITION_5.0.3.md)
- [`docs/legal/TERMS_OF_SERVICE.md`](docs/legal/TERMS_OF_SERVICE.md)
- [`docs/legal/PRIVACY_POLICY.md`](docs/legal/PRIVACY_POLICY.md)
- [`docs/PRODUCT_BRIEF_US.md`](docs/PRODUCT_BRIEF_US.md)
- [`docs/BUYER_GUIDE_US.md`](docs/BUYER_GUIDE_US.md)
- [`docs/COMMERCIAL_STRATEGY_US.md`](docs/COMMERCIAL_STRATEGY_US.md)

## Copyright

Copyright (c) 2026 Juan Luna. All rights reserved. Licensed under the Aegis
Commercial License 1.0 from v5.0.3; earlier releases keep the terms they were
published under. Nothing in this summary waives a licence condition or creates a
warranty.