Merchant Agent Red Team — Engagement Terms

These are the standard terms for a Merchant Agent Red Team engagement with Valyzen. Every engagement runs under a signed order and a mutual one-page non-disclosure agreement; where a signed order says something different, the order controls. This page exists so you can read the standard position before you book.

The engagement

A paid adversarial audit of a merchant AI agent or pricing policy. Our buyer agents run the documented attacks against the agent or policy named in the order, with the arbiter scoring every offer. The engagement covers one merchant agent or pricing policy, with at least 30 recorded replays per attack, two arms each.

Authorization and scope

We run attacks only against systems you own or are authorized to have tested, inside the scope written in the order. The order names the endpoint or the policy, the attacks, the number of replays, and the dates. Nothing about your agent or your prices leaves the engagement. Private floors stay private: your agent commits to them as hashes, and the arbiter only ever sees the hash.

What we will not do

• Run an attack against any system without a signed order naming it.
• Take a share of any price, on either side, ever.
• Act as your merchant agent, or as a buyer agent for your customers.
• Send live buyer traffic at your systems. Every run is a test the order describes.
• Publish a figure about your agent. Your results are yours; the corpus is built from our own fixtures.

Deliverables

A written report (per attack: what we did, what your agent did, the round it went wrong, and what to change in the policy or the prompt), a signed replay bundle (hash-chained, verifiable offline with the public key), the per-round receipts including refusals, one command to rerun the same attacks, and a sixty-minute readout with the people who ran it.

Data handling

Fixtures, prompts, transcripts, and your pricing rules are kept for ninety days after the report so your team can ask questions, then deleted. Ask for earlier deletion and it happens the same day. Sessions from your audit are stamped as yours and never enter the public catalogue or any index.

Fees

The fee is $5,000 / ₹3,00,000 per audit, invoiced as the order states. The fee is a paid signed agreement and never a cut of any price the agent negotiates; we are not a party to any outcome of your negotiations.

Confidentiality

The mutual NDA covers everything exchanged in the engagement, in both directions, including the fact-patterns of your results. Our attack names and mechanics shared under NDA remain ours; your systems, prices, and results remain yours.

Liability

Each side's total liability under an engagement is capped at the fees paid for that engagement, and neither side is liable for indirect or consequential damages. Nothing here limits liability that cannot be limited by law.

Governing law

The laws of the State of Arizona govern, and disputes belong to the state or federal courts located in Maricopa County, Arizona — unless the signed order says otherwise.

Contact

Questions before you book: support@valyzen.com.