1. Prohibited conduct

You may not use, assist with or attempt to use Orylin for any of the following:

Violating law, court orders or others' rights, or distributing exploitative, threatening, harassing, hateful, infringing or malicious material.
Scanning or attacking systems, bypassing authentication, exploiting vulnerabilities, distributing malware, phishing, credential theft or unauthorized access.
Automatically creating rooms in bulk, exhausting Worker, Durable Object or STUN resources, operating challenge farms, replaying credentials or bypassing rate and capacity limits.
Turning volunteer relay into a general proxy, arbitrary destination forwarder, port scanner, exit node, source-hiding mechanism or commercial traffic relay.
Accessing non-owned user data during research, or publishing invitation secrets, keys, SDP or ICE, or production credentials.
Impersonating Orylin, using confusingly similar branding or falsely claiming project endorsement.

2. Enforcement

To protect the service and users, Orylin may refuse requests, end temporary connections, restrict access or suspend deployment. Testing and security research must use only owned sessions, respect resource limits and avoid affecting others.

This policy does not authorize inspection of user plaintext or persistent content monitoring. Enforcement should rely as far as possible on protocol boundaries, resource limits and verifiable abuse signals.