This notice applies to the PwnMesh project's code, tools, and related documentation. Read this notice and the PolyForm Noncommercial License 1.0.0 before use. The license governs permission to use, copy, modify, and distribute the software. This notice neither replaces nor changes the license, and does not grant permission to test any third-party system.

PwnMesh is intended for lawful technical research, authorized security testing, internal risk assessments, and other technical work permitted by the license. Its security testing features are intended to help discover and validate risks, improve defenses, and support vulnerability management in compliance with applicable requirements.

Public availability of the code does not permit unrestricted commercial use or authorize testing of any target. Before using it for commercial purposes, verify that the use falls within the license's scope and obtain separate authorization from the rights holder if necessary.

Before testing, users must obtain written authorization from the target system's rights holder or another party entitled to grant it, specifying the targets, time window, methods, account permissions, and scope of data processing. When testing their own systems, users must also confirm that third-party resources outside the authorized scope will not be affected.

Scanning, probing, penetration testing, data acquisition, traffic analysis, and other automated testing without authorization or beyond granted permissions or scope are strictly prohibited, including against:

• Internet systems for which authorization has not been obtained;
• Critical information infrastructure in finance, energy, government, communications, transportation, and other sectors;
• Business systems belonging to third-party organizations or individuals, or hosted in public clouds;
• Information systems that laws or regulations prohibit testing.

Authorization does not relieve users of their obligations under applicable laws, regulatory requirements, or the target service's rules. If the scope is unclear, authorization is withdrawn, or testing causes unexpected effects, stop the relevant operations and resolve the issue before continuing.

This project must not be used for:

1. Unlawful intrusion or control, data theft, traffic attacks, or malicious exploitation of vulnerabilities;
2. Illicit or legally dubious commercial activities, unlawful profit, malicious destruction, unauthorized mass scanning, or online harassment;
3. Bypassing security controls, permission checks, or other protections for unlawful purposes;
4. Activities that endanger cybersecurity, disrupt public order, or infringe privacy, intellectual property, or other lawful rights and interests.

This project is provided as is. To the extent permitted by applicable law, its authors, maintainers, and contributors make no warranties as to its accuracy, completeness, security, continued availability, or fitness for a particular purpose. Limitations of liability are governed by the LICENSE and applicable law.

Automated execution, model outputs, and tool results may contain errors, omissions, or unexpected behavior. They cannot replace users' independent judgment and do not constitute legal advice or certification of security compliance. Users must assess risks such as execution privileges, data exposure, system changes, service disruptions, and third-party service charges, and take appropriate isolation, backup, and verification measures.

Making the project's code publicly available does not constitute approval, authorization, or assistance for unlawful use by third parties. Each party bears responsibility according to its actual conduct, fault, and applicable law. This notice does not exclude or limit liability that cannot lawfully be waived, nor does it automatically exempt anyone from criminal, administrative, or civil liability.

Users must understand and comply with the laws and regulations applicable to their location, the target system's location, and the relevant data processing activities. Where Chinese law applies, users must comply with the Cybersecurity Law of the People's Republic of China, the Criminal Law of the People's Republic of China, and other relevant provisions. Any required industry-specific procedures, qualifications, filings, or approvals must be completed before undertaking the activity.

Users must properly protect test accounts, credentials, personal information, business data, and test evidence, and collect, use, retain, or disclose them only within the authorized scope. Before sending materials to a model service or another third-party service, users must confirm that they have the necessary permissions and comply with the relevant data processing requirements.

Discovered vulnerabilities must be reported in accordance with the authorization agreement and applicable vulnerability disclosure rules. Vulnerabilities or data obtained during testing must not be used for extortion, trading, or other unlawful activities.

To the extent permitted by applicable law and the existing license, project maintainers may refuse technical support for suspected unlawful uses, discontinue subsequent services or distribution channels they provide, and lawfully report indications of misuse to the relevant platforms or authorities.

Relevant evidence must be collected, retained, and provided lawfully. This notice does not imply that the project has remote monitoring, automatic reporting, or remote deactivation features, nor does it automatically revoke rights that users have lawfully obtained under the license.

Use PwnMesh only within lawful authorization and the scope permitted by the license. Users are legally responsible for their actions, data processing, and resulting consequences. The responsibility of parties associated with the project must likewise be determined by their actual conduct and applicable law.

If any part of this notice conflicts with mandatory provisions of applicable law, those provisions prevail. Consult an appropriately qualified professional before use if you have questions about authorization, licensing, or the scope of liability.