# Product Disclaimer

**Effective date:** 2026-07-31  
**Operator:** SQLGuard Inc / DoggyBagg  
**Contact:** hello@sqlguard.io  
**Related:** [Terms](/terms) · [Refunds](/refunds) · [Security](/security)

SQLGuard provides **sandbox and policy attestation tooling** (Execution Certificate Firewall). It is **not**:

- a guarantee that SQL is safe to run in production;
- a substitute for code review, DBA approval, backups, change management, or legal review;
- legal, compliance, insurance, cyber-insurance, or security advice;
- a custodian, exchange, or bank;
- a managed executor of your production database on the public host;
- SOC 2 / ISO / HIPAA / penetration-test certification (we do not advertise badges we do not hold).

## Authorize ≠ insurance

Paying for Pilot Challenge unlock, Gateway Pilot, Session, Instant Cert, or any Exact SKU buys prepaid attestation capacity. It does **not** insure production data loss, ransomware, downtime, or third-party claims. A **PASS** certificate means stated sandbox/policy checks succeeded for the hashed inputs under TTL—not that the write is appropriate for your business.

## DENY / FAIL

- **DENY** (e.g. `POST /v1/challenge`, `POST /v1/gateway/decide`, gravity hunts) means the statement is not authorized under default policy. It is an expected control outcome, not a product defect.
- **FAIL** certificates mean sandbox/policy checks did not PASS. FAIL burns a slot when the pipeline completes successfully. Policy FAIL is not grounds for USDC refund ([Refunds](/refunds)).

## Mandate Bind

Hashing Intent Mandate text into a cert does **not** mean SQLGuard verified a human, KYC’d anyone, or confirmed real-world authorization.

## GATE / probe / decide

Free tip and portable checks are technical helpers. They are **not** authorize-as-a-service warranties and do not expand Operator liability.

## Executor

Public `POST /v1/execute` is fail-closed unless explicitly enabled (`GET /health` → `executor.enabled`). You execute on systems you control **only after** verify.

## Blockchain / USDC

Exact USDC on Base (`eip155:8453`) to seller `0xC8d524703f1751b565a220087D1d4c44a413C1D7` is a **software utility payment** for listed SKUs. It is **not** a security, investment contract, deposit, or yield product. Transfers can be irreversible, subject to network/facilitator outages, and publicly visible on-chain.

## Discovery index lag (honesty)

Third-party discovery surfaces (including CDP Bazaar / marketplace crawlers) may show **stale prices or SKUs** relative to the live Fly wire (`https://sqlguard.io`, `GET /v1/catalog`, unpaid `402` challenges). Treat the **live 402 amount and catalog** as authoritative. Index lag is not a warranty breach.

## Agent risk

Autonomous agents may mis-buy, overspend, mis-state needs at handshake, or mis-apply certificates. You set budgets and human oversight.

## No professional relationship

Use of the Service does not create an attorney–client, fiduciary, auditor, or partnership relationship.

By using SQLGuard you acknowledge the [Terms](/terms), [Privacy](/privacy), [AUP](/aup), [Security](/security), and [Refunds](/refunds).