DISCLAIMER.md
6.9 KB查看排版效果| 1 | # Disclaimer |
| 2 | |
| 3 | ## Responsible use |
| 4 | |
| 5 | REA is built for lawful analysis: security research, malware and incident |
| 6 | analysis, vulnerability research and coordinated disclosure, CTFs and education, |
| 7 | interoperability, software preservation, and debugging or auditing software you |
| 8 | own or are authorized to examine. |
| 9 | |
| 10 | The REA project does not support, and will not help with: |
| 11 | |
| 12 | - circumventing DRM, license checks, anti-cheat systems or other technical |
| 13 | protection measures; |
| 14 | - developing game cheats or tampering with online services; |
| 15 | - bypassing authentication, bot protection or access controls on systems you are |
| 16 | not authorized to test; |
| 17 | - copying proprietary software or reproducing its protected code and assets; |
| 18 | - evading the usage policies or safety measures of AI model providers; |
| 19 | - reselling or sharing AI accounts or API access. |
| 20 | |
| 21 | You are responsible for obtaining any required authorization and for complying |
| 22 | with applicable laws, license agreements and terms of service. Reverse |
| 23 | engineering may be restricted in your jurisdiction or by the license of the |
| 24 | software you analyze. |
| 25 | |
| 26 | Requests for help with the uses above will be closed without response in issues |
| 27 | and discussions, and may result in removal from the REA community. |
| 28 | |
| 29 | ## User responsibility |
| 30 | |
| 31 | Do not use REA for unauthorized access or exploitation, credential theft, |
| 32 | malicious deployment of malware, unlawful collection or disclosure of data, |
| 33 | unauthorized service disruption, or unlawful circumvention of access controls or |
| 34 | licensing restrictions. Legitimate security research and malware analysis must |
| 35 | remain within the rights and permissions applicable to the work. |
| 36 | |
| 37 | You are responsible for your use of REA, including commands, configurations, |
| 38 | scripts, and actions you direct an AI agent to perform. Establish the legal |
| 39 | authority and scope required for the targets, accounts, devices, software, data, |
| 40 | and operations involved. Comply with applicable laws, contracts, |
| 41 | intellectual-property rights, privacy obligations, and tool licenses. Public |
| 42 | availability of software, possession of a file, or access to a debugging |
| 43 | endpoint does not by itself establish permission for every operation. |
| 44 | |
| 45 | ## Runtime, network, and device operations |
| 46 | |
| 47 | Some REA workflows execute or observe programs, attach to runtime or browser |
| 48 | endpoints, capture network traffic, interact with applications, or operate on |
| 49 | connected devices. These actions can affect application state, files, accounts, |
| 50 | devices, and services. Authorization to inspect an artifact does not necessarily |
| 51 | authorize execution, interception, device changes, or interaction with another |
| 52 | party's system. |
| 53 | |
| 54 | Review the operations you request, including agent-generated plans and scripts, |
| 55 | and use an appropriate environment for untrusted targets. You are responsible |
| 56 | for protecting credentials, personal data, captured traffic, and investigation |
| 57 | artifacts, and for obtaining any permission required to collect, retain, |
| 58 | process, or share them. Local operation does not establish authorization or |
| 59 | guarantee that executed targets and third-party tools have no external effects. |
| 60 | |
| 61 | ## Analysis results and generated output |
| 62 | |
| 63 | Decompilation, reconstruction, heuristics, and AI-assisted analysis may be |
| 64 | incomplete or incorrect. Results do not guarantee accuracy, completeness, |
| 65 | security, compatibility, or legal compliance. Review the underlying evidence and |
| 66 | verify consequential conclusions before relying on them. |
| 67 | |
| 68 | Obtaining source-like output or an analysis report does not grant rights to the |
| 69 | original program, its data, or the generated output. Check the target's rights |
| 70 | and the producing tool's applicable terms before publishing, sharing, or using |
| 71 | results in another product or service. |
| 72 | |
| 73 | ## Third-party tools and licenses |
| 74 | |
| 75 | Third-party components and analysis tools retain their own licenses, copyright |
| 76 | notices, and usage conditions. Consult |
| 77 | [Third-party notices](THIRD_PARTY_NOTICES.md) for their roles, licensing |
| 78 | records, and preserved upstream texts. |
| 79 | |
| 80 | You must legally obtain IDA Pro and Hex-Rays decompilers, Hopper, JEB, and any |
| 81 | other proprietary tools, together with the rights required for your use. REA |
| 82 | provides no commercial-tool license, key, or activation entitlement. Permitted |
| 83 | trials and demos remain subject to vendor terms. An open-source bridge or |
| 84 | accessible API does not grant additional user, machine, feature, automation, |
| 85 | hosting, or output-sharing rights. Cracked copies, stolen keys, unauthorized key |
| 86 | sharing, and bypassing license restrictions are not authorized by REA. |
| 87 | |
| 88 | ## Disclaimer of warranty |
| 89 | |
| 90 | REA is provided **AS IS**, without express or implied warranties, including |
| 91 | merchantability, fitness for a particular purpose, and noninfringement, as set |
| 92 | out in the [MIT License](LICENSE). You assume the risks of using the software |
| 93 | and deciding whether it is suitable for your task. No project description, |
| 94 | example, analysis result, or third-party integration guarantees a particular |
| 95 | outcome or establishes that your intended use is lawful or safe. |
| 96 | |
| 97 | ## Limitation of liability |
| 98 | |
| 99 | The warranty and liability provisions of the [MIT License](LICENSE) govern REA's |
| 100 | authors and copyright holders, subject to applicable law. That license disclaims |
| 101 | liability for claims, damages, and other liability arising from or in connection |
| 102 | with the software or its use, whether in contract, tort, or otherwise. This |
| 103 | document does not expand those provisions or override rights and obligations |
| 104 | that cannot be excluded under applicable law. |
| 105 | |
| 106 | ## Disclaimer of endorsement |
| 107 | |
| 108 | References to third-party projects, contributors, products, services, and |
| 109 | trademarks identify their work and REA's integrations. Credits and thanks do not |
| 110 | imply affiliation, sponsorship, approval, or endorsement by the named parties, |
| 111 | including the National Security Agency and commercial tool vendors. |
| 112 | Redistribution, bundling, or hosting by a third party does not by itself imply |
| 113 | affiliation with or endorsement by the REA project. |
| 114 | |
| 115 | ## Relationship to software licenses |
| 116 | |
| 117 | This document explains REA's intended use, user responsibilities, and community |
| 118 | support boundaries. It does not amend the MIT license, impose additional |
| 119 | copyright-license conditions, replace upstream licenses, or grant rights to |
| 120 | third-party software or targets. The applicable software licenses and agreements |
| 121 | retain their own terms. |
| 122 | |
| 123 | ## Versions, distribution channels, and platforms |
| 124 | |
| 125 | The project's position on lawful use and non-endorsement of illegal or |
| 126 | unauthorized activity covers all REA versions, distribution forms, and |
| 127 | platforms. This includes historical releases and Git commits, npm packages, |
| 128 | bundled or separately distributed REA skills, source checkouts, release |
| 129 | archives, and redistributed copies, regardless of installation method, agent |
| 130 | client, operating system, or platform. Using an older version or another |
| 131 | distribution channel does not imply project endorsement or remove obligations |
| 132 | under applicable law or to respect third-party rights. |
| 133 | |
| 134 | Each copy remains subject to the licenses accompanying that copy. This statement |
| 135 | does not retroactively amend existing license grants, add license conditions, or |
| 136 | expand historical warranty or liability exclusions. |
文件内容是平台检查时读出的文本，只供查看。平台不会运行包里的任何脚本或程序。
