Safety and acceptable use

#Welcome uses

• Security research, reverse engineering and malware analysis on samples and systems you are entitled to examine.
• Smart contract and protocol review of your own code and of code under an audit or bounty scope.
• Red team work under a written agreement, capture the flag events and training.
• General work with models that do not refuse legitimate questions.

#What is recorded

The gateway does not read or store request content. For each key it records when a provider refuses a request or a provider's moderation blocks or flags it: the time, the provider and model, and the request ids. Never the prompt, the output or the reason text. These records are kept 7 days.

Requests may also be classified automatically by a safety model the operator runs in its own infrastructure; no person reads them. See the privacy policy.

#Automatic suspension

• When a key passes a threshold of refusals or moderation flags within a period, it is suspended automatically. The threshold is not published.
• The refusals and flags of all keys under one account count together; a suspended root stops every child.
• A suspended key gets 403 key_suspended, whose message gives the appeal address.
• An automatic suspension lasts 24 hours and lifts by itself, unless held for review. A key suspended three times in seven days stays suspended until a person reviews it.
• The balance stays on the key while it is suspended.

#Appeals and reports

Appeal in the console's support chat with the suspended key, or email abuse@inkwell.finance with the key id (the gk_ prefix only, never the full key). A person reviews every appeal. Report misuse the same way; see report abuse.

#Where the service is offered

Requests from sanctioned locations and from the EU, EEA and UK (and the other places listed in the terms) are refused with 451 location_blocked. Payments from wallets on the OFAC SDN list are refused with 403 payment_refused.