---
url: https://docs.syslifters.ai/legal/authorization.md
description: You are responsible for holding permission to test every target.
---

# Authorization

::: danger You are responsible for authorization
You must hold permission to test every system you put into a syslifters.ai project. If the target is hosted by a third party (for example a cloud provider, hosting company or SaaS platform), you must also have that hoster's permission where it is required.

syslifters.ai fully delegates this responsibility to you. It does not check whether you have permission, and it does not prescribe the form, time window or content of that permission.
:::

This applies to:

* every host and URL in the project's scope and seed URLs;
* every host you add to the scope later, through **Edit scope** or by approving an agent's request to add a host (see [Scope](/legal/scope#changing-scope-during-a-run));
* every test account and every account manager credential you provide.

Only start or continue a run if your permission covers everything in scope.

## Checklist

* \[ ] I hold permission to test every host in scope.
* \[ ] If the target is hosted by a third party, I have the hoster's permission where required.
* \[ ] I will only add hosts to the scope during the run if my permission covers them.