1. Cryptographic Misuse & Malware Prohibition
You must NOT utilize Amaracus cryptographic APIs or infrastructure to:
- Generate, manage, or store encryption keys for ransomware, trojans, worms, rootkits, or malicious payload distribution.
- Operate rogue Certificate Authorities (CAs) or issue unauthorized, deceptive, or fraudulent X.509 code-signing certificates.
- Conduct side-channel cryptanalysis, fault injection, or unauthorized timing attacks against other tenants.
2. System Integrity & Denial of Service
You must NOT:
- Attempt denial-of-service (DoS) floods or maliciously exhaust post-quantum compute resources.
- Circumvent API rate limits, billing quotas, or token authorization checks.
- Upload hostile executables, shell scripts, or polyglots disguised as CSRs or SBOM manifests.
3. Proportional Enforcement & Reporting
Amaracus monitors API telemetry and enforces rate-limit throttles. Verified violations of this policy result in immediate API key revocation, account suspension, and referral to CERT-In or criminal law enforcement agencies.
Report Cryptographic Abuse
If you detect unauthorized certificate issuance or malicious encryption utilizing Amaracus infrastructure, email our Security Incident Team directly at [email protected] or submit an urgent incident report via our Contact & Company Information Register.