Terms of use

Plain summary

Use HAP to apply to jobs as yourself, or to receive applications from candidates as an employer. Don't fabricate evidence, don't impersonate someone else, don't mass-scrape the discovery index. Decisions are made by humans on the other side. We provide the protocol and the reference scorer; we don't promise jobs, ranking, or that any employer will read your application.

What you may do

• Build a HAP profile from your own public GitHub work.
• Apply to roles you are interested in, manually or via the candidate-agent.
• Opt in to the discovery index so identified recruiters can find you.
• As an employer: publish a posting, receive applications, read score reports.
• Self-host any part of the stack — this is MIT (code) / Apache-2.0 (spec).
• Build alternative agents and scorers that interoperate via the spec.

What you may not do

• Submit fabricated, falsified, or knowingly misleading evidence (URLs that don't exist, repositories you don't author, talks you didn't give). The scorer flags this, but trying it is a violation regardless of detection.
• Impersonate another candidate — claim a GitHub identity you don't control. Identity is anchored via the HAP-PROOF gist on the candidate's own GitHub.
• Mass-scrape the discovery index, evade the per-recruiter rate limit, or use multiple recruiter identities to amplify your quota.
• Use HAP to source candidates for activities that would be illegal where the candidate or employer is located (sanctions, discrimination, child labour, etc.).
• Use HAP to make protected-class adverse decisions about candidates. HAP is a verification tool; using it to mechanise discrimination is on you, not the protocol.
• Run the reference inbox or index on infrastructure that lacks basic security (no TLS, no auth, public DB) and call it HAP — please don't ship that.

No employment relationship

Receiving an application via HAP does not create an employment relationship, an offer, or a contract. A score report is not a hiring decision. Sending an application via HAP does not obligate any employer to respond, interview, or hire you.

Limits of the scorer

The neutral scorer dereferences citations and verifies what can be verified. It is honest about what it can't do: it cannot detect a determined impersonator who fully controls someone's GitHub account, and it does not see your private context. "Verified" means a link opened and matched the candidate's identity, not that the candidate is who they say they are at every layer. The verdict is a recommendation; the human reading it is the decision-maker.

Open source · liability

The HAP code is provided under MIT and the spec under Apache-2.0 — see the LICENSE files in the repo. The software is provided as-is, without warranty of any kind. To the maximum extent permitted by law, we are not liable for any indirect, incidental, or consequential damages arising from your use of HAP, the reference deployments, or anything they produce.

Account

If you sign in with GitHub, you are responsible for the account on GitHub's side. We hold only a signed-cookie session containing your public identity. Logging out at /sign-in invalidates the session on your device.

Changes

We'll bump the date at the top and, if anything material changes, note it in the GitHub repo's CHANGELOG. The full history of this page is in git.

Contact

Questions about these terms: jobs@renlab.ai. The source for this page lives at apps/web/app/terms/page.tsx in the public repo.