Effective date: July 8, 2026 · Last updated: July 8, 2026
This Tiresias-ZT Software License Agreement supplements, and is to be read together with, the Saluca Terms of Service ("ToS"), which governs the commercial subscription. Where a term here concerns commercial subscription mechanics, it defers to the ToS.
This Tiresias-ZT Software License Agreement (this "Agreement" or "EULA") is a legal agreement between Saluca LLC, a California limited liability company ("Saluca," "we," "us," or "Licensor"), and the individual or legal entity that installs, accesses, or uses the Software (the "Licensee," "you," or "your").
BY INSTALLING, ACCESSING, RUNNING, OR OTHERWISE USING THE SOFTWARE — INCLUDING BY PULLING, DEPLOYING, OR EXECUTING THE CONTAINER IMAGE OR NPM LAUNCHER — YOU AGREE TO BE BOUND BY THIS AGREEMENT. IF YOU ARE ACCEPTING ON BEHALF OF AN ENTITY, YOU REPRESENT THAT YOU HAVE AUTHORITY TO BIND THAT ENTITY. IF YOU DO NOT AGREE, DO NOT INSTALL OR USE THE SOFTWARE.
The Software is proprietary and confidential. It is licensed, not sold. All rights not expressly granted are reserved. Per-file license identifier: LicenseRef-Saluca-Proprietary (All Rights Reserved), except for third-party open-source components governed by their own licenses as described in Section 7.
Capitalized terms have the meanings given below or where defined elsewhere in this Agreement. Terms used but not defined here have the meanings given in the ToS.
1.1 "Software" means the Tiresias-ZT proprietary software distributed by Saluca — a self-hosted "zero-trust" proxy that functions as a Policy Enforcement Point (PEP) governing AI agents' access to memory and Model Context Protocol ("MCP") backends — together with the container image (ghcr.io/salucallc/tiresias-zt), the npm launcher package, and any associated command-line utilities, in each case in object-code/binary form, including any Updates provided under Section 8. The Software does not include the Open-Source Components (Section 7), which are licensed separately.
1.2 "Documentation" means the user, administrator, deployment, and API documentation Saluca makes generally available for the Software, as updated from time to time.
1.3 "License Key" means the cryptographic license credential Saluca issues to authorize use of the Software at a particular Tier — specifically, an Ed25519-signed JSON Web Token (JWT) that encodes, at minimum, the licensed Tier, scope, and expiry, and that the Software verifies offline against a public key embedded in the Software.
1.4 "Tier" means the license level that determines which features and usage limits are available. Tiers are: Community, Starter, Pro, Enterprise, and MSSP. Higher Tiers unlock additional features and higher usage limits (for example, analytics, SIEM export, fleet size, and per-tenant/child limits) as described in the Documentation and the applicable Order/ToS. The specific per-Tier feature and usage-limit matrix is set out in the Documentation and incorporated into this Agreement by reference, and is encoded in the License Key and the applicable Order/plan.
1.5 "Community Tier" means the free, unlicensed Tier at which the Software operates when no valid License Key is present. At the Community Tier, the core zero-trust enforcement path remains functional, but paid features and elevated limits are disabled.
1.6 "Community-Tier operation" and use of the Software at the Community Tier are governed by this Agreement. There is no separate free-use license: Community-Tier use is subject to the same terms and restrictions in this Agreement, with paid features and elevated limits disabled, except where a term expressly applies only to a paid Tier.
1.7 "Partner Authority Certificate" or "PAC" means a credential Saluca issues to an authorized partner or managed security service provider ("MSSP") under the Delegated Licensing Program (Section 4) that authorizes the partner, within stated Tier, scope, quantity, and time bounds, to issue sub-licenses (in the form of License Keys) to the partner's own end customers.
1.8 "Watchdog" means the component of the Software that continuously re-validates the License Key and enforces Tier entitlements, including by degrading the running instance to the Community Tier if a valid License Key is not present, as described in Section 3.
1.9 "Order" means an order form, quote, subscription confirmation, or other ordering document under the ToS that specifies the purchased Tier, term, quantity, and limits.
1.10 "Subscription Term" means the period for which the Licensee has an active, paid subscription to the applicable Tier under the ToS/Order.
1.11 "Tenant" / "Child" means a distinct governed unit (for example, a customer organization, environment, or downstream instance) counted against the quantity/fleet limits of the applicable Tier or PAC. The Software is licensed and metered by governed tenant / child instance in accordance with the limits of the applicable Tier, as encoded in the License Key and specified in the Order/plan.
2.1 Grant. Subject to the Licensee's continuous compliance with this Agreement and the ToS (including payment of all fees), Saluca grants the Licensee a non-exclusive, non-transferable, non-sublicensable (except under the PAC program in Section 4), revocable, and limited license, during the Subscription Term, to:
(a) install and run the Software, in object-code form, on infrastructure owned or controlled by the Licensee (including cloud infrastructure the Licensee lawfully controls);
(b) use the Software solely for the Licensee's own internal business purposes — namely, to govern the Licensee's own AI agents' access to the Licensee's memory/MCP backends; and
(c) make a reasonable number of copies of the Software solely as necessary for installation, backup, and disaster recovery,
in each case only at the Tier for which the Licensee holds a valid License Key and only within the usage limits of that Tier (including tenant/child, fleet-size, and per-tenant limits).
2.2 Community Tier use. The Licensee may install and run the Software at the Community Tier without a paid subscription, subject to this Agreement. Community-Tier use confers no right to paid features.
2.3 Documentation. Saluca grants the Licensee a limited, non-exclusive right to use the Documentation solely to support the Licensee's authorized use of the Software.
2.4 Reservation. The Software is licensed, not sold. Saluca and its licensors reserve all rights not expressly granted in this Agreement. No license is granted by implication, estoppel, or otherwise.
2.5 Affiliates and contractors. The Licensee's affiliates and third-party contractors may operate the Software solely on the Licensee's behalf and for the Licensee's internal business purposes, provided that (a) the Licensee ensures each such affiliate and contractor complies with this Agreement, (b) each contractor is bound by written obligations at least as protective as this Agreement, (c) no affiliate or contractor makes any independent use of the Software, and (d) the Licensee remains fully responsible and liable for all acts and omissions of its affiliates and contractors as if they were the Licensee's own.
3.1 Offline verification. The Software verifies the License Key locally and offline, using an Ed25519 public key embedded in the Software, to confirm the encoded Tier, scope, and expiry. No network call to Saluca, and no telemetry, is required for license verification. (See also Section 9.)
3.2 Watchdog and degradation. The Software's Watchdog continuously re-validates the License Key at runtime. If the License Key is missing, invalid, malformed, revoked, or expired, the Software will degrade the running instance to the Community Tier — that is, it disables paid features and reduces limits to Community-Tier levels. The Watchdog does not block or disable the core zero-trust enforcement path; degradation affects only paid features and elevated entitlements.
3.3 Term tied to subscription. The License Key term is tied to the active Subscription Term. If the subscription lapses, is suspended, or terminates, the License Key expires (or is not renewed), and the instance degrades to the Community Tier under Section 3.2.
3.4 No tampering or circumvention. The Licensee shall not, and shall not permit any third party to: (a) forge, alter, tamper with, or fabricate a License Key or any signature or claim therein; (b) extract, replace, or circumvent the embedded verification key or the Watchdog; (c) disable, bypass, or defeat Tier gates, usage limits, or feature locks; (d) operate the Software at a Tier or scope, or beyond the limits, for which it does not hold a valid License Key; or (e) misrepresent the number of tenants/children or other metered units. Any such act is a material breach and may constitute a violation of applicable anti-circumvention and computer-fraud law.
3.5 Key security. The Licensee shall protect License Keys as Saluca Confidential Information (Section 10) and shall not publish, share, resell, or redistribute a License Key except as expressly permitted under the PAC program.
4.1 Program. Saluca may authorize certain partners and MSSPs to issue bounded sub-licenses to their own end customers under the Delegated Licensing Program. An authorized partner receives a Partner Authority Certificate (PAC) that cryptographically bounds the sub-licenses the partner may issue by Tier, scope, quantity, and time.
4.2 Bounded sub-licensing. A partner may issue License Keys to its end customers only within the caps and constraints encoded in its PAC. A partner cannot exceed the Tier, scope, tenant/child quantity, or time bounds of its PAC, and any sub-license purporting to exceed those bounds is void and unauthorized.
4.3 Partner obligations. Each authorized partner shall, at minimum: (a) issue sub-licenses only to bona fide end customers for those customers' internal business use; (b) flow down terms at least as protective as this Agreement to each end customer; (c) not exceed its PAC caps; (d) protect its PAC and issuing keys as Confidential Information; (e) promptly cease issuance upon expiry, suspension, or revocation of its PAC; and (f) remain responsible to Saluca for its end customers' compliance to the extent set out in the Partner Agreement.
4.4 Separate Partner Agreement controls. The PAC program terms are set out in a separate Partner/MSSP Agreement, which governs the partner's rights, obligations, indemnities, and the wind-down of outstanding sub-licenses upon expiry, suspension, or revocation of a PAC. This Section 4 is descriptive; in the event of a conflict regarding partner rights, the Partner Agreement controls. No partner may exceed the caps encoded in its PAC.
4.5 No other sublicensing. Except under a valid PAC in accordance with this Section 4 (and the applicable Partner Agreement), the Licensee has no right to sublicense, resell, or redistribute the Software or any License Key.
The Licensee shall not, and shall not authorize or permit any third party to:
5.1 Redistribute / resell / host as a service. Distribute, sublicense (except via a valid PAC), resell, lease, lend, or make the Software available to any third party, including by operating the Software as a hosted, managed, or "as-a-service" offering for third parties, or in any service-bureau, time-sharing, or outsourcing arrangement. This restriction does not apply to authorized partners and MSSPs delivering Tiresias-ZT-powered services to their own end customers strictly under a valid PAC and the applicable Partner Agreement (Section 4).
5.2 Reverse engineer. Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, underlying ideas, algorithms, structure, or organization of the Software, except and only to the extent that this restriction is prohibited by applicable law (for example, to obtain interoperability information under Article 6 of the EU Software Directive), and then only after providing Saluca prior written notice and a reasonable opportunity to provide the relevant information or interoperability interface.
5.3 Notices. Remove, alter, obscure, or falsify any proprietary, copyright, trademark, confidentiality, SPDX, or other notice or identifier in or on the Software, Documentation, or License Key.
5.4 Circumvent controls. Circumvent, disable, or interfere with the License Key verification, the Watchdog, Tier gates, feature locks, usage metering, or any security or license-control mechanism (see also Section 3.4).
5.5 Unauthorized copying. Copy the Software except as expressly permitted in Section 2.
5.6 Benchmarking / competitive publication. Publicly disclose or publish any benchmark, performance, or competitive-analysis results regarding the Software without Saluca's prior written consent.
5.7 Competing product. Use the Software, Documentation, or any Confidential Information to develop, train, or build a product or service that competes with the Software, or to assist a third party in doing so.
5.8 Unlawful / prohibited use. Use the Software in violation of applicable law, the ToS, or any usage policy, or in any manner not expressly authorized by this Agreement.
5.9 Third-party rights. Use the Software to infringe or misappropriate any third party's intellectual property or other rights.
6.1 Ownership. As between the parties, Saluca (and its licensors) owns and retains all right, title, and interest in and to the Software, the Documentation, the License Key system, the Watchdog, the PAC system, and all related intellectual property rights, including all copyrights, patents, patent applications, trademarks, trade secrets, and other proprietary rights, and all modifications, enhancements, and derivative works thereof.
6.2 No implied rights. The Licensee receives only the limited license rights expressly granted in this Agreement. No ownership interest is transferred. All rights not expressly granted are reserved to Saluca.
6.3 Feedback. If the Licensee provides Saluca with suggestions, ideas, or feedback about the Software, Saluca may use them without restriction or obligation, and the Licensee grants Saluca a perpetual, irrevocable, worldwide, royalty-free license to use and incorporate such feedback for any purpose.
6.4 Trademarks. "Saluca," "Tiresias-ZT," and related names and logos are trademarks of Saluca. This Agreement grants no right to use them except as required for permitted use and attribution.
7.1 Carve-out. The Software incorporates or vendors certain third-party open-source software ("Open-Source Components"), which are provided under their own respective licenses and not under the proprietary terms of this Agreement. To the extent the terms of an Open-Source Component's license conflict with this Agreement with respect to that component, the Open-Source Component's license controls for that component.
7.2 SoulGuard (Apache-2.0). The Software vendors SoulGuard, which is licensed under the Apache License, Version 2.0, and remains subject to that license, including its attribution and NOTICE requirements. Nothing in this Agreement limits, supersedes, or expands the Licensee's rights or obligations under the Apache-2.0 license as to SoulGuard.
7.3 Notices. Required open-source license texts, attributions, and NOTICE files are provided with the Software and/or in the Documentation. The Licensee shall retain and reproduce all such notices as required by the applicable open-source licenses.
7.4 No limitation of OSS rights. Nothing in this Agreement is intended to, or shall, restrict any right the Licensee has under any applicable open-source license with respect to the corresponding Open-Source Component.
8.1 Delivery. The Software is delivered electronically via the container registry (ghcr.io/salucallc/tiresias-zt) and/or the npm launcher package. The Licensee is responsible for pulling, deploying, and operating the Software on its own infrastructure.
8.2 Updates. Saluca may make updates, upgrades, patches, and new versions ("Updates") available at its discretion and as provided for the applicable Tier. Updates are part of the Software and are governed by this Agreement unless accompanied by separate terms.
8.3 Deprecation and supported versions. Saluca may deprecate features or versions and may define which versions are supported, in each case on reasonable prior notice.
8.4 Support and service levels. Support and service levels, if any, are provided per the applicable Tier and are governed by a separate support/SLA schedule.
9.1 Licensee data stays with Licensee. The Software runs on the Licensee's own infrastructure. The data the Software governs (including the Licensee's memory/MCP backend data and the contents of governed agent traffic) remains on the Licensee's infrastructure. Saluca does not receive that data.
9.2 No required phone-home. Because License Key verification is performed offline (Section 3.1), routine operation and license enforcement do not require the Software to transmit operational data or telemetry to Saluca.
9.3 Optional, opt-in central control plane. For Enterprise and MSSP Tiers, the Licensee may opt in to enrolling the Software with a Saluca-operated central control plane and/or to shipping signed audit records to Saluca. Any such enrollment and data transmission is optional and occurs only if the Licensee affirmatively enables it, and is governed by the ToS and any applicable data-processing terms.
9.4 Security posture. Saluca's SOC 2 examination is in progress; the Software and Saluca are not SOC 2 certified as of the effective date of this Agreement. Saluca makes no representation of SOC 2 certification.
10.1 Confidential Information. The Software (in non-Community, unmodified proprietary form), the License Key and key material, the PAC system, non-public Documentation, and any non-public technical or business information Saluca designates or that reasonably should be understood as confidential are Saluca's "Confidential Information."
10.2 Obligations. The Licensee shall (a) protect Confidential Information using at least reasonable care, (b) not disclose it except to personnel and permitted contractors with a need to know who are bound by confidentiality obligations at least as protective as these, and (c) use it only as necessary to exercise its rights and perform its obligations under this Agreement.
10.3 Exclusions. Confidentiality obligations do not apply to information that is or becomes public through no fault of the Licensee, was rightfully known without obligation of confidentiality, is independently developed without use of Confidential Information, or is rightfully received from a third party without restriction. Open-Source Components are not Confidential Information.
10.4 Compelled disclosure. The Licensee may disclose Confidential Information to the extent legally compelled, provided it gives (where lawful) prompt notice and reasonable cooperation to seek protective treatment.
11.1 THE SOFTWARE, DOCUMENTATION, AND LICENSE KEYS ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SALUCA AND ITS LICENSORS DISCLAIM ALL WARRANTIES, EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.
11.2 SALUCA DOES NOT WARRANT THAT THE SOFTWARE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, THAT DEFECTS WILL BE CORRECTED, OR THAT THE SOFTWARE WILL MEET THE LICENSEE'S REQUIREMENTS. THE LICENSEE INSTALLS, CONFIGURES, AND OPERATES THE SOFTWARE ON ITS OWN INFRASTRUCTURE AND IS SOLELY RESPONSIBLE FOR ITS DEPLOYMENT, CONFIGURATION, POLICIES, AND USE, AND FOR THE RESULTS OBTAINED. THE SOFTWARE IS A SECURITY CONTROL AMONG OTHERS AND IS NOT A GUARANTEE AGAINST ALL SECURITY EVENTS.
11.3 Open-Source Components are provided under their own licenses, which contain their own warranty disclaimers.
12.1 Subject to the ToS cap. The parties' liability arising out of or relating to the Software and this Agreement is governed by, and subject to, the aggregate limitation and exclusions of liability set out in the ToS, which are incorporated by reference. This Agreement does not increase either party's aggregate liability beyond the cap stated in the ToS, and the ToS's exclusion of indirect, incidental, consequential, special, exemplary, and punitive damages (and of lost profits, revenue, data, and goodwill) applies equally here.
12.2 Community-Tier and standalone use. If the Licensee uses the Software at the Community Tier or otherwise without a ToS in force, then to the maximum extent permitted by law Saluca's total aggregate liability arising out of or relating to the Software and this Agreement shall not exceed one hundred U.S. dollars (US$100), and Saluca shall have no liability for any indirect, incidental, consequential, special, exemplary, or punitive damages, or for any lost profits, revenue, data, or goodwill.
12.3 Allocation of risk. The limitations in this Section and the ToS are an essential basis of the bargain and apply even if a remedy fails of its essential purpose.
13.1 Term. This Agreement takes effect upon the Licensee's first installation or use of the Software and continues for the applicable Subscription Term (and, for Community-Tier use, for as long as the Licensee uses the Software), unless terminated earlier.
13.2 Termination for breach. Saluca may suspend or terminate the license upon the Licensee's material breach of this Agreement, including any breach of Sections 3, 4, 5, 6, or 10, if not cured within thirty (30) days after notice, or immediately for breaches not reasonably capable of cure or for anti-circumvention/tampering.
13.3 Tie to subscription. The paid license tracks the subscription under the ToS. Expiration, non-renewal, suspension, or termination of the subscription causes the License Key to expire and the instance to degrade to the Community Tier (Sections 3.2–3.3).
13.4 Effect of termination. Upon termination of the license (other than a mere degrade-to-Community event): (a) the Licensee's rights under Section 2 (as to the terminated Tier) end; (b) the Licensee shall cease using the affected Software features; and (c) upon full termination of all license rights, the Licensee shall uninstall and destroy all copies of the Software and License Keys in its possession or control and, upon Saluca's request, certify such destruction in writing. Degradation to the Community Tier does not by itself require uninstallation, provided Community-Tier use remains authorized.
13.5 Survival. Sections 1, 5, 6, 7, 9.1, 10, 11, 12, 13.4, 13.5, 14, 15, 16, 17, and 18 survive termination.
14.1 The Software is security software that uses standard cryptography and may be subject to U.S. export control laws and regulations, including the Export Administration Regulations ("EAR"), and to economic sanctions administered by the U.S. Office of Foreign Assets Control ("OFAC"), and to comparable laws of other jurisdictions. The Licensee shall comply with all applicable export, re-export, import, and sanctions laws.
14.2 The Licensee represents that it is not located in, organized under, or ordinarily resident in, and will not use or provide the Software to any person in, an embargoed or comprehensively sanctioned jurisdiction, and that it is not a denied, blocked, or sanctioned party. The Licensee shall not use, export, or re-export the Software in violation of applicable law, including for any prohibited end use, or to any embargoed destination or denied party.
The Software and Documentation are "commercial computer software" and "commercial computer software documentation" as those terms are used in FAR 12.212 and DFARS 227.7202. If licensed to or on behalf of the U.S. Government, the Software and Documentation are provided with only those rights granted to all other end users under this Agreement, consistent with FAR 12.212 and DFARS 227.7202-1 through 227.7202-4, and no greater rights are conveyed.
16.1 Saluca may verify the Licensee's compliance with this Agreement (including Tier, scope, and usage limits) by requesting the Licensee's written self-certification and/or, no more than once in any twelve (12) month period, on at least fifteen (15) days' prior written notice and during normal business hours, by conducting an audit of the Licensee's records relevant to license compliance. Any such audit shall be at Saluca's expense unless a material shortfall is found.
16.2 If verification reveals use exceeding the licensed Tier or limits, the Licensee shall promptly true-up and pay the applicable fees and, where the shortfall exceeds five percent (5%) of the Licensee's licensed entitlement, Saluca's reasonable audit costs.
16.3 Given offline verification and Saluca's no-phone-home posture, any audit shall respect the Licensee's confidentiality and the fact that governed data does not leave the Licensee's infrastructure. Audit scope is limited to license-compliance records and metadata and does not extend to the Licensee's governed data.
17.1 This Agreement is governed by, and construed in accordance with, the laws of the State of California, without regard to its conflict-of-laws rules. The U.N. Convention on Contracts for the International Sale of Goods and the Uniform Computer Information Transactions Act do not apply to this Agreement.
17.2 The parties submit to the exclusive jurisdiction of the state and federal courts located in California for the resolution of any dispute arising out of or relating to this Agreement, consistent with the dispute-resolution provisions of the ToS. Each party waives any right to a jury trial and any right to participate in a class, collective, or representative action with respect to such disputes.
17.3 Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.
18.1 Relationship to the ToS; precedence. This Agreement supplements the ToS and governs the Licensee's rights in the Software itself. In the event of a conflict, the ToS controls for commercial and subscription matters, and this EULA controls for software-license matters; for partner rights, the applicable Partner Agreement controls as provided in Section 4.
18.2 Entire agreement (as to the Software). This Agreement, together with the ToS, applicable Orders, the Documentation, any support/SLA schedule, and (for partners) the Partner Agreement, constitutes the entire agreement regarding the Software license and supersedes all prior or contemporaneous understandings on that subject.
18.3 Assignment. The Licensee may not assign or transfer this Agreement or any rights or obligations hereunder, by operation of law or otherwise, without Saluca's prior written consent; any purported assignment in violation of this Section is void. Saluca may assign this Agreement.
18.4 Notices. Legal notices to Saluca under this Agreement must be sent to legal@saluca.com. Saluca may give notices to the Licensee by email to the address associated with the Licensee's account or subscription, or by posting within the Software or Documentation. Notices are effective upon receipt (or, for email, upon successful transmission).
18.5 Severability. If any provision is held unenforceable, it will be modified to the minimum extent necessary, or severed, and the remaining provisions remain in effect.
18.6 Waiver. No waiver is effective unless in writing, and no failure or delay in exercising any right is a waiver.
18.7 Force majeure. Neither party is liable for any delay or failure to perform (other than payment obligations) caused by events beyond its reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, labor disputes, governmental action, and failures of the Internet, utilities, or third-party infrastructure.
18.8 No agency. The parties are independent contractors; this Agreement creates no partnership, agency, or joint venture.
18.9 Independent development. Nothing restricts Saluca from independently developing or offering products or services.
18.10 Updates to this Agreement. Saluca may update this Agreement from time to time. Material changes will be effective prospectively upon reasonable notice (for example, by posting an updated version with a new "Last updated" date or by notifying the Licensee), and the Licensee's continued use of the Software after the effective date of an update constitutes acceptance. For any in-term paid subscription, changes that materially reduce the Licensee's rights will not apply until the start of the next renewal term.
Saluca LLC · legal@saluca.com