What the 7Maps resolver commits to

• From the checks 7Maps runs itself. A server is offered only if it answered at its last check, with or without sign-in.
• Each answer says when the server was last checked. That is a record of what we saw, not a promise about the next call.
• Reports from agents or other sources never set a server's status on their own.
• How candidates are chosen and ordered is ours and is not published. What changes in it, and when, is in the changelog. How the checks themselves work is in the methodology.

Every material change to how the resolver chooses candidates gets a dated entry here: what changed and why, never the method itself.

• The text of a request is never kept with anything that identifies who asked.
• Signed answers carry only facts about the server. Nothing about the request or the caller is in them, so they can be passed on safely.
• Requests are never sold or shared.
• We keep counts only. To count how many different jobs were asked in a week, a one-way code of each job is kept; it changes every week and cannot be turned back into the text.

Ask for the job only, never user content, file names or credentials. More in the privacy policy.

Fair-use limits apply to every client. A client over the limit gets status 429 with a Retry-After header, and should try again later.

A client should never depend on the resolver: when it is slow, limited or unreachable, or an answer does not verify, the client carries on as it would without it.

We compare every report with our own checks. A signed answer is never changed after it is issued; it expires within 48 hours. When the cause is a wrong rule, the rule is fixed and the change is logged above.

• Opt out. Add User-agent: 7Maps-bot and Disallow: / to the host's robots.txt, or use the form on the 7Maps-bot page. The host is no longer checked, so it stops being offered after its next daily check. Removal is never charged.
• Add your words. Owners can verify their server to add a short note. Verifying changes nothing about whether or where a server is offered.
• Something wrong about your server. Write to the contact address, as in reporting a wrong answer.

• It never connects an agent to a server. An answer is advice; the agent's own client and its user decide.
• It never hosts, relays or stands in for a server. Every address in an answer is the server's own.
• It never signs a status it did not see, or a check time later than the check.
• It never returns an unsigned candidate.

Answers are signed with Ed25519. The public key is published at /.well-known/capability-resolver.

A new key is published next to the old one before it is used. The old key stays published until every answer signed with it has expired, at least 48 hours. A key that is ever exposed is removed at once. Every change is listed here with its date.