Clear rules, fairly enforced — so everyone can build with confidence.
The Trinity Beast Infrastructure serves developers, partners, and organizations worldwide. We operate with transparency, and we're glad to have you building alongside us. This policy lays out what acceptable use looks like, what crosses the line, and how we respond when it does — so there are no surprises, in either direction.
Our automated systems keep an eye on activity so we can spot trouble early and keep the platform healthy for everyone. This isn't surveillance — it's protection, and it's aimed at patterns, not people.
The following activities are strictly prohibited. Any of these will trigger our escalation process.
Attempting to access admin endpoints, internal APIs, or any resource you are not authorized to use. This includes path enumeration, directory traversal, and probing for hidden endpoints.
Sharing your API key with unauthorized parties, using a single key from multiple unrelated IP addresses simultaneously, or exceeding your tier's rate limits repeatedly after receiving warnings.
Running automated vulnerability scanners, penetration testing tools, or security assessment software against our infrastructure without explicit written authorization.
Submitting SQL injection, cross-site scripting (XSS), server-side request forgery (SSRF), or any form of code injection in API parameters, headers, or request bodies.
Any attempt to overwhelm, degrade, or disrupt our services through volumetric attacks, resource exhaustion, or coordinated request flooding.
Systematically extracting data beyond your subscription tier's monthly allocation, or using automated tools to circumvent rate limits through key rotation or IP cycling.
Attempting to access AWS metadata endpoints, environment variables, configuration files, or any system credentials through SSRF or path traversal techniques.
Using forged headers, spoofed IP addresses, or stolen API keys to impersonate another user or bypass security controls.
We believe in a fair warning before anything else. Our response scales with the seriousness of what's happening — most issues start with a friendly heads-up, though the most serious threats are stopped right away to protect everyone else.
| Severity | Violation Type | Our Response | Timeline |
|---|---|---|---|
| MEDIUM | Rate limit violations, minor key sharing | We'll email you with the details and a 48-hour window to set things right. | Warning → 48h |
| HIGH | Repeated violations after warning, vulnerability scanning, data scraping | API key revoked. IP address blocked. Account suspended pending review. | Immediate |
| CRITICAL | Injection attacks, credential theft, DDoS, active exploitation | Immediate IP ban. Key revoked. All associated accounts terminated. Evidence preserved for potential legal action. | Instant — no warning |
Our enforcement is not manual. The Trinity Beast Infrastructure operates a 5-layer autonomous operations system (AutoOps) that detects, analyzes, and responds to threats in real-time — without human delay.
The system runs around the clock, and it's built to be fair: it responds to what actually happens, never to who you are.
If something looks like a violation, here's exactly what we capture — so any conversation we have with you is grounded in facts, not guesswork:
We include this in any warning we send, so you'll see exactly what we see. No hidden files, no secret list — just the record.
We understand that mistakes happen. A misconfigured script, a shared key you didn't know about, a testing tool that went too far — these things happen in development. That's why we warn first.
If you receive a warning and correct the behavior within 48 hours, your account remains in good standing. No record is held against you. We move on.
If a warning goes unanswered, or if the activity is clearly hostile from the very first request, we'll act decisively to protect our network, our subscribers, and the mission this infrastructure supports.
We do not judge people. We respond to actions. Our system is objective — it logs what you do, measures it against clear rules, and responds proportionally. The evidence speaks for itself.
If your access is terminated, your remaining subscription balance is refunded immediately. We don't keep your money and close the door — we close the door and hand you back what's yours. No debt owed in either direction.
The Trinity Beast exists to serve CPMP and the people it protects, so it has to protect itself too. We won't judge who you are — but when it comes to the safety of the TBI and CPMP, your actions are what we respond to.
100% of our revenue funds freedom from brick kiln debt bondage in Pakistan. We take the protection of this mission very seriously.
If you believe you received a warning in error, or if you need to report a security concern, contact us. We review every response personally.