Terms ofService.

01Agreement

These terms are an agreement between you and KernelCode (“Kernel”, “we”, “us”), which operates kernelcode.io, app.kernelcode.io, mcp.kernelcode.io and the Kernel APIs (together, the “Services”). By using the Services you agree to these terms and to our Privacy Policy.

If you use the Services on behalf of an organization, you confirm you can bind it to these terms. If you run an AI agent or other software that calls the Services, you are responsible for it and accept these terms for every call it makes.

You must be at least 18 years old, and allowed to use the Services under the laws that apply to you.

02What Kernel does

Kernel verifies software and records the evidence:

• Scans of public GitHub repositories and deployed contracts, checking dependencies, leaked secrets, CI configuration, Solidity patterns, bytecode, proxies and ownership.
• Proofs (Kernel Prove): formal verification of C and Verilog code with Aristotle, a service of Harmonic.
• Reports with a score, verdict, action plan and evidence, which you can keep private or share.
• Attestations: records of a report’s hash on Robinhood Chain, published from your wallet.
• Agent access through the MCP server and REST endpoints, paid per call with x402.

Kernel reads code and bytecode. It never executes the code you submit.

03Evidence, not guarantees

A scan is not an audit or a guarantee. Automated checks find known classes of problems and miss others. A clean scan or a high score means those checks found nothing; it does not mean the code is safe.

A proof covers only what it states. A proved property holds for the submitted source, under the specification you wrote and the assumptions in Aristotle’s result. It says nothing about other code, other properties, the compiler, the hardware or the deployed system. Verdicts come from Aristotle; Kernel reports them as returned.

An attestation is a record, not an endorsement. It proves that a specific report existed and has not changed since. It is not a safety rating, and Kernel does not vouch for the code it describes.

Nothing Kernel produces is financial, investment, legal or security-consulting advice. Do not make Kernel’s output the only basis for deploying, trading, investing in or integrating with any software or contract.

04Accounts, wallets and keys

You sign in by signing a message with your wallet (Sign-In with Ethereum). Signing in costs nothing and moves no funds. You are responsible for your wallet and everything signed with it; we cannot recover a lost wallet or reverse its transactions.

Kernel API keys work like passwords: keep them secret. You are responsible for all use of your keys, and we may revoke a key that is leaked or misused.

When you pay with x402, the paying wallet becomes your Kernel account for those calls.

05Your code and content

You keep all rights to the code, specifications and other content you submit. You confirm you have the right to submit it, and that doing so does not break any law, license or agreement.

You give Kernel a worldwide, non-exclusive license to store, copy, process and transmit your content as needed to run the Services: to scan it, send it to the third parties described in the Privacy Policy (for proofs, Aristotle), generate reports, and keep those reports available to you.

Shared and attested reports are public. When you share a report or attest it, anyone with the link can read it. An attestation, and any payment, is written to a public blockchain and cannot be edited or deleted by you or by us.

06Kernel Prove and Aristotle

Kernel Prove uses Aristotle by Harmonic. Proofs run on your own Aristotle account with your own API key, so your use of Aristotle is also governed by Harmonic’s terms, and Aristotle credits are billed to you by Harmonic.

Kernel stores your Aristotle key encrypted. A saved key stays until you remove it; each proof gets its own encrypted copy, deleted when the run ends. Kernel is independent and is not affiliated with or endorsed by Harmonic or Robinhood.

07Payments

Agents and API users can pay per call with x402, in USDG on Robinhood Chain (and test USDC on Base Sepolia). Current prices are on kernelcode.io/tools, and every payment request states the exact amount before you sign it. Prices may change; a change never applies to a payment you already signed.

A payment settles only after the tool succeeds. If a call fails, it is not charged. For prove_property, the call succeeds when Kernel accepts the job, so the $0.05 fee is charged even if the proof later comes back refuted or unresolved. Settled payments are onchain transfers and are final; refunds happen only where the law requires.

You pay your own network fees (gas), including for attest() transactions, and any taxes that apply to you. Using the app in a browser is currently free.

08Acceptable use

Do not use the Services to:

• break any law or anyone’s rights, or submit content you are not allowed to share;
• attack, exploit or gain access to systems or contracts you are not authorized to test, including by using Kernel’s findings to do so;
• overload, disrupt or probe the Services, get around rate limits, payments or access controls, or extract our scanners or scoring at scale;
• misrepresent Kernel’s output, for example by calling a scan an audit, a proof of safety, or Kernel’s endorsement;
• impersonate Kernel, or use the Kernel or $KERNEL names in a way that suggests we are involved when we are not.

We may suspend or limit access that breaks these rules or puts the Services or other users at risk.

09$KERNEL

$KERNEL has not launched. No contract address has been published, and nothing on our sites is an offer to sell, or a solicitation to buy, any token or security. Plans described on kernelcode.io/kernel may change or never happen. Any token using the $KERNEL name before we publish an address is not ours.

10Changes and availability

The Services are new and change often. We may add, change, limit or remove features, and we do not promise any particular uptime. We may suspend the Services for maintenance, security or legal reasons.

11Disclaimers

THE SERVICES AND EVERYTHING THEY PRODUCE ARE PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF ACCURACY, COMPLETENESS, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT, TO THE FULLEST EXTENT THE LAW ALLOWS. Blockchains, wallets, facilitators and third-party services can fail or behave unexpectedly, and we are not responsible for them.

12Limitation of liability

TO THE FULLEST EXTENT THE LAW ALLOWS, KERNEL WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF FUNDS, TOKENS, PROFITS, DATA OR GOODWILL, INCLUDING LOSSES FROM VULNERABILITIES OR EXPLOITS IN CODE THAT KERNEL SCANNED, PROVED OR ATTESTED.

OUR TOTAL LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICES IS LIMITED TO THE GREATER OF THE AMOUNT YOU PAID KERNEL IN THE 12 MONTHS BEFORE THE CLAIM AND USD 100. Nothing in these terms limits liability that cannot be limited by law.

13Indemnity

You will defend and indemnify Kernel against claims, losses and costs (including reasonable legal fees) arising from content you submit, your use of the Services, your agents’ actions, or your breach of these terms.

14Ending use

You can stop using the Services at any time, and ask us to delete your account data as described in the Privacy Policy. We may suspend or end your access if you break these terms. Sections that by their nature should survive (including evidence, content, payments, disclaimers, liability, indemnity and governing law) survive the end of these terms.

15Governing law

These terms are governed by the laws of Singapore. Any dispute relating to them or to the Services will be resolved exclusively by the courts of Singapore, and you and Kernel submit to their jurisdiction.

16Changes to these terms

We may update these terms. We will post the new version here with a new effective date, and for material changes we will give notice on the site or in the app. Continuing to use the Services after a change takes effect means you accept it.

17Contact

Questions about these terms: legal@kernelcode.io.