Terms

The CLI is free to use, and it is not open source. Its license ships with it, and covers its binaries, installers and install script, its npm packages, its container image, and its GitHub Actions and reusable workflow. Copyright (c) 2026 hushrun. All rights reserved.

You may:

• download, install and use it free of charge, for any purpose, including commercial use;
• keep the copies you need for that: in a CI cache, in a package or container registry you use, or in a repository of yours, such as the install script install-hushrun.sh.

Except as the license or these terms allow, you may not:

• copy it;
• modify it, or make works based on it;
• reverse engineer, decompile or disassemble it, except where applicable law allows that despite this limit;
• redistribute, sell, rent, lend or sublicense it, or otherwise make it available to others.

The CLI includes open-source components, listed with their licenses in THIRD-PARTY-NOTICES.md. Each is under its own license, and nothing in these terms limits what that license gives you.

The CLI works without the hosted service. Results kept on your own machine, or on a server you run, send nothing to hushrun.

You sign up with GitHub or Google, with an email address the provider has verified. Keep your sign-in, your tokens and your machine keys to yourself: what is done with them counts as done by you.

• Your first sign-up makes an organization with you as its owner. Each organization has its own members, repositories, machines, agent tokens and plan.
• Owners and admins invite and remove members, make and revoke agent tokens, revoke machines and manage the plan. The docs list what each role may do.
• An organization's owners are responsible for who they let in, and for what its members, agents and CI send on its behalf.

Use the hosted service for your own software's checks, builds and deploys. Don't:

• break the law with it, or use it to infringe anyone's rights;
• try to reach another organization's data, or get around a role, a token's scope or a plan's limits;
• probe, scan or load the service in ways that degrade it for others, beyond the rate limits it sets;
• send malware, or data the service doesn't need, such as secrets or other people's personal data: keep passwords and tokens out of check names and commands;
• resell access to the hosted service without a written agreement with hushrun.

A plan belongs to an organization. The pricing page shows each plan's price and what it includes; prices are in US dollars.

• Free costs nothing and includes 2,000 recorded checks a month. Team is $49 a month and Growth $99, or less billed yearly.
• A recorded check is a pass or a fail the hosted service records. Skips and reads are free.
• At a plan's limit, recording pauses until the next period, and your checks run as they did before. On Team and Growth, that happens past a spend cap an owner or admin sets.
• During early access, overage isn't charged automatically: owners and admins get an email with what it comes to, and settle it by replying, or move to a plan that includes more.
• Scale and Enterprise are set in a contract with hushrun. Where that contract and these terms differ, the contract wins.

Payments for Team and Growth go through Creem, which is the merchant of record: it runs the checkout, the invoices and the billing portal, and its own terms apply to the payment.

• A plan renews each month or year until it is canceled. Owners and admins cancel in the billing portal, from the dashboard's Usage page.
• A canceled plan lasts until the end of the period paid for; then the organization is on Free. Ending a plan deletes nothing.
• Paid plans come with a 60-day guarantee: if the time hushrun saved you in your first 60 days on a paid plan doesn't cover the bill, you get a refund. Refunds are handled by hand for now: write to Camilo, who builds hushrun.
• A new price applies to a paid plan from its next period, never to one already paid.

hushrun hashes your files on your machine and sends digests, never the files. The hosted service stores:

• Your account: your email address, and your name and login from GitHub or Google.
• Check results from hushrun run: the check's name, its run key and digest, pass, fail or skip, the command, the commit, the repository, timings and the CI run's link, and who sent it.
• Events in each repository on hushrun: signed records of checks, artifacts, deploys and approvals, with digests, artifact references and run links.
• The transparency log: each repository's append-only log of its events and deletions, which the server signs.
• The audit log: every admin action in an organization, with who did it.
• Machines and agents: the public half of each machine's and agent's key, and a hash of each token, never the token itself.
• Billing: the plan, usage counts, and what Creem reports about payments. Card details stay with Creem.

Command lines and paths you run through hushrun run are part of its results, so keep secrets out of them. hushrun uses what you send only to run the service for your organization. You keep your rights in it.

• Each plan names the history it includes: 30 days on Free, and a year on Team and Growth. Today the hosted service deletes no history on its own.
• An organization's admins and owners delete old events with hushrun repository gc. It removes an event's contents; the transparency log keeps a record that the event existed, its hash, and who deleted it, so a deletion can be checked.
• Check results and the audit log are kept while the organization exists.
• A person's machine unused for 90 days is revoked, and agent tokens expire, after 365 days at most. Revoking stops what comes next; what was signed before stays.

There is no button yet to delete an account or an organization. To have yours deleted, write to Camilo, who builds hushrun.

The hosted service is offered without an uptime commitment or a service level agreement. It can be down, slow or changed, and features can be added or removed.

hushrun run fails open: when it can't reach the hosted service, or a plan's limit is reached, it runs the check instead of skipping it, and exits with the command's own code. Promotion needs the service: hushrun plan and the commands that record a pipeline's events exit 6 when they can't reach it.

• You can stop at any time: cancel your plan, and stop using the CLI.
• hushrun may suspend or end an account's or an organization's access when it breaks these terms, puts the service or others at risk, or doesn't pay, and will say why when it can.
• hushrun may end the hosted service, with notice to owners and admins first, so they can copy what they need. Paid time that wasn't used is refunded.
• hushrun may end your license to the CLI if you break these terms.

The CLI and the hosted service are provided "as is", without warranty of any kind, express or implied, including the warranties of merchantability, fitness for a particular purpose and non-infringement.

hushrun decides from the evidence it is given. Whether to run, skip or deploy, and what your policy requires, remain your decisions and your responsibility.

• To the extent the law allows, hushrun isn't liable for indirect, incidental, special or consequential damages, or for lost profits, revenue or data, arising from the CLI or the hosted service.
• hushrun's total liability for any claim about the hosted service is limited to what you paid for it in the 12 months before the claim. For the CLI, which is free, it is limited as far as the law allows.
• Nothing here limits liability that the law doesn't allow to be limited.

When these terms change, this page shows the new version and its date. When a change matters to how you use the hosted service, owners and admins get an email before it takes effect. Using the CLI or the service after that means you accept the new terms.

These terms are governed by the laws of [JURISDICTION], and disputes about them go to its courts.

For questions about these terms, write to Camilo, who builds hushrun. Replies to the emails the hosted service sends, such as usage alerts, reach him too.