Authorized testing, within a clear boundary.

Invarra authorizes good-faith security testing submitted through the public arena interface when it follows these terms and the published Arena Rules. In-scope testing may include direct jailbreaks, typed indirect prompt injection, mixed multi-turn attacks, benign lookalikes, and attempts to obtain unauthorized sandboxed mock actions.

This authorization applies only to the arena challenge surface. It does not authorize testing against Invarra infrastructure, hosting providers, accounts, databases, authentication, secrets, operators, or unrelated users.

• Denial of service, traffic flooding, session farming, or cost-exhaustion activity.
• Credential theft, account compromise, database access, infrastructure probing, or secret extraction.
• Malware, malicious code execution, real tool abuse, or attempts to create real-world side effects.
• Publishing private arena evidence, harmful model output, personal data, or exploit material obtained outside the public receipt boundary.
• Using the arena in violation of law or to harm another person or system.

The arena may enforce session, rate, file, abuse, and spending limits. Attempts may be rejected, delayed, reviewed, or removed from competitive scoring when integrity or availability is uncertain. Provider or system failures earn no competitive point.

Public handles are unverified. Receipts, scoring, and appeals follow the published arena protocol. No prize, service level, uninterrupted availability, or universal security outcome is promised.

Invarra may restrict access when activity exceeds the authorized scope or threatens arena safety, integrity, availability, or cost controls. Questions about these terms can be sent to [email protected].