1. Permitted use
Use Vidabug only for software, infrastructure and data for which you have clear legal authority. Upload only properly licensed code and appropriately minimised test fixtures. Keep contact and scope records current.
2. Prohibited activity
No unauthorised network probing, production exploitation, credential harvesting, malware distribution, data exfiltration, denial-of-service, bypass of monitoring, harassment, unlawful surveillance or attempts to direct agents around security controls.
Do not upload secrets in plain text or command the agent to override work-order limits, model instructions or payment controls.
3. Vulnerability research and responsible disclosure
Discovery of a possible vulnerability does not grant authority to exploit or disclose it. Preserve minimal evidence, stop at the agreed boundary, notify the authorised contact and follow the customer's coordinated disclosure plan.
High-impact/destructive testing must be separately authorised and isolated. Vidabug may terminate unsafe work and retain appropriate forensic records subject to law.