# Terms of Service

**Effective date:** 2026-07-31  
**Operator:** SQLGuard Inc / DoggyBagg (“Operator,” “we,” “us”)  
**Contact:** hello@sqlguard.io  
**Service:** SQLGuard (`https://sqlguard.io`, always-on `https://sqlguard-io.fly.dev`) — Execution Certificate Firewall for agent SQL authorization.  
**Software licence:** Proprietary — see repository `LICENSE` and §8 below.  
**Governing law:** Delaware, United States (see §16).

These Terms of Service (“Terms”) govern access to and use of SQLGuard APIs, MCP endpoints, websites, documentation, and related software (the “Service”). By accessing or using the Service—including via autonomous agents, scripts, wallets, MCP clients, or marketplace discovery—you agree to these Terms, the [Privacy Policy](/privacy), [AUP](/aup), [Disclaimer](/disclaimer), [Refunds](/refunds), and [Security](/security) policies.

**Contract formation:** An unpaid `402` challenge is an offer. Completing Exact USDC settlement and retrying a paid route constitutes acceptance and purchase of the listed SKU. Calling MCP `initialize` / `sqlguard_handshake` or reading discovery docs does not waive these Terms. Browsewrap acceptance applies to human HTML pages (including [/legal](/legal)).

## 1. Who we are

SQLGuard is operated by SQLGuard Inc / DoggyBagg, reachable at hello@sqlguard.io. The Service is prepaid software tooling for attested SQL validation and authorize-before-mutate workflows. It is **not** a bank, custodian, exchange, law firm, insurer, auditor, penetration-testing firm, or managed database provider. We do **not** claim SOC 2, ISO 27001, HIPAA, PCI DSS, or similar certifications unless and until a linked policy page states otherwise with evidence.

## 2. Eligibility and agency

You represent that you have authority to bind the entity or agent system using the Service. If you operate an autonomous agent, **you remain fully responsible** for its actions, spends, Intent Mandates, certificates, and any production SQL it executes after verify/gate. “The agent did it” is not a defense. Lawful agent use is permitted under the [AUP](/aup).

## 3. The Service (what it is / is not)

SQLGuard may:

- sell prepaid commercial licences and Exact SKUs via **x402 Exact** USDC on Base (`eip155:8453`) to seller pay-to `0xC8d524703f1751b565a220087D1d4c44a413C1D7` (or the live pay-to in the 402 challenge);
- evaluate proposed SQL against policy and an isolated sandbox (PGlite/Postgres);
- issue **Ed25519 Execution Certificates** (PASS/FAIL) over hashed schema/SQL (± mandate);
- mint free DENY records (`POST /v1/challenge`, `POST /v1/gateway/decide`) that do **not** authorize execution;
- offer free tips (`POST /v1/probe`) and a free portable authorize check (`POST /v1/gate`).

SQLGuard does **not**:

- execute production database writes on your behalf on the public host (see §3.1);
- guarantee that a PASS certificate means SQL is safe, correct, legal, or compliant with your contracts or schemas;
- verify that any human actually authorized an Intent Mandate you submit;
- custody user funds beyond protocol-level settlement to the seller wallet;
- provide legal, tax, accounting, compliance, cyber-insurance, or security advice;
- warrant that third-party discovery indexes (e.g. CDP Bazaar) match live Fly wire pricing in real time.

### 3.1 Executor fail-closed

`POST /v1/execute` is **optional** and **disabled by default** on the public host (`GET /health` → `executor.enabled`). You (or your agent runtime) hold the database URL and execute mutating SQL yourself **only after** a verified PASS (and/or successful `/v1/gate`). Payment for a certificate is **not** a production write grant.

### 3.2 Product SKUs

Live catalog controls prices (`GET /v1/catalog`). Current product families include:

| Product | Role |
|---------|------|
| **Gateway (invoice)** | Commercial licence — primary **$299/mo** (`/gateway` · hello@sqlguard.io); also $99 / $499 / $1,999 |
| **Pilot Challenge unlock** | Wealth Exact path — DENY → Exact **$100** unlock (`POST /v1/challenge/unlock`, amount `100000000`) → session slots |
| **Gateway Pilot** | Alt Exact **$100 / 7 days** (`POST /v1/gateway/pilot`) |
| Session / Workday / Instant / Bind / prepaid | Legacy Exact or credit SKUs — endpoints remain; **not** the primary wealth buy path |
| Free probe / decide / GATE | Tip or portable check — **not** a paid warranty |

Unused Session / Pilot slots expire at TTL with **no refund**. Slot burns (including FAIL certs) are final per [Refunds](/refunds).

### 3.3 Mandates and BIND

Mandate text is **user-supplied**. The Operator does **not** authenticate the human, review Intent Mandates for legal sufficiency, or warrant that SQL is within any real-world authorization. `mandate_hash` / `mandate_kind: abmp_intent` are cryptographic bindings of the bytes you sent—not legal approval, KYC, or a duty of care to third parties.

### 3.4 DENY / FAIL

A **DENY** (challenge, decide, gravity) means the stated statement is not authorized under default policy. A **FAIL** certificate means sandbox/policy checks did not PASS. Neither is a bug entitling you to USDC return. See [Disclaimer](/disclaimer).

## 4. Accounts, agent IDs, and keys

You identify sessions using agent/wallet identifiers you control (e.g. `X-SQLGuard-Agent`). You are responsible for safeguarding private keys, payment authorizations, MCP credentials, and any secrets. The Operator never asks for your private keys. Do not share agent ids that hold credits.

## 5. Payments and credits

- SKUs are prepaid digital service units priced in USDC via x402 Exact on Base unless marked free or invoiced off-chain.
- Settlement uses third-party facilitators (CDP when configured; otherwise PayAI or successors) and the public Base chain. Confirmed on-chain transfers are **irreversible**.
- Credits are non-transferable, have no cash value, are not deposits, and are not securities.
- Refunds and re-credits: see [Refunds & Credits](/refunds). Except where required by law or as stated there, **USDC purchases are final**.
- Prices and SKUs may change; the live catalog and 402 challenge control the offer at purchase time.
- Operator/index wallets used for smoke tests do not create consumer warranties for third parties.
- Exact USDC is a **software utility payment** for listed SKUs — not a security, investment contract, deposit, or yield product.

## 6. Acceptable use

You must not use the Service to attack or overload systems, bypass payment, launder funds, violate sanctions/AML/export laws, probe systems without authorization, submit illegal content (including CSAM), ship malware/exploits, or misrepresent certificates as warranties of production safety. See the [AUP](/aup).

## 7. Certificates and reliance

Execution Certificates attest a **sandbox run and policy check** under stated parameters (schema_hash, sql_hash, optional mandate_hash, TTL, status). Downstream systems that auto-apply SQL do so **at their own risk**. You must independently verify signature, expiry, hashes, business appropriateness, backups, and change-control **before** production mutation. Free `/v1/gate` is a technical check, not a professional sign-off. Authorize ≠ insurance.

## 8. Intellectual property and commercial licence

The Service, branding, documentation, and Software are **proprietary** to the Operator (SQLGuard Inc / DoggyBagg). Source in public repositories is **not** open-source; see the repository `LICENSE` (UNLICENSED / proprietary). Marketplace “license” fields should state **Proprietary** (or UNLICENSED) and link these Terms.

**Commercial Service licence (what buyers get):** Paying for a SKU grants a limited, non-exclusive, non-transferable right to use the corresponding Service features under these Terms — not ownership of the Software, patents, or trademarks, and not a right to rehost, white-label, or resell the gateway.

| Licence path | Price | How |
|--------------|-------|-----|
| Gateway (primary) | **$299/mo** invoice | [Gateway](/gateway) · hello@sqlguard.io |
| Pilot Challenge unlock | **$100** Exact | [Challenge](/challenge) · `POST /v1/challenge/unlock` |
| Gateway Pilot | **$100 / 7 days** | Invoice or Exact · [Buy Pilot](/buy#pilot) |
| Legacy Exact SKUs | Live catalog | Session / Workday / Instant / Bind / credits |

There is **no** separate “software licence key” SKU; access is invoice and/or x402 Exact settlement. Third-party open-source components remain under their licences. You retain rights to SQL/DDL/mandate text you submit; you grant the Operator a limited licence to process them solely to provide the Service. You warrant you have rights to submit that content. Copyright notices: [DMCA](/dmca).

## 9. Privacy and cookies

See [Privacy](/privacy), [Cookies](/cookies), and [Subprocessors](/subprocessors). For platform customers needing a processor addendum: [DPA](/dpa).

## 10. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. THE OPERATOR DOES NOT WARRANT UNINTERRUPTED OR ERROR-FREE OPERATION, CORRECTNESS OF POLICY/SANDBOX RESULTS, OR THAT CERTIFICATES PREVENT DATA LOSS, BREACH, OR LIABILITY. THIRD-PARTY INDEXES MAY LAG THE LIVE WIRE.

## 11. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE OPERATOR’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THE SERVICE SHALL NOT EXCEED THE GREATER OF (A) USDC AMOUNTS YOU PAID TO THE SERVICE FOR THE SPECIFIC SKU GIVING RISE TO THE CLAIM IN THE THIRTY (30) DAYS BEFORE THE CLAIM OR (B) TEN US DOLLARS (US$10). FOR A SESSION OR PILOT CLAIM, LIABILITY FOR THAT PURCHASE IS FURTHER CAPPED AT THE EXACT USDC AMOUNT PAID FOR THAT SETTLE. THE OPERATOR IS NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR LOSS OF DATA, PROFITS, GOODWILL, OR BUSINESS INTERRUPTION—EVEN IF ADVISED OF THE POSSIBILITY. A PASS CERTIFICATE DOES NOT EXPAND THIS CAP OR CREATE A WARRANTY THAT MUTATIONS ARE SAFE.

## 12. Indemnity

You will defend, indemnify, and hold harmless the Operator and its officers from claims, damages, and costs (including reasonable attorneys’ fees) arising from your (or your agents’) use of the Service, payments, mandates, certificates, production SQL execution, content submissions, or violation of these Terms or law.

## 13. Export and sanctions

You may not use the Service if you are subject to US/OFAC sanctions or in a prohibited jurisdiction. You will not use the Service to violate export control or sanctions laws.

## 14. Termination

The Operator may suspend or terminate access for abuse, legal risk, non-payment, or operational reasons. You may stop using the Service at any time. Unused credits and Session/Pilot slots may be forfeited on termination for cause or expiry as described in [Refunds](/refunds).

## 15. Changes

We may update these Terms by posting a revised version with a new effective date. Continued use after posting constitutes acceptance. Material payment changes appear in the live catalog/402 challenge.

## 16. Governing law; disputes

These Terms are governed by the laws of the State of Delaware and applicable United States federal law, excluding conflict-of-law rules. Exclusive venue for disputes is the state or federal courts located in Delaware, except where prohibited. You waive class actions to the extent permitted by law.

## 17. Contact

Legal / billing: hello@sqlguard.io  
Security: [Security Policy](/security) · `/.well-known/security.txt`  
Trust center: [/trust](/trust)  
Legal index: [/legal](/legal)