Samayuktam Licensing

Your binary.
Bound to one machine.
Verified before it runs.

DRM3 wraps both CAGM and SPCMP: AES-256-GCM license state, hardware fingerprint binding, server-authoritative use counting, VM and debugger detection. This is not a EULA promise — run the verifier yourself.

GET PILOT BINARY REQUEST SPEC

./cagm Demonstration

Simulated CLI output. Values are illustrative. Request the pilot binary to run it on your own hardware.

Get bound. Get shipped.

Machine ID

cat /etc/machine-id

Persistent OS-level machine identifier.

MAC address

ip link show | grep "link/ether" | awk '{print $2}' | head -1

Primary NIC hardware address.

CPU model

grep "model name" /proc/cpuinfo | head -1 | cut -d: -f2 | xargs

CPU model name from /proc/cpuinfo.

CPU physical ID

grep "physical id" /proc/cpuinfo | head -1 | cut -d: -f2 | xargs

Physical socket ID from /proc/cpuinfo.

Mail it in

samayuktam.licensing@gmail.com
swapnopammitra1308@gmail.com

Send all four values. That's everything needed to issue your binary.

How your license is enforced

ENCRYPTION

AES-256-GCM

License state encrypted at rest and in memory. Authenticated cipher — tampering breaks the tag, not just the plaintext.

BINDING

Hardware fingerprint

Machine ID, MAC, and CPU identity hashed into one binding key at issuance. Move the binary to another machine, it stops running.

DETECTION

VM / debugger scan

Checked before license decrypt. A scoped deterrent against casual extraction — not a copy-protection promise.

AVAILABILITY

Online-only. No exceptions.

Every run performs a signed round-trip to our licensing server before any work happens. The server's count is the final word. No offline mode. No grace period. Server unreachable — run refused. The count that matters lives on our infrastructure, not on your disk.

SYSTEM ACCESS

Exactly what touches your machine

Reads (once, at bind time): machine ID, primary NIC MAC, and two fields from /proc/cpuinfo. Network: the binary calls our licensing server directly — once to activate on first launch, then again on every subsequent run to check remaining uses. Both calls are automatic; there is nothing for you to run or configure. Nothing else is read, written, or modified. No local state files. No background service.

ENVIRONMENTS

Verified: WSL2 & Google Colab

Both binaries have been run and verified on WSL2 and Google Colab. Snapshot/revert-style VMs are unsupported — reverting a snapshot breaks the fingerprint assumption by design.

WSL2: confirm your virtual NIC MAC doesn't regenerate on restart before requesting a license. Run the MAC command, do a full wsl --shutdown, reopen, and compare. If it changes, flag it when you write in.

Colab: container recycling (idle timeout, disconnect, restart) can produce a different MAC or machine ID and fail the fingerprint check. Fine for a single-session pilot run — not for multi-session use.

Troubleshooting

"License commit rejected by server"

activation failed: could not reach licensing server

The binary makes this call itself on every run — there's no separate command for you to run. If you see this, it's your network path: firewall, proxy, or no outbound HTTPS. Remaining uses stay frozen until a run completes end to end.

Fingerprint mismatch after hardware change

samayuktam.licensing@gmail.com
swapnopammitra1308@gmail.com

NIC swap, OS reinstall, or new machine will cause the server-side fingerprint check to reject the run. Email your new values and remaining use count — we'll reissue to the new hardware.

Uninstall

rm -f ./cagm ./app

Nothing persistent is written to your machine beyond the binary. Delete it and it's gone.

What CAGM actually does

ARCHITECTURE

Fixed-point residual network

Four-layer fully-connected classifier running entirely in integer arithmetic. No floating point in the training loop.

DETERMINISM

Integrity Engine (IE)

Canonicalizes logits at layer boundaries — NaNs and negative zero mapped to fixed bit patterns — so the same run hashes identically across compilers and hardware.

PROOF

SHA-256 trajectory proof

Weight, gradient, and activation traces reduced to a single 64-character hex proof. Deterministic across machines.

OUTPUT CONTRACT

stdout only

accuracy, proof, and ie_verify — in that order, on stdout. Everything else stays on stderr.

Internal constants are withheld. This is the architecture, not the parameters. Full specification available on request.

What SPCMP actually does

ORDERING

Canonical float32 ordering

Every IEEE-754 binary32 value bijectively mapped to a uint32 and ordered by unsigned comparison — one deterministic total order across NaNs, infinities, signed zero, and subnormals.

PREPROCESSING

Lossy canonicalization

NaN payloads collapse to one canonical quiet NaN; −0.0 collapses to +0.0. Deliberate and irreversible for those two edge cases.

ENCODING

Predictive transform + Zstd

Delta prediction on mapped values, then Zstandard compression. Reversible permutation stored alongside for exact reconstruction of original element order.

VERIFICATION

Fail-closed, SHA-256 bound

Hash checked before any inverse transform runs. Mismatch is a hard failure — no partial output, no silent recovery.

SPCMP is a frozen profile of PCMP v1. Version 1 semantics don't change — anything different needs a new profile identifier.

Pilot pricing

SPCMP

$2,500

10 runs · 30 days

Hardware-bound binary. Full canonical-ordering, compression, and fail-closed verification pipeline.

REQUEST SPCMP

CAGM

$2,000

10 runs · 30 days

Hardware-bound binary. Fixed-point residual classifier with full IE and trajectory-proof output.

REQUEST CAGM

SAVE $1,000

Bundle

$3,500

10 runs each · 30 days

Both binaries, both fingerprint-bound. The full stack in one evaluation window.

REQUEST BUNDLE

Prices and terms above are visible without contact. No asterisks, no "starting at."

* A custom trial of 5 uses / 1 day may be granted at no cost, at sole discretion and under consideration. No entitlement. Request via email with a brief use-case description.

Requires Linux with a live internet connection on every run. WSL2 and Colab supported for single-session evaluation. Ephemeral runtimes that change MAC or machine ID between sessions will fail the fingerprint check.