Terms of Sale and Use · Safe to Ship

Section 2 is the one that matters. Please read it before you buy, because it describes what this product cannot do for you.

1. What you are buying

Safe to Ship is a written protocol. It is a set of documents you load into an AI assistant you already have, such as Claude, ChatGPT, Gemini or a coding tool. The AI then follows that protocol to review software you built.

I supply the documents. I do not supply the review. The review is performed by your AI assistant, on your systems, under your control. I never see your code, your systems or your results, and I am not a party to that review.

2. What Safe to Ship is not

Running this does not make your software secure, and it cannot promise you will not be hacked. It is a structured way to look for problems you may not know you have. Finding problems is not the same as being safe, and no review, human or otherwise, can make that promise.

Safe to Ship is not:

a guarantee that your software is secure, or that it will stay secure
a guarantee that you will not be hacked, breached, exposed, attacked or suffer data loss
a penetration test, a security audit, a code audit or an assurance engagement
a certification, and it does not make you compliant with SOC 2, ISO 27001, PCI DSS, the GDPR, the Privacy Act or any other standard, law or framework
legal advice, financial advice, or professional engineering advice
a substitute for a qualified security professional

It helps you check. Running it should put you in a better position than not running it. It cannot put you in a safe position, and nothing in it should be read as saying otherwise.

3. Limits you need to understand before you buy

AI assistants make mistakes

They miss things. They state details incorrectly. They can be confidently wrong. This happens even when following a detailed protocol, and it will happen to you. Verify every finding before you act on it.

Results vary and cannot be predicted

What the review finds depends on which AI you use, which model version, how much access you give it, how you answer its questions, and the state of your own systems. Two people running this on the same project may get different results. I make no representation about what your run will find.

It only sees what it is shown

Most of a real system is invisible in its code. If you do not give the AI access, or do not answer its questions, large parts of your build are never assessed. The protocol reports these as UNKNOWN. An UNKNOWN is not a pass.

Software and threats change

The pack reflects standards and platform behaviour as at the date stated inside it. Vendors change defaults, and new attacks appear. A check that passed last month may not pass today.

4. Your responsibilities

By buying and using Safe to Ship you agree that:

You will only run it on systems you own, or have written permission to test. Running security checks against systems you do not control may be a criminal offence.
You remain responsible for your own software. Every decision about what to fix, how to fix it, when to launch, and whether to accept a risk is yours.
You will verify before acting. You will not apply a change to a production system solely because an AI suggested it.
You will handle your own credentials safely. Do not paste passwords, keys or tokens into an AI chat. Where the protocol finds one, treat it as compromised and replace it.
You accept that you, not I, control the data you give your AI. Check your AI provider's data and training settings before uploading anything. I have no visibility of, or control over, what you send them.
You will not present the output as an audit or certification to a customer, insurer, regulator, investor or anyone else. It is a self review.

5. Limitation of liability

To the maximum extent permitted by law, and subject always to section 6:

I am not liable for any loss or damage arising from your use of, or reliance on, Safe to Ship or anything your AI produces while using it. This includes security incidents, unauthorised access, data loss or corruption, service interruption, regulatory action, lost profits, lost revenue, lost data, reputational harm and any indirect or consequential loss.
I am not liable for anything an AI assistant says, does, misses or gets wrong, whether or not it was following this protocol.
I am not liable for a vulnerability existing in your software, whether or not the protocol covers it, and whether or not the review found it.
Where liability cannot lawfully be excluded, my total liability for all claims is limited, at my option, to resupplying the pack or refunding what you paid for it.

Nothing in this section operates to exclude, restrict or modify any right or remedy you have that cannot lawfully be excluded, restricted or modified.

6. Your rights under the Australian Consumer Law

You have rights I cannot take away

My goods and services come with guarantees that cannot be excluded under the Australian Consumer Law. Among other things, that means what I supply must match its description, must be fit for any purpose I have said it is fit for, and must be of acceptable quality.

If I fail to meet a consumer guarantee, you are entitled to a remedy under the law, and these terms do not affect that entitlement. If anything in these terms is inconsistent with the Australian Consumer Law, the Australian Consumer Law prevails.

7. Refunds

Try it free first. A free edition is available so you can see exactly what this does, on your own build, before paying anything.

Because that free trial exists, I do not offer change of mind refunds on the paid pack. A change of mind is not covered by the consumer guarantees.

This does not affect your rights under section 6. If the pack is faulty, is not as described, or does not do what I have said it does, you are entitled to a remedy under the Australian Consumer Law, and you should contact me.

8. Licence

You may use Safe to Ship on your own projects, and on projects you are engaged to work on.

You may not resell it, republish it, redistribute it, share your copy, or repackage its content as your own product. You may not remove attribution. Full licence terms are in the LICENSE.md file inside the pack, and those terms apply alongside these.

9. Updates

Your purchase is for the version of the pack available when you buy. I may release updated versions as standards and platforms change, but I am not obliged to.

10. Governing law

These terms are governed by the laws of Victoria, Australia. You and I submit to the non-exclusive jurisdiction of the courts of that State.

11. Contact

[LEGAL NAME], ABN [ABN]
[POSTAL ADDRESS]
[CONTACT EMAIL]

How your privacy is handled is set out separately in the Privacy Policy, which forms part of these terms.