Terms

Effective date: 30 August 2026
Last updated: 9 October 2026

The Proof & State website provides product and operating information. The hosted-service terms below apply when you use DoneState; independently operated open-source software remains subject to its repository licence.

These terms are a binding agreement between you and AYOBAMI JOHN HAASTRUP, a United Kingdom sole trader trading as Proof & State ("Proof & State", "we", "us") for the hosted DoneState service at donestate.proofandstate.com including access through ChatGPT, compatible MCP clients and its GitHub Marketplace listing ("DoneState" or the "Hosted Service").

Operating location: Northampton, Northamptonshire, UK.

By installing the Marketplace plan, connecting an account or using the Hosted Service, you agree to these terms. If you act for an organisation, you confirm that you have authority to bind it. If you do not agree, do not install or use the Hosted Service.

The source code remains separately available under the Apache License 2.0. These terms govern the Hosted Service, not an independently operated copy of the open-source package.

1. Eligibility

You must be at least 18 years old, have a valid GitHub account, be legally capable of entering this agreement, and comply with the GitHub terms that apply to your account and Marketplace use.

2. What DoneState provides

DoneState is a governed execution plane for AI-assisted work on supported public GitHub repositories. It can accept an explicit objective and authority envelope, run bounded coding work in isolated infrastructure, validate an exact head, publish an authorised branch and pull request, and hand evidence to an independent verifier such as OpsTruth.

The current Marketplace plan:

• is free of charge from Proof & State;
• supports public repositories only;
• requires you to provide and fund your own OpenAI API credential;
• requires separate GitHub repository authorisation;
• does not grant authority merely because a Marketplace entitlement exists; and
• does not give DoneState authority to merge, deploy, release, modify environments or secrets, write workflows, approve its own work or declare itself verified.

Features, limits and supported providers may change as described in section 13.

3. Authority and user control

You decide the repository, objective, acceptance criteria, budget and permitted consequences. You must grant only authority that you lawfully hold and genuinely intend to grant.

A Marketplace installation or purchase record is not repository authority. DoneState may act only within the separate authority envelope recorded for the objective. You retain responsibility for reviewing branches, pull requests, validation evidence and verifier conclusions before merging or using any output.

States such as AWAITING_VERIFICATION, AMBIGUOUS_EFFECT and VERIFIED have the technical meanings documented by the service. They are not warranties of correctness, security, legality or fitness for purpose.

4. Your accounts and credentials

You are responsible for:

• protecting your GitHub account, OpenAI API key and other credentials;
• using the designated encrypted settings flow rather than placing secrets in objectives, source files, logs or issue reports;
• promptly revoking or replacing a credential you believe is compromised;
• all OpenAI and other third-party charges incurred through credentials or accounts you provide; and
• ensuring that your use complies with the applicable GitHub, OpenAI, Cloudflare and repository terms.

Proof & State does not resell OpenAI usage and does not pay charges arising on your OpenAI account.

5. Your repositories, instructions and output

You retain ownership of your repository content, objectives and output to the extent the law permits. You grant Proof & State a limited, non-exclusive licence to access, copy, transform and transmit that material only as necessary to provide, secure, verify and support the Hosted Service.

You confirm that you have the rights and permissions needed for the content, repository and instructions you submit. Because the current service supports public repositories, branches, pull requests, commit metadata and validation evidence published to GitHub may be public.

Model-generated code and analysis may be incomplete, incorrect, insecure, infringing or unsuitable. You must review output and obtain any professional, security, licensing or legal review appropriate to your intended use.

6. Acceptable use

You must not use DoneState to:

• access a repository, account, system or data without authorisation;
• introduce malware, evade security controls, exfiltrate secrets or cause destructive effects;
• violate law, third-party rights, licences or provider policies;
• process special-category, health, financial, employment, child, highly confidential or other regulated personal data without a separate written agreement and appropriate safeguards;
• misrepresent evidence, forge attestations or use a service state as a guarantee it does not provide;
• interfere with the service, exceed documented limits, probe other users' data or attempt to bypass authority controls; or
• operate a high-risk or safety-critical system for which failure could cause death, personal injury or serious property, financial or legal harm.

We may block or suspend activity that reasonably appears unsafe, unauthorised, unlawful or inconsistent with these terms.

7. Third-party services

DoneState depends on GitHub, Cloudflare, OpenAI and an independent verifier such as OpsTruth. Their services, outages, limits and terms are outside Proof & State's control. You may need separate accounts and agreements with them.

A failure, delay or decision by a third-party provider may cause DoneState to stop, remain pending or record an ambiguous effect rather than claim success.

8. Privacy and security

Our privacy notice explains what data the Hosted Service processes, why it is processed, the providers involved, retention criteria, international processing and your rights.

We use the technical and authority controls described there and in the public repository. No system is completely secure. Notify us promptly at mailto:security@proofandstate.com if you believe the service or a credential is compromised.

9. Support

For ordinary support, contact mailto:hello@proofandstate.com or use the channels at https://proofandstate.com/contact. Do not post credentials or sensitive personal data in a public issue.

The current free plan is provided without a service-level agreement, guaranteed response time, uptime commitment or guaranteed recovery time.

10. Suspension, cancellation and termination

You may stop using the service at any time, cancel the Marketplace plan through GitHub, revoke GitHub authorisation, delete eligible terminal or cancelled objectives, and delete the stored OpenAI credential.

We may suspend or terminate access where reasonably necessary to address a security risk, suspected unauthorised or unlawful use, provider requirement, material breach, service withdrawal or legal obligation. Where reasonably possible, we will give notice and an opportunity to export or delete eligible records.

On termination, the licence in section 5 ends except to the extent reasonably required to complete deletion, preserve authorised public Git history, comply with law or establish legal claims. Sections that by their nature should survive termination, including ownership, disclaimers, liability and governing law, remain effective.

11. Warranties and statutory rights

We will provide the Hosted Service with reasonable care and skill. Except for that commitment and any right that cannot lawfully be excluded, the service is provided on an "as available" basis. We do not promise uninterrupted availability, error-free output, successful completion, acceptance by an independent verifier, or fitness for a particular repository or purpose.

Nothing in these terms affects mandatory rights you have as a consumer under applicable law.

12. Liability

Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of a liability that cannot legally be limited, or any mandatory consumer remedy.

If you use DoneState for business purposes, then to the fullest extent permitted by law:

• neither party is liable for indirect or consequential loss, loss of profit, revenue, business, goodwill, anticipated savings or data; and
• Proof & State's total aggregate liability arising from the Hosted Service in any twelve-month period is limited to the greater of £100 and the amount you paid directly to Proof & State for the Hosted Service during that period.

If you use DoneState as a consumer, we are responsible for foreseeable loss or damage caused by our breach or failure to use reasonable care and skill, but not for business losses or loss caused by your failure to follow these terms or reasonable instructions.

13. Changes to the service or terms

We may change the service to improve security, reliability, legal compliance or functionality. We may also withdraw the free plan or Hosted Service. Where reasonably possible, we will give advance notice of a material reduction or withdrawal.

We may update these terms by publishing the revised version and effective date on this website and, where required, notifying affected users through GitHub or the service. Material changes will normally take effect at least 30 days after notice unless an earlier change is reasonably required for security, provider compliance or law. Continued use after the effective date means you accept the updated terms.

14. General terms

If a provision is unenforceable, it will be limited or removed only to the minimum extent necessary and the remainder will continue. A delay in enforcing a right is not a waiver. You may not transfer this agreement without our written consent; we may transfer it as part of a transfer of the Hosted Service, provided your mandatory rights are not reduced. These terms, the privacy notice and any expressly incorporated Marketplace plan details form the agreement for the Hosted Service.

15. Governing law and disputes

If you are a consumer, the laws and courts available to you under mandatory law continue to apply. Otherwise, these terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

Before starting formal proceedings, contact us at mailto:hello@proofandstate.com with a concise description of the dispute and no unnecessary sensitive information so both sides can try to resolve it.