mend.rest

BETA terms of use
Read this first  Development-grade, single-operator service. This document is a starting draft and it has not been reviewed by a lawyer. It carries unfilled placeholders the owner still has to supply, listed in §8. Last updated 2026-08-19.

What you are agreeing to, in one paragraph

The long version is below, and it says the same thing.

You may use mend.rest to referee delegated work. It will give you evidence — an appraisal against a contract you declared, a bounded repair when the work falls short, an independent verification of the fix, and a report that names what could not be observed. It will not give you a guarantee, and it does not claim to be available tomorrow. One person runs it. If it stops, it stops.

See also Privacy and the site map.

1 · Development-grade. No warranty, no SLA, no uptime commitment.

Quoted from the product's own limitations rather than paraphrased, because a paraphrase is where a promise sneaks in.

Grade“development-grade: the preregistered effectiveness benchmark has NOT been executed (held-out execution is BLOCKED pending independent steward isolation), so this service makes NO effectiveness, accuracy, or assurance claim”
Deployment“publicly served over HTTPS at api.mend.rest; a single-operator hosted deployment, not a production-grade or highly available service”
Evidence base“the evidence base for this software is fixture data; the open service now receives real submitted work, and no approval covers customer or external data”
In plain terms: the service is provided as is and as available, with no warranty of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement. There is no service-level agreement, no uptime commitment, no support commitment, and no guarantee that your data survives an incident. All callers are multiplexed onto a single backend by one operator; expect no availability guarantee and no rate-limit isolation between tenants. Back up anything you would miss.

2 · The service produces evidence, not guarantees

This is the most important clause on the page, and it is a description of the product rather than a disclaimer bolted onto it.

An appraisal isA verdict against a contract you declared, before the work was judged. It is only ever as good as that contract. mend does not know what you meant; it knows what you commissioned.
The decision is yoursEvidence is separate from the relying party's decision to trust. A PASS is not permission. Whether to accept, ship, or act on refereed work remains entirely your judgement and your responsibility.
mend does not actIt takes custody, appraises, names a shortfall, and verifies a fix you supply. It never applies a repair itself and never performs the work: the repair node states what is missing as work to be done, and the orchestrator owns the action.
Absence is not proofA receipt records what the mediator observed. Absence of a receipt is unobserved, not did-not-happen, and no verifier closes that gap. Reports say so themselves.
The worker never grades itselfWhich cuts both ways: mend's own instruments must be able to report that mend lost. Nothing here entitles you to treat a mend verdict as an assurance, a certification, an audit, or professional advice of any kind.
You remain responsible for the work you delegate and for what you do with it. Using this service does not transfer that responsibility to the operator, and no output of this service is a legal, financial, safety, security, or professional opinion.

3 · Acceptable use

Short, because the list is short.

No unlawful contentDo not submit content that is unlawful where you are, or that you have no right to submit. Remember what §1 and the privacy page say about custody: content is stored as plaintext and the operator can read it.
No reaching for other tenantsDo not attempt to reach, enumerate, or infer another tenant's data, keys, or state, and do not probe the isolation boundary except with the operator's prior written agreement. Adversarial review is welcome; it is welcome arranged.
No laundering responsibilityDo not use this service to launder responsibility for work you have not reviewed. A report is not a signature you get to put someone else's name on. Presenting a mend verdict as though it discharged your own review is a misuse of the product and a misuse of the word evidence.
No abuse of the instanceDo not attempt to degrade the service for other tenants, circumvent rate limits, or use the service to attack a third party. The ceilings exist so one caller cannot take the instance down for everyone.
No misrepresentationDo not represent mend.rest as having certified, approved, endorsed, or assured anything. It makes no effectiveness, accuracy, or assurance claim, and neither may you on its behalf.
The operator may suspend or terminate access for a breach of this section, and may do so without notice where the instance itself is at risk. See §7.

4 · Accounts and keys

Key custody is yours, and the design makes that unavoidable rather than merely stated.

Shown onceYour mend_live_… key is displayed exactly once, at issuance. It is not recoverable afterwards because only a SHA-256 fingerprint of it is stored — not by you, and not by the operator, who has nothing to recover it from.
You hold itYou are responsible for the custody of your key and for everything done with it. A key presented on a request is treated as you. A credential pasted into a chat window is a credential you should treat as burned.
Leaked keys are revokedRevoke from the Dashboard at any time and issue a replacement. Revocation takes effect on the next request; there is no cached grace period. If you believe a key has leaked, revoke first and investigate second.
One account per personAddresses are folded before the uniqueness check, so subaddress tricks do not create parallel accounts. Ceilings on tenants and on active keys per tenant exist and are enforced.
DormancyAn unverified signup is reclaimed after 48 hours and an idle, never-used account after 30 days, by default. A reclaimed account does not hold its address hostage: you can sign up again with the same one.
Give an address you control. The account exists to send you exactly one kind of message — the link that issues or restores your access — and an address you cannot read is an account you cannot recover.

5 · Donations

Money deserves precision, so this section is deliberately blunt.

What it isA voluntary gift that supports compute for this development instance. Nothing more.
What it is notNot a purchase. Not a subscription. Not a fee. A contribution buys no service, no support relationship, no priority, no roadmap influence, no feature commitment, and no promise about what this service will do next. It creates no contract and confers no right to anything.
Nothing changesDonating gives you no different service than not donating. The limits in §1 and §2 apply identically either way.
RefundsDonations are not refundable and there is no refund process. Give only what you are content to have given.
Not tax-deductibleThis is not a nonprofit, a charity, or a foundation, and a contribution is not tax-deductible. If any of that matters to you, the right answer is not to donate.
Payment handlingPayment is processed by Stripe, on Stripe's own hosted checkout page, on Stripe's domain, under Stripe's own terms and privacy policy. mend.rest does not receive, see, or store any payment detail, and no surface on this site collects one.
The donate control links out plainly so that you land on Stripe's domain and can see it in the address bar. An in-page payment form would hide exactly the fact that makes it safe to use, so this site has none.

6 · Liability

The clause every draft has, kept honest about the size of the thing you are relying on.

To the fullest extent permitted by applicable law, the operator is not liable for any indirect, incidental, special, consequential, or exemplary damages, nor for lost profits, lost data, or business interruption, arising from your use of or inability to use this service — including any decision you took on the strength of a report, and including loss of submitted content. You are relying on a development-grade instance run by one person and it says so on every page.

Nothing here excludes a liability that cannot lawfully be excluded. Where a limit of total liability applies, it is [OWNER TO SUPPLY: liability cap, if any — note that a free service with no fees has no natural cap to reference].

7 · Termination, and changes to the service

Both directions, stated without euphemism.

You may leaveAt any time, for any reason. Export with mend.export, purge with mend.deletion, revoke your keys, and stop. See the privacy page for what a deletion removes and what append-only history is retained by design.
The operator may terminateAccess may be suspended or terminated for a breach of §3, for conduct that threatens the instance, or where the law requires it. Where circumstances allow, notice will be given to your account address.
The service may changeMethods, limits, and surfaces may change while this is a development instance. The API is versioned by contract, not by URL, and nothing published is a stability promise. A change that alters what a report discloses will be visible in the report's own limits list, which is the authoritative statement.
The service may endIt can be withdrawn entirely. This is not a hedge; it is the honest posture of a single-operator development instance. Keep your own copy of anything you would miss.
These terms may changeThe current version is the one published here, dated at the top of the page. Continuing to use the service after a change means you accept it. Material changes will be reflected in that date.

8 · Unfilled — only the owner can supply these

Left visible on purpose. A terms page that invented a jurisdiction would be the exact defect this project has laws about.

Do not ship this page with these unresolved

two blanks
Governing law[OWNER TO SUPPLY: governing law and jurisdiction — which country/state's law applies and which courts hear a dispute]
Legal entity[OWNER TO SUPPLY: legal entity name and, if incorporated, registration number and registered address — the party these terms are between]

Supplied

resolved
ContactNotices, legal correspondence and account questions go to do@not.rest.
Until the first two are filled, these terms name no counterparty and no forum. Treat them as a statement of how the service intends to behave rather than as an enforceable agreement, and read §1 again: the service makes no assurance claim, and this page makes none about itself either.
What this document is