Averray Verify: terms of use

1. Who we are

Averray Verify is operated by Pascal Kuriger, sole proprietor, Hauptstrasse 51, 8162 Steinmaur, Switzerland ("we", "us"). Contact: pkuriger@averray.com. See the Imprint.

2. The service

You send a verification request to POST https://api.averray.com/verify/runs. It names a published profile, a target, and inputs. We run that profile in our sandboxed runner and return a verdict:

• approved, rejected or inconclusive; platform faults are reported separately as platform_fault and are not charged;
• with a signed receipt.

The profiles, their limits and their prices are published at averray.com/pricing and https://api.averray.com/verify/profiles.

3. Price and payment

• The quote is the price. You pay per run with x402 in USDC on Base. The price that applies is the one in the HTTP 402 quote for the profile you request, at the time you sign the authorization.
• When you are charged: only when the run returns approved or rejected. Inconclusive runs, and runs that fail because of a fault on our side, are not charged. An authorization that expires unused, or that you cancel before capture, is not charged either.
• Payments are final on chain. A captured payment is an on-chain USDC transfer and cannot be reversed by us or by anyone else. Refunds, where section 4 grants one, are paid as a new transfer to the paying address.

4. Disputing a charge or a verdict

• How to dispute: if you believe a charged run was decided wrongly because of a fault in our service, email pkuriger@averray.com within 30 days of the run. Include the run id.
• What we do: we review the run, its receipt and its logs.
• Our commitment: if the verdict was caused by a fault on our side, we refund the price of that run to the paying address.
• What this is not: disagreement with a correctly applied profile is not a fault.

5. What you send us

• You must have the right to submit what you send, and to let us run it against the target you name.
• Don't send secrets, private keys, or other people's personal data in the request body or inputs. They are stored, and they are publicly readable (see section 6).
• One exception: a scoped, revocable test credential for your target. It may be sent only in the verification-target-authorization header, together with target.auth, and the profile uses it only for that run. Use a credential limited to the test and revoke it afterwards. The credential is not written to the run record or the logs.
• No attacks: don't use the service to attack the sandbox, our infrastructure, or any target you are not authorized to test. We may rate-limit or refuse requests.

6. Results are public

• Run records and receipts can be read by anyone with the run id, without logging in. That includes the target and inputs you submitted, the verdict, the billing status, the paying wallet address and the payment transaction.
• Each receipt is signed. Anyone can check it against our published keys.

7. What a verdict is, and isn't

A verdict is automated evidence that a named profile produced a named result on your inputs at a point in time. It is not:

• a warranty;
• a security audit;
• a certification;
• legal advice.

The service is provided as it is.

8. Liability

• The cap: to the extent the law allows, our liability for any run is limited to the price you paid for that run.
• What we don't owe: indirect or consequential loss, such as lost profit, lost data or business interruption.
• What the cap doesn't cover: liability for intent or gross negligence, or any other liability that mandatory law does not allow us to exclude (Art. 100 Swiss Code of Obligations).

9. Changes

• The quote decides the price. We may change prices, profiles and these terms. The 402 quote at the time you sign always decides the price of that run.
• Where changes appear: changes to these terms are published here, with a new date.

10. Law and venue

• Law: Swiss law applies, excluding the UN Convention on Contracts for the International Sale of Goods.
• Venue: the courts of the city of Zurich, Switzerland.
• Consumers: mandatory consumer-protection rules of the country where you live are not affected.