ivd

Terms of Service

Version: 1.1 · Effective: July 19, 2026

These Terms of Service (“Terms”) govern your access to and use of the IVD framework, the hosted MCP server at mcp.ivdframework.dev, the website at ivdframework.dev, and the open-source repository at github.com/leocelis/ivd (collectively, the “Service”).

By requesting an API key, activating an API key, connecting to the hosted server, or using any IVD tool, you agree to be bound by these Terms. If you do not agree, do not use the Service.

For organizations: the person accepting these Terms represents and warrants that they have authority to bind the organization, and “you” refers to that organization.

Provider: Leo Celis (“IVD”, “we”, “us”)
Contact: leo@leocelis.com
Website: https://ivdframework.dev


1. The Service

IVD provides a developer framework and MCP (Model Context Protocol) server that helps software teams write structured intent artifacts and run AI-assisted verification workflows. The Service is available as:

The hosted server is provided on a best-effort basis. There is no uptime guarantee, no SLA, and no commitment to minimum availability. See Section 8.


2. Eligibility and Account

Age: You must be at least 18 years old to use the Service.

API keys: Access to the hosted server requires an API key issued by IVD. Keys are personal or per-organization — do not share them publicly or commit them to source control. You are responsible for all activity under your key.

Key security: If you believe your API key has been compromised, notify leo@leocelis.com immediately and rotate the key.


3. Acceptable Use

3.1 General Restrictions

You may use the Service for any lawful purpose consistent with these Terms. You must not:

  1. Use the Service to process, transmit, or store personal data in violation of applicable privacy law, including GDPR and CCPA/CPRA. See Section 6 and the Privacy Policy.
  2. Include personal data, sensitive personal data, trade secrets, credentials, or API keys in any tool argument transmitted to the hosted server.
  3. Use the Service to build AI systems intended to cause harm, discriminate unlawfully, or violate applicable law.
  4. Attempt to reverse-engineer, scrape, or extract proprietary content from the hosted server beyond normal MCP tool use.
  5. Use the Service in a way that misrepresents IVD’s capabilities, certifications, or compliance coverage to third parties, customers, or regulators.
  6. Represent any product or service as “IVD-certified,” “IVD-verified,” or endorsed by IVD unless you have received written authorization from Leo Celis.
  7. Share, resell, or sub-license hosted server access to third parties.
  8. Use the Service in any manner that violates these Terms, the MIT License, or applicable law.

3.2 Prohibited Content

Every hosted-server tool call transmits the arguments you provide (Section 6). You must not use any tool argument, correction text, recipe content, or other input to the Service to create, store, transmit, or request generation of:

  1. Child sexual abuse material (CSAM) or content that sexualizes minors in any way, including AI-generated depictions.
  2. Content that facilitates terrorism, mass violence, or the development of weapons, explosives, or other means of causing mass harm.
  3. Malware, exploit code, or attack tooling intended for unauthorized access to systems you do not own or have explicit permission to test.
  4. Content that infringes another party’s copyright, trademark, patent, or other intellectual property right.
  5. Non-consensual intimate imagery, or content generated for the purpose of harassing, stalking, or doxxing a specific individual.
  6. Content that violates applicable export control or sanctions law (including use of the Service by, or on behalf of, a party subject to U.S. or EU sanctions).

This list is illustrative, not exhaustive — the general prohibition in Section 3.1.3 (“cause harm… or violate applicable law”) governs beyond these examples. This section applies to the hosted server; it does not, and cannot, govern content you create or transmit in a self-hosted deployment, which runs entirely on your own infrastructure outside IVD’s operational control.

Enforcement: IVD may remove access, suspend or revoke your API key, and refuse further service to anyone who violates this section, per Section 11 (Termination). IVD may preserve records of a suspected violation and disclose them to law enforcement or other authorities where required by legal process, consistent with the “compliance with a legal obligation” basis (GDPR Art. 6(1)(c)) already used for security-incident records under the Privacy Policy §1.4.

If you believe content on IVD infrastructure violates this section or infringes your intellectual property, report it to leo@leocelis.com.


4. Open-Source License

The IVD source code is licensed under the MIT License (see LICENSE). The MIT License permits use, modification, distribution, and sublicensing of the code. It does not:

Self-hosted deployments are governed by the MIT License. These Terms additionally apply to any use of the hosted server regardless of whether you are also self-hosting.


5. Intellectual Property

IVD IP: The IVD framework, including the four-phase methodology, Canon layer specification, Judgment phase specification, all recipes, all intent artifact schemas, all MCP tool implementations, and all associated documentation are the intellectual property of Leo Celis, protected by copyright and unregistered common law trademark.

Your content: Intent artifacts, Judgment ledger entries, and any other files you generate using IVD tools based on your own content belong to you. You grant IVD no rights to your content except as required to operate the hosted server (i.e., processing your tool arguments to return results).

AI-generated artifacts: Copyright status of AI-generated content varies by jurisdiction. IVD makes no representations about the copyrightability of artifacts generated by AI agents using IVD tools.

Feedback: If you submit bug reports, feature suggestions, or other feedback, you grant IVD a perpetual, irrevocable, royalty-free license to use that feedback for any purpose without obligation to you.


6. Privacy and Data

Your use of the hosted server is governed by the Privacy Policy, which is incorporated into these Terms by reference.

The key disclosure: every tool call to the hosted server transmits your arguments (including yaml_content, project_root, correction text, and all other parameters) to a US-based server (DigitalOcean, US East). This content is not retained in IVD’s application storage beyond the active session, but provider infrastructure logs may capture it. Do not transmit personal data, sensitive data, credentials, or trade secrets through hosted server tool arguments.

If you are an EU-based data controller and need to process personal data through IVD tools, request a Data Processing Agreement before doing so: leo@leocelis.com. Until a DPA is in place, do not use the hosted server for personal data processing. Use the self-hosted path instead.


7. AI Limitations and No Warranty of Outcomes

IVD mitigates known LLM failure modes but cannot eliminate them. The Service is provided “AS IS” without warranty of any kind. Specifically, IVD does not warrant:

The full disclaimer is in LEGAL.md §15.

Marketing claims (“zero hallucinations,” “one turn”) apply under specific conditions described in LEGAL.md §4 and are not general guarantees. See that section before relying on those claims in procurement, compliance, or litigation contexts.

7.1 No Third-Party Beneficiaries; AI Output Not Endorsed

These Terms create rights and obligations only between you and IVD. No third party — including an end user of a system you build with IVD, or anyone affected by content an AI agent generated using IVD tools — is a third-party beneficiary of these Terms or may enforce any provision of them.

IVD does not review, curate, endorse, verify, or take editorial responsibility for output an AI agent generates using IVD tools (intent artifacts, scaffolded code, Judgment patterns, or any other tool output), whether or not you subsequently publish, distribute, or rely on that output. AI output is probabilistic, not deterministic, and is not tested, verified, or guaranteed accurate by IVD before it reaches you. You are solely responsible for reviewing AI-generated output — per IVD’s own Step 3 human review gate (framework.md, Principle 6) — before any consequential, public, or production use. Skipping that review does not transfer the resulting risk to IVD.

A known open question, not resolved by this section: the contractual limitations in Sections 9 and 10 of these Terms, and the indemnification in Section 10, bind you as a party to this agreement — they do not necessarily bind a third party who was never a user and never agreed to these Terms, and who might bring a direct claim (e.g., a tort claim) arising from AI-generated content a user of IVD subsequently published. This section states IVD’s position and reduces that exposure but does not eliminate the underlying legal question, which is fact- and jurisdiction-dependent. If you are building a system where this scenario is a material risk (e.g., IVD-assisted content reaching the public at scale), consult qualified legal counsel about your own exposure and IVD’s, rather than relying on this section alone.


8. Service Availability

The hosted server is provided on a best-effort basis with no SLA. The following may cause unavailability without notice and without liability:

If you require guaranteed availability, use the self-hosted path on your own infrastructure.


9. Limitation of Liability

9.1 TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IVD’S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING UNDER OR RELATED TO THESE TERMS OR YOUR USE OF THE SERVICE — INCLUDING DIRECT DAMAGES — SHALL NOT EXCEED THE GREATER OF (a) THE TOTAL FEES ACTUALLY PAID BY YOU TO IVD IN THE TWELVE MONTHS PRECEDING THE CLAIM, OR (b) USD $50. FOR FREE-TIER USERS, THIS CAP IS USD $0.

9.2 IN NO EVENT WILL IVD BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES — INCLUDING LOSS OF DATA, LOSS OF PROFITS, BUSINESS INTERRUPTION, REGULATORY FINES, OR REPUTATIONAL HARM — REGARDLESS OF WHETHER IVD WAS ADVISED OF THEIR POSSIBILITY.

9.3 Nothing in this section limits liability for IVD’s own fraud or intentional misconduct.

9.4 Some jurisdictions do not allow exclusion of certain warranties or limitation of certain damages; in those jurisdictions, the above applies to the fullest extent permitted by law.


10. Indemnification

You agree to defend, indemnify, and hold harmless Leo Celis, the IVD project, its contributors, and maintainers from and against all claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising from:

  1. Your use of the Service, including use of any AI system you build with IVD
  2. Your violation of these Terms
  3. Your violation of any applicable law or regulation, including the EU AI Act, GDPR, CCPA/CPRA, the Colorado AI Act, and the FTC Act
  4. Any claim by a third party arising from your AI system or your use of IVD outputs
  5. Personal data you transmit through hosted server tool arguments in violation of applicable privacy law
  6. Your misrepresentation of IVD’s capabilities or compliance coverage to any party

This obligation survives termination of your use of the Service.


11. Termination

IVD may suspend or revoke your API key and terminate your access to the hosted server at any time, for any reason, without prior notice. Grounds include but are not limited to: violation of these Terms, suspected misuse, or security concerns.

You may stop using the Service at any time. Termination does not release you from obligations that arose during your period of use (including indemnification).

The open-source MIT License is irrevocable for code already distributed and is not affected by termination of hosted server access.


12. Changes to These Terms

IVD may update these Terms by publishing a revised version in the repository with an updated effective date. For hosted server users: continued use of an API key after the effective date of updated Terms constitutes acceptance of the updated Terms.

Material changes will be noted in DECISIONS.md with an FDR entry. IVD does not provide automatic email notification of changes — monitor the repository or periodically review this document if you rely on it.


13. Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of Florida, United States, without regard to its conflict-of-law provisions.

Any dispute arising from these Terms or your use of the Service must be brought exclusively in the state or federal courts located in Broward County, Florida, United States. You irrevocably submit to personal jurisdiction and venue in those courts and waive any objection based on inconvenient forum.

EU users: Nothing in this section limits mandatory rights available to EU residents under EU consumer protection law, GDPR, or the EU AI Act. EU data subjects retain all rights under those laws regardless of this choice-of-law provision.


14. Miscellaneous

Entire agreement: These Terms, together with the LEGAL.md disclaimer and Privacy Policy, constitute the entire agreement between you and IVD regarding the Service and supersede any prior understandings.

Severability: If any provision of these Terms is found unenforceable, the remaining provisions continue in full force.

No waiver: Failure by IVD to enforce any provision does not constitute a waiver of the right to enforce it in the future.

No assignment: You may not assign these Terms or any rights under them without IVD’s prior written consent. IVD may assign these Terms without restriction.

Force majeure: IVD is not liable for failures caused by events beyond reasonable control, including natural disasters, government actions, infrastructure failures, or third-party service outages.

Contact: For legal notices: leo@leocelis.com


By using the IVD Service, you confirm that you have read, understood, and agreed to these Terms.