License Anti-Tampering and Enforcement Policy

1. Purpose

This Anti-Tampering and Enforcement Policy defines what constitutes tampering with the Musika license system, how tampering is detected, and the penalties that apply. Xalo Software takes license integrity seriously — the Sekiwa system is designed to detect and respond to tampering automatically.

2. What Is Tampering

Tampering is any intentional or unintentional action that interferes with, bypasses, disables, or undermines the Sekiwa license verification system.

2.1 Time Tampering

• Manually setting the device clock backward to extend license validity
• Using applications or tools that spoof or manipulate system time
• Disabling automatic time synchronization to prevent time checks
• Any attempt to make the system believe a different time than the actual current time

Detection: Sekiwa stores the last known verified time in secure storage. On each validation, if the current system time is more than 1 hour earlier than the stored time, a tamper event is triggered.

2.2 Device Tampering

• Modifying device identifiers, IMEI, serial numbers, or hardware fingerprints
• Using emulators, virtual machines, or device cloning to bypass device binding
• Rooting or jailbreaking the device to access or modify license storage
• Transferring license data between devices without authorization

Detection: Sekiwa binds each license to a device fingerprint at activation. Every validation compares the current fingerprint against the bound fingerprint. Any mismatch triggers a tamper event.

2.3 Software Tampering

• Modifying, patching, or recompiling the Musika APK
• Removing or disabling the Sekiwa license verification code
• Injecting code to bypass cryptographic checks
• Using debuggers, memory editors, or runtime manipulation tools
• Creating or using modified ("cracked") versions of the Software

2.4 Cryptographic Tampering

• Attempting to forge Sekiwa cryptographic signatures
• Attempting to brute-force or bypass AES-256-GCM encryption
• Substituting public or secret keys to validate unauthorized licenses
• Replaying captured license data across devices

2.5 Network and Data Tampering

• Intercepting or modifying communications between the app and any servers
• Modifying stored license data in secure storage
• Attempting to inject fraudulent license records

3. How Detection Works

The Sekiwa system performs automated checks:

Checks run at application startup, every 5 minutes while the app is running, and whenever the app returns to the foreground.

4. Penalty Framework

Level 1 — First Tamper Offense

Trigger: First detection of any tampering event (time, device, or software).

Consequences:

• License state set to restricted
• Remaining license duration reduced by 50%
• A notification is displayed explaining the violation and penalty
• The tamper event is permanently recorded in the license audit log
• The device fingerprint is flagged for monitoring

User options:

• Continue using the app with reduced remaining time
• After the reduced period expires, the license follows normal expiry flow (grace period → lockout)
• Purchase a new license to regain full duration

Level 2 — Repeat Tamper Offense

Trigger: A second tampering event detected on the same device or license, occurring after a Level 1 penalty has been applied.

Consequences:

• License state set to tampered
• License is permanently revoked — cannot be reactivated
• Device fingerprint is added to a permanent blacklist
• License key is invalidated in the Sekiwa system
• No refund will be issued
• The user is informed that the license is non-recoverable

User options:

• Purchase a completely new license at full price
• The new license will be bound to a new device identifier — if the same device is used, Xalo Software reserves the right to deny activation

Level 3 — Commercial Tampering

Trigger: Any attempt to:

• Distribute, sell, or provide cracked or modified versions of Musika
• Operate a license generation or activation service
• Create tools designed to bypass Sekiwa verification
• Instruct, assist, or enable others to tamper with the Software

Consequences (all of Level 1 + Level 2 apply, plus):

• All licenses associated with the offending entity are immediately revoked
• All known device fingerprints are permanently blacklisted
• Xalo Software will pursue legal action under applicable law
• Referral to law enforcement authorities
• Liability for all lost revenue attributable to the infringement
• Legal costs and investigation expenses
• Statutory damages available under the Zimbabwe Cyber Crime Act [Chapter 11:28]
• Any additional damages available under copyright and intellectual property law

5. Blacklist Registry

Xalo Software maintains a License Violation Registry which records:

• Device fingerprints of revoked licenses
• Customer names and identifiers associated with tampering
• Dates and nature of violations

This registry is used internally to prevent reactivation of blacklisted devices. It is not publicly distributed but may be shared with law enforcement or legal authorities as required.

6. Appeals Process

If you believe a tampering detection was made in error, you may appeal:

1. Email xalosoftware@gmail.com with the subject "Tamper Appeal — [your name or business name]"
2. Include your license key, device information, and explanation of the circumstances
3. Xalo Software will review the appeal within 7 business days
4. You will be notified of the outcome in writing

Appeals are evaluated on:

• Whether the tampering was intentional or accidental
• The user's history and cooperation
• Technical evidence from the Sekiwa audit logs

Frivolous or abusive appeals may result in immediate escalation to Level 2 penalties.

7. Cooperation with Authorities

Xalo Software cooperates with law enforcement agencies in Zimbabwe and internationally regarding software piracy, fraud, and cybercrime. Evidence of tampering, including Sekiwa audit logs, device fingerprints, and activation records, may be provided to authorities during investigations.

8. Contact for Reporting Tampering

If you have information about commercial tampering, cracked distributions, or unauthorized license services:

Reports can be made anonymously. All reports will be investigated.