1Purpose
The value of CORTEX Seal is the credibility of what it shows. This policy exists to defend it. It applies to every Tenant, every Agent and every display of the Seal.
2Truthfulness of the Manifest
It is prohibited to declare a scope, a set of tools or an autonomy level that does not correspond to the real Agent. When the scope, tools or level change, the Tenant must revoke or re-issue within 72 hours.
3Prohibited uses of the Seal
- Using the Seal or the Verifier to give an appearance of legitimacy, official status or public supervision to an agent, a product or a company.
- Presenting the Seal as an accreditation, a conformity assessment, a licence or an administrative authorisation.
- Agents that impersonate an identifiable natural person, or that pass themselves off as human when asked directly.
- Agents that impersonate a public authority, a regulator, a financial institution or a third party’s brand.
- Displaying the Seal for an Agent whose Credential is revoked, expired or suspended, or hiding or misrepresenting the status returned by the Verifier.
- Altering, cropping or recolouring the Seal, or presenting it alongside elements suggesting issuance by a State, the European Union or a standards body.
- Use in fraud, phishing, market manipulation, child sexual abuse material, weapons, or any unlawful activity.
- Agents that execute autonomous payments, delete audit records or escalate privileges — the A5 class of our own scale.
- Resale or transfer of Credentials to third parties outside the contracted workspaces.
- Use of the Seal by an Agent of a non-contracting third party.
4Security and integrity
It is prohibited to circumvent limits, scan without authorisation, bulk-extract the public registry, or use the API to build a competing service by scraping.
Good-faith security research is welcome and is covered by the safe harbour described in our responsible disclosure policy, provided the researcher stays within the published scope, does not access data belonging to other Tenants and reports privately before publishing.
5Reporting abuse
Anyone — not only Tenants — may report abuse at abuse@digitalcortex.tech and from the form on every verification page. A report should identify the Seal or verification URL concerned and explain why it is considered abusive.
We acknowledge receipt within 24 business hours and decide within 5 business days. Decisions are notified to the reporter and to the Tenant with a statement of reasons, and this mechanism is the notice and action mechanism referred to in Article 16 of Regulation (EU) 2022/2065.
6Enforcement ladder
- Warning.
- Suspension of new issuance.
- Revocation of the Credential, with a public note in the Verifier.
- Termination of the contract.
- Notification to the competent authorities where required.
Every restriction carries a statement of reasons and the Tenant has a right of internal complaint, which is handled by a person who did not take the original decision.
7Emergency action
Cosmolabs may revoke without prior notice where there is a serious and imminent risk, with notification and a statement of reasons within 24 hours afterwards.