Trust License terms, in plain language

License terms, in plain language

What Pack and Relay Host licenses get you, in the words we intend them. Relay Core and direct Cells remain free; Packs and managed Host rights stay distinct.

The short version

A license is a small signed file you keep, verified offline. Pack licenses unlock maintained content. Relay Host covers managed customer Cells. What is free stays free, and lapse never stops already-running work.

What a license is

The engine is not licensed. It is free. Everything that makes Relay run is Apache-2.0 open source. Pack licenses add maintained content; Host licenses cover managed customer operations.

A license is a small signed file, a payload and signature JSON envelope, issued to you at purchase and attached to your fulfilment email. Relay verifies it entirely offline with an Ed25519 signature check against public keys embedded in the open-source verifier. There is no activation server and no periodic re-validation. Relay never sends your data to Orionfold. Keep the file. It is the durable proof of purchase: the download link in the email expires, the file never does.

The term: what expiry does, and does not, do

Your license names an expiry date. Expiry gates new premium installs and pack updates only.

  • Installed packs never re-lock. Not at expiry, not if you remove the license, not ever. Your packs are yours forever.
  • Renewal buys forward motion: the year new and updated packs plus priority support.
  • Removing a license forgets the file. Everything already installed keeps working.

There is no mechanism in the codebase that can disable installed content. The license check happens at pack install time and nowhere else. This is shipped behavior, not just policy.

Pack seats: defined by trust, audited by you

A seat is one person in your organization who uses premium packs. Your license records how many seats you bought.

We deliberately do not enforce seats technically. No device counting, no user registry, no lockouts. The verifier checks the signature, the term, and the product entitlement. The seat count is your side of the deal. The license status command is the self-audit surface: it shows what you are licensed for so your admin can check compliance locally, without asking us and without Relay telling us.

Pack transfer and machines

A Pack license file is portable. Redeem it on a new machine any time. Moving between machines, reinstalling, or running air-gapped are all fine within your seat count. Transferring a Pack license to a different organization requires reissue: email [email protected]. Relay Host is stricter: same-licensee replacement only, with no customer transfer.

The boundary will not move under you

What is free stays free. Capabilities never migrate from the free engine into paid packs. Paid packs are new content, not repossessed features. The things we have ruled out permanently in the product runtime: Orionfold-hosted license state, upsell banners in the CLI, online re-validation, and expiry that disables installed packs or running Cells.

This page states intent in plain language and links the enforcing code. If a storefront page and this page ever disagree, tell us. The stricter reading in your favor applies while we fix it.

Relay Host is a separate managed-use right

Relay Core and direct Cells remain free and open. The public Relay Cell image also remains public and needs no purchase token. Orionfold Relay Host is the separate annual right to operate one Host with up to ten managed customer Cells. Pulling the image is not proof of that right.

Relay Host costs $1,499 per year. Premium Packs are separate and no Pack is silently bundled. The annual term includes forward Host updates and email support without a response-time SLA. Compatible critical-security fixes remain included.

Host lapse, refund and replacement

  • If the term ends, Cells already running keep running. Export, recovery and an authorized rollback remain available.
  • New managed capacity, forward paid updates and license re-download stop after lapse or refund.
  • A Host purchase has a 14-day refund window. The continuity rule above still applies after refund.
  • A license may be reissued for a replacement within the same private licensee identity. It cannot be transferred to another customer and does not include reseller rights.

The signed Host envelope is verified offline. It carries an opaque licensee reference, not the buyer email as its ownership identifier, and contains no registry credential, pull token, online activation or metering state.