Security and responsible use

This policy states security expectations and acceptable use for all participants in the UDAI ecosystem.

Objectives

Confidentiality. Access to sensitive registry data is restricted through RBAC and CBAC.
Integrity. Audit logs record critical changes to Asset, Organisation, and User records.
Availability. Airspace zone and safety data remain available during active operations.

Responsible use

All integrators, users, and organisations must:

Accurate reporting. Data submitted through Fleet and Mission APIs must be accurate and verified.
Resource respect. Do not degrade platform performance through excessive polling or credential abuse.
Safety first. Honour airspace safety constraints from the Constraint Engine over operational goals.

Prohibited activities

Attempting to bypass API authentication or authorisation controls.
Unauthorised scraping of registered asset or user data.
Submitting fraudulent telemetry to flight-session ingest.
Using UDAI assets or APIs for activity that violates national law or public safety regulations.

Disclosure

If a security vulnerability is identified, report it through Support. Maintainers review vulnerability reports with institutional priority.

Enforcement

Platform administrators monitor API usage and telemetry sessions for anomalies. Violations may result in suspension of Organisation access or User credentials. Access and modifications are logged for audit.