Security & Trust

Tier 0 runs on your machine against a vLLM endpoint you operate. It does not require a Lutflow account or hosted data collection.

Supply-Chain Verification

The Python package is published through GitHub Actions and PyPI Trusted Publishing with short-lived OIDC credentials. Check the package version and file hashes on PyPI before installing in a sensitive environment. Trusted Publishing authenticates the upload; it is not a blanket security guarantee for your deployment.

Local measurement data

measure --endpoint reads vLLM metric counters, not prompts or responses. Its tier0.measure.v1 JSON output remains on your machine and does not include the endpoint address, hostname, secrets or prompt text. It is not sent to Lutflow.

probe sends packaged synthetic prompts to the endpoint you select and requires confirmation before generating load. Review the output before sharing it. Tier 0 has no GPU power sensor, so energy-related values are unavailable rather than guessed.

Licensing

The Lutflow SDK (lutflow on PyPI) is distributed under the Business Source License 1.1 (BSL 1.1), as stated in the LICENSE file of version 0.3.2. In summary:

• Licensor and package author: Lutflow EAS Licensed Work: the Lutflow SDK.
• Additional Use Grant: you may use the SDK, provided you do not use it for a GPU Cost Management Service. The license defines that as a commercial offering that gives third parties access to the SDK's functionality by offering budget enforcement, cost tracking or kill-path functionality for GPU or AI inference workloads as a managed service, or by offering the SDK as a commercial cloud service, hosted service or software-as-a-service.
• Permitted, for clarity: internal use within your organization; development, testing and evaluation; non-commercial and educational use; integration into your own products that do not compete with Lutflow's commercial offerings.
• Change Date: March 29, 2030. Change License: Apache License, Version 2.0.

The versioned LICENSE is the binding text; this summary does not replace it. For other licensing arrangements, contact licensing@lutflow.com.