Legal
Early-access software. Contracts are pre-audit. Use only testnet or local Anvil funds you can afford to lose.
Nothing on this site is offered as a finished product. The contracts have not been through a professional audit, mainnet stays blocked until one is published (audit status), and parts of the stack are still mocked — SECURITY.md names which. Run it against local Anvil or a public testnet, with funds whose loss you would shrug at.
The public lacrew repository is Apache-2.0. You may self-host the orchestrator without using lacrew.xyz, and nothing in these terms attaches to that: the licence in the repo is the whole agreement for the open half.
The cloud sells orchestration convenience. It must not be able to spend org funds outside onchain policy — that is a property the contracts enforce, not a promise made here. Public billing awaits legal review (F2.15).
Your root key is yours. The cloud holds scoped, expiring session keys only, and revocation runs from your key path rather than ours — which also means recovering a lost root is not something we can do for you. Guardian is monitoring, not enforcement.
This is a placeholder written by the people building the product, not a binding agreement drafted by counsel. Crypto-literate legal review is a gate before the cloud accepts public money (PRD F2.15), and the terms that replace this page will come out of it. If you need the real thing before then, ask us and you will get a straight answer about where it stands.
Contact: legal@lacrew.xyz