Acceptable use

The deployment at norma.sevres.org is a demonstration system maintained by the Sèvres project for the benefit of the CLASP ecosystem. These rules apply to anyone interacting with the deployment through its HTTP endpoints, MCP tool calls, OAuth token issuance, or catalog endpoints.

What is allowed

• Issuing tokens, calling MCP tools, and consuming catalog endpoints at a reasonable rate for the purpose of evaluating the CLASP protocol and Norma's implementation of it.
• Building and testing AI-System integrations against the deployment, including end-to-end smoke tests in CI, at modest scale.
• Citing specific responses, endpoints, or behaviors of the deployment in technical discussion, blog posts, conference talks, or publications, with attribution to sevres.org and a clear indication that the cited material came from a demonstration deployment (see the demo notice).

What is not allowed

• Sustained or abusive load. Do not use the deployment for load testing, distributed scraping, training-data harvesting, or any pattern that would be unreasonable against a normal cooperative partner. The deployment may rate-limit, IP-block, or be taken offline if abused.
• Presenting demo content as authoritative. The fictional standards (PASC, TMF, BPEC, IESF) describe documents that do not exist. The public-domain content is faithful to its source but is not a substitute for current SDO distributions. Do not represent retrieved content as carrying the authority of a real publisher subscription.
• Attaching demo citation envelopes to deliverables of consequence. Citation envelopes minted by this deployment MUST NOT be attached to engineering deliverables that carry regulatory, stamped, or contractual weight. Theendpoint_uri field makes the demo provenance obvious; do not strip or obscure it.
• Attempting to escalate beyond the protocol surface. Do not probe for, exploit, or attempt to exploit vulnerabilities in the deployment's infrastructure, identity layer, or dependencies. If you discover a vulnerability, report it via the security policy (email info@sevres.org).
• Bulk redistribution of public-domain corpora through the demo. The public-domain standards bundled with this deployment (NIST, FDA, NASA, OSHA, IETF, Modbus) are freely redistributable; obtain them directly from the source rather than using this deployment as a redistribution channel.

Enforcement

Violations may result in token revocation, IP-level blocking, or wholesale removal of the deployment's ability to serve the offending party, at the project's discretion. There is no formal appeals process; this is a demo. For commercial-grade entitlements and a corresponding SLA, contact the project to discuss a managed Norma deployment.

Contact

Questions about acceptable use: info@sevres.org.

Updated 2026-05-18.