@orangecheck/legal 0.6.0 → 0.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +1 -273
- package/dist/index.js.map +1 -1
- package/dist/index.mjs +1 -273
- package/dist/index.mjs.map +1 -1
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -1499,283 +1499,11 @@ var privacy3 = {
|
|
|
1499
1499
|
};
|
|
1500
1500
|
var vaultProfile = { terms: terms3, privacy: privacy3 };
|
|
1501
1501
|
|
|
1502
|
-
// src/content/fleet.ts
|
|
1503
|
-
var COMMERCIAL_NOTE3 = "**OrangeCheck Fleet is a commercial product operated by OrangeCheck**, available at fleet.ochk.io. It is distinct from the non-custodial OrangeCheck protocol sites. Where an Enterprise customer has executed a separate Master Services Agreement, that agreement controls; otherwise these Terms govern.";
|
|
1504
|
-
var terms4 = {
|
|
1505
|
-
kind: "terms",
|
|
1506
|
-
eyebrow: "terms",
|
|
1507
|
-
title: "Terms of service",
|
|
1508
|
-
description: "The terms governing use of OrangeCheck Fleet \u2014 enterprise managed infrastructure for OC Agent and OC Pledge. No custody of customer keys or funds.",
|
|
1509
|
-
metaTitle: "Terms of Service \u2014 OrangeCheck Fleet",
|
|
1510
|
-
metaDescription: "Terms of service for OrangeCheck Fleet (fleet.ochk.io): enterprise managed infrastructure for OC Agent and OC Pledge. No custody of keys or funds.",
|
|
1511
|
-
effective: "2026-05-15",
|
|
1512
|
-
updated: "2026-05-15",
|
|
1513
|
-
preamble: [
|
|
1514
|
-
{
|
|
1515
|
-
kind: "callout",
|
|
1516
|
-
emphatic: true,
|
|
1517
|
-
text: "By accessing or using OrangeCheck Fleet, you agree to be bound by these Terms on behalf of yourself and any organization you represent. If you do not agree, do not use the Service. These Terms contain a binding-arbitration, class-action, and jury-trial waiver and important limitations on liability."
|
|
1518
|
-
},
|
|
1519
|
-
{ kind: "callout", text: COMMERCIAL_NOTE3 }
|
|
1520
|
-
],
|
|
1521
|
-
sections: [
|
|
1522
|
-
{
|
|
1523
|
-
id: "overview",
|
|
1524
|
-
heading: "overview",
|
|
1525
|
-
hint: "what fleet is",
|
|
1526
|
-
blocks: [
|
|
1527
|
-
{
|
|
1528
|
-
kind: "para",
|
|
1529
|
-
text: "OrangeCheck Fleet is managed infrastructure for organizations deploying AI agents under the OC Agent and OC Pledge protocols. Fleet issues, scopes, and revokes agent delegations, records action receipts, and produces auditable evidence bundles."
|
|
1530
|
-
},
|
|
1531
|
-
{
|
|
1532
|
-
kind: "para",
|
|
1533
|
-
text: "Fleet holds **no customer private keys, no customer funds, and no custodial wallet of any kind.** Signing happens in the customer\u2019s wallet; bonded reputation stake is an attestation of unspent funds, never escrow. Fleet operates no token or points balance."
|
|
1534
|
-
}
|
|
1535
|
-
]
|
|
1536
|
-
},
|
|
1537
|
-
{
|
|
1538
|
-
id: "accounts",
|
|
1539
|
-
heading: "accounts & operators",
|
|
1540
|
-
blocks: [
|
|
1541
|
-
{
|
|
1542
|
-
kind: "para",
|
|
1543
|
-
text: "A customer account is operated by one or more authorized individuals. You are responsible for the acts and omissions of everyone you authorize, for keeping credentials secure, and for ensuring the individuals you authorize have authority to bind your organization."
|
|
1544
|
-
}
|
|
1545
|
-
]
|
|
1546
|
-
},
|
|
1547
|
-
{
|
|
1548
|
-
id: "plans-billing",
|
|
1549
|
-
heading: "plans, billing & payment",
|
|
1550
|
-
hint: "stripe + lightning",
|
|
1551
|
-
blocks: [
|
|
1552
|
-
{
|
|
1553
|
-
kind: "para",
|
|
1554
|
-
text: "Fleet offers a free Community tier and paid Pro and Enterprise tiers. Paid tiers are billed in either Bitcoin (Lightning) or US dollars (card / ACH via Stripe, our payment processor)."
|
|
1555
|
-
},
|
|
1556
|
-
{
|
|
1557
|
-
kind: "stub",
|
|
1558
|
-
text: "The full commercial terms \u2014 current pricing, what each tier includes, the billing cycle, overage rates and metering, taxes, renewal and cancellation behavior, and the refund policy \u2014 are being finalized for publication. Current pricing is shown on /pricing. Card and ACH payments are processed by Stripe under Stripe\u2019s own terms. This section will be completed following review by counsel."
|
|
1559
|
-
}
|
|
1560
|
-
]
|
|
1561
|
-
},
|
|
1562
|
-
{
|
|
1563
|
-
id: "service-levels",
|
|
1564
|
-
heading: "service levels",
|
|
1565
|
-
hint: "uptime \xB7 support response",
|
|
1566
|
-
blocks: [
|
|
1567
|
-
{
|
|
1568
|
-
kind: "stub",
|
|
1569
|
-
text: "Fleet\u2019s service-level commitments \u2014 target uptime, the support-response times by tier, the measurement methodology, exclusions, and any service credits \u2014 are being finalized and will be published as a referenced Service Level Agreement. Until then, support-response targets are described on /pricing. This section will be completed following review by counsel."
|
|
1570
|
-
}
|
|
1571
|
-
]
|
|
1572
|
-
},
|
|
1573
|
-
{
|
|
1574
|
-
id: "customer-data",
|
|
1575
|
-
heading: "customer data",
|
|
1576
|
-
blocks: [
|
|
1577
|
-
{
|
|
1578
|
-
kind: "para",
|
|
1579
|
-
text: "Fleet holds operator account metadata (email, billing address, plan tier), the public Bitcoin addresses you bind agents to, OC Agent action envelopes, OpenTimestamps proofs, and operational logs (90-day retention). Fleet does **not** hold raw action inputs beyond hashes unless you opt in. Processing of personal data is described in the [Privacy Policy](/privacy)."
|
|
1580
|
-
},
|
|
1581
|
-
{
|
|
1582
|
-
kind: "stub",
|
|
1583
|
-
text: "Enterprise customers that process personal data through Fleet may require a Data Processing Agreement. A standard DPA, including the sub-processor list and the international-transfer mechanism, is being finalized and will be made available to Enterprise customers. This section will be completed following review by counsel."
|
|
1584
|
-
}
|
|
1585
|
-
]
|
|
1586
|
-
},
|
|
1587
|
-
acceptableUse,
|
|
1588
|
-
intellectualProperty,
|
|
1589
|
-
{
|
|
1590
|
-
id: "enterprise-msa",
|
|
1591
|
-
heading: "enterprise agreements",
|
|
1592
|
-
blocks: [
|
|
1593
|
-
{
|
|
1594
|
-
kind: "stub",
|
|
1595
|
-
text: "Enterprise-tier customers may execute a Master Services Agreement that supplements or supersedes these Terms \u2014 covering negotiated SLAs, the DPA, security commitments, self-hosting, indemnities, and liability terms specific to the engagement. The standard MSA template is being finalized. Where an executed MSA exists, it controls over any conflicting provision of these Terms. This section will be completed following review by counsel."
|
|
1596
|
-
}
|
|
1597
|
-
]
|
|
1598
|
-
},
|
|
1599
|
-
{
|
|
1600
|
-
id: "confidentiality",
|
|
1601
|
-
heading: "confidentiality",
|
|
1602
|
-
blocks: [
|
|
1603
|
-
{
|
|
1604
|
-
kind: "para",
|
|
1605
|
-
text: "Each party may receive non-public information of the other. The receiving party will use it only to perform under these Terms, protect it with at least reasonable care, and not disclose it except to personnel and contractors bound by comparable obligations. This does not apply to information that is public, independently developed, or rightfully received from a third party."
|
|
1606
|
-
}
|
|
1607
|
-
]
|
|
1608
|
-
},
|
|
1609
|
-
{
|
|
1610
|
-
id: "disclaimers",
|
|
1611
|
-
heading: "disclaimers & warranties",
|
|
1612
|
-
hint: "as-is \xB7 compliance posture",
|
|
1613
|
-
blocks: [
|
|
1614
|
-
{
|
|
1615
|
-
kind: "callout",
|
|
1616
|
-
emphatic: true,
|
|
1617
|
-
text: 'EXCEPT AS EXPRESSLY STATED IN AN EXECUTED MASTER SERVICES AGREEMENT, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, ORANGECHECK DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, AND STATUTORY \u2014 INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ACCURACY.'
|
|
1618
|
-
},
|
|
1619
|
-
{
|
|
1620
|
-
kind: "para",
|
|
1621
|
-
text: 'Any compliance certification described as "in progress" (including SOC 2) is a statement of intent, not a warranty, until completed and the report issued. Fleet does not provide legal, financial, or regulatory-compliance advice.'
|
|
1622
|
-
}
|
|
1623
|
-
]
|
|
1624
|
-
},
|
|
1625
|
-
limitationOfLiability,
|
|
1626
|
-
indemnification,
|
|
1627
|
-
eligibility,
|
|
1628
|
-
{
|
|
1629
|
-
id: "termination",
|
|
1630
|
-
heading: "termination",
|
|
1631
|
-
blocks: [
|
|
1632
|
-
{
|
|
1633
|
-
kind: "para",
|
|
1634
|
-
text: "**Your right:** stop using Fleet and cancel a paid plan as described in the billing terms. **Our right:** suspend or terminate access for non-payment, breach, or legal or security risk. On termination you may export your action envelopes and audit bundles, which verify offline independently of Fleet. The confidentiality, disclaimer, liability, indemnification, governing-law, and dispute provisions survive."
|
|
1635
|
-
}
|
|
1636
|
-
]
|
|
1637
|
-
},
|
|
1638
|
-
changesToTerms,
|
|
1639
|
-
disputeResolution,
|
|
1640
|
-
miscellaneous
|
|
1641
|
-
],
|
|
1642
|
-
summary: "summary: managed agent infrastructure with no custody of customer keys or funds. billing, sla, dpa, and the enterprise msa are being finalized \u2014 see the marked sections."
|
|
1643
|
-
};
|
|
1644
|
-
var privacy4 = {
|
|
1645
|
-
kind: "privacy",
|
|
1646
|
-
eyebrow: "privacy",
|
|
1647
|
-
title: "Privacy policy",
|
|
1648
|
-
description: "How OrangeCheck Fleet handles personal data \u2014 operator account information and the metadata required to run managed agent infrastructure. No customer keys, no customer funds.",
|
|
1649
|
-
metaTitle: "Privacy Policy \u2014 OrangeCheck Fleet",
|
|
1650
|
-
metaDescription: "OrangeCheck Fleet privacy policy. Operator account data and orchestration metadata only; no customer keys, no customer funds, no raw action inputs.",
|
|
1651
|
-
effective: "2026-05-15",
|
|
1652
|
-
updated: "2026-05-15",
|
|
1653
|
-
preamble: [
|
|
1654
|
-
{
|
|
1655
|
-
kind: "callout",
|
|
1656
|
-
text: "This policy covers personal data OrangeCheck processes as a **controller** for the Fleet account relationship \u2014 operator and billing information. Where Fleet processes personal data **on a customer\u2019s behalf** as a processor, the customer\u2019s Data Processing Agreement governs that processing."
|
|
1657
|
-
}
|
|
1658
|
-
],
|
|
1659
|
-
sections: [
|
|
1660
|
-
{
|
|
1661
|
-
id: "what-we-collect",
|
|
1662
|
-
heading: "information we collect",
|
|
1663
|
-
blocks: [
|
|
1664
|
-
{
|
|
1665
|
-
kind: "bullets",
|
|
1666
|
-
items: [
|
|
1667
|
-
{
|
|
1668
|
-
k: "operator account data",
|
|
1669
|
-
v: "the email address and name of authorized operators"
|
|
1670
|
-
},
|
|
1671
|
-
{
|
|
1672
|
-
k: "billing information",
|
|
1673
|
-
v: "billing address and plan tier; card and ACH details are collected and held by Stripe, our payment processor, not by OrangeCheck"
|
|
1674
|
-
},
|
|
1675
|
-
{
|
|
1676
|
-
k: "orchestration metadata",
|
|
1677
|
-
v: "public Bitcoin addresses you bind agents to, OC Agent action envelopes, and OpenTimestamps proofs"
|
|
1678
|
-
},
|
|
1679
|
-
{
|
|
1680
|
-
k: "operational logs",
|
|
1681
|
-
v: "request and SLA-accounting logs sufficient for abuse response, retained 90 days"
|
|
1682
|
-
}
|
|
1683
|
-
]
|
|
1684
|
-
},
|
|
1685
|
-
{
|
|
1686
|
-
kind: "para",
|
|
1687
|
-
text: "Fleet does not collect customer private keys, customer funds, or raw action inputs beyond hashes (unless a customer opts in)."
|
|
1688
|
-
}
|
|
1689
|
-
]
|
|
1690
|
-
},
|
|
1691
|
-
{
|
|
1692
|
-
id: "how-we-use",
|
|
1693
|
-
heading: "how we use information",
|
|
1694
|
-
blocks: [
|
|
1695
|
-
{
|
|
1696
|
-
kind: "bullets",
|
|
1697
|
-
items: [
|
|
1698
|
-
"Provision and operate managed agent infrastructure",
|
|
1699
|
-
"Bill paid plans and account for service levels",
|
|
1700
|
-
"Detect and respond to abuse and security incidents",
|
|
1701
|
-
"Provide support and communicate service notices"
|
|
1702
|
-
]
|
|
1703
|
-
}
|
|
1704
|
-
]
|
|
1705
|
-
},
|
|
1706
|
-
{
|
|
1707
|
-
id: "sub-processors",
|
|
1708
|
-
heading: "sub-processors",
|
|
1709
|
-
blocks: [
|
|
1710
|
-
{
|
|
1711
|
-
kind: "para",
|
|
1712
|
-
text: "Fleet relies on a small set of sub-processors \u2014 including a payment processor (Stripe) and hosting and infrastructure providers."
|
|
1713
|
-
},
|
|
1714
|
-
{
|
|
1715
|
-
kind: "stub",
|
|
1716
|
-
text: "The complete, current sub-processor list \u2014 each provider, its role, and its processing location \u2014 together with the mechanism for advance notice of changes is being finalized and will be published and referenced from the Data Processing Agreement. This section will be completed following review by counsel."
|
|
1717
|
-
}
|
|
1718
|
-
]
|
|
1719
|
-
},
|
|
1720
|
-
{
|
|
1721
|
-
id: "cookies",
|
|
1722
|
-
heading: "cookies & analytics",
|
|
1723
|
-
blocks: [
|
|
1724
|
-
{
|
|
1725
|
-
kind: "para",
|
|
1726
|
-
text: "Essential cookies for authentication and a theme preference. Page analytics use [Plausible](https://plausible.io/privacy) \u2014 cookie-free, no PII, aggregate only \u2014 alongside our own first-party, cookieless analytics (oc insights): no cookies, no cross-site identity, IP hashed and immediately discarded, and Do-Not-Track / Global Privacy Control honored. No advertising or tracking cookies."
|
|
1727
|
-
}
|
|
1728
|
-
]
|
|
1729
|
-
},
|
|
1730
|
-
{
|
|
1731
|
-
id: "retention",
|
|
1732
|
-
heading: "data retention",
|
|
1733
|
-
blocks: [
|
|
1734
|
-
{
|
|
1735
|
-
kind: "bullets",
|
|
1736
|
-
items: [
|
|
1737
|
-
{
|
|
1738
|
-
k: "operational logs",
|
|
1739
|
-
v: "retained 90 days, then auto-deleted"
|
|
1740
|
-
},
|
|
1741
|
-
{
|
|
1742
|
-
k: "account & billing records",
|
|
1743
|
-
v: "retained for the life of the account and as required for accounting, tax, and audit obligations"
|
|
1744
|
-
},
|
|
1745
|
-
{
|
|
1746
|
-
k: "action envelopes",
|
|
1747
|
-
v: "retained for the life of the account; exportable by the customer at any time"
|
|
1748
|
-
}
|
|
1749
|
-
]
|
|
1750
|
-
}
|
|
1751
|
-
]
|
|
1752
|
-
},
|
|
1753
|
-
{
|
|
1754
|
-
id: "data-security",
|
|
1755
|
-
heading: "data security",
|
|
1756
|
-
blocks: [
|
|
1757
|
-
{
|
|
1758
|
-
kind: "para",
|
|
1759
|
-
text: "HTTPS in transit, access controls on production data, and a bounded blast radius by design \u2014 Fleet structurally cannot hold customer keys or funds. A SOC 2 examination is in progress; until the report is issued it is a statement of intent, not a warranty. We use reasonable measures but do not warrant security; see the [Terms of Service](/terms). We notify affected customers and any competent authority of a personal-data breach as required by applicable law."
|
|
1760
|
-
}
|
|
1761
|
-
]
|
|
1762
|
-
},
|
|
1763
|
-
privacyRights,
|
|
1764
|
-
privacyTransfers,
|
|
1765
|
-
privacyRegional,
|
|
1766
|
-
privacyChildren,
|
|
1767
|
-
privacyChanges
|
|
1768
|
-
],
|
|
1769
|
-
summary: "summary: operator and billing data plus orchestration metadata; no customer keys, no customer funds. card payments are held by stripe. dpa and sub-processor list are being finalized."
|
|
1770
|
-
};
|
|
1771
|
-
var fleetProfile = { terms: terms4, privacy: privacy4 };
|
|
1772
|
-
|
|
1773
1502
|
// src/content/index.ts
|
|
1774
1503
|
var PROFILES = {
|
|
1775
1504
|
protocol: protocolProfile,
|
|
1776
1505
|
me: meProfile,
|
|
1777
|
-
vault: vaultProfile
|
|
1778
|
-
fleet: fleetProfile
|
|
1506
|
+
vault: vaultProfile
|
|
1779
1507
|
};
|
|
1780
1508
|
|
|
1781
1509
|
// src/build.ts
|