Open-source licensing infrastructure · GPL-3.0-only
Ship software that
only runs licensed.
CopyLocker is a licensing and anti-tamper toolkit: post-quantum hybrid credentials, sealed assets, and honest client-side hardening — self-hosted on your own Cloudflare account.
- CL-STD-1
- ML-DSA + X-Wing
- Offline activation
- L0–L4 protection levels
What it does
Six things, done deliberately
- Post-quantum hybrid credentials ML-DSA hybrid signatures and X-Wing (ML-KEM-768 + X25519) KEM — CL-STD-1, with public known-answer vectors.
- Sealed assets & R-bound builds Features stay encrypted until a valid credential derives their keys — skipping the check means skipping the content.
- Offline activation loop Grace windows, monotonic clocks, and a public offline portal keep paying users working through outages.
- Privacy-preserving analytics & DSR No end-user data leaves your Cloudflare account; the only subprocessor in the data path is Cloudflare.
- Admin console & typed SDK Operate licenses, epochs, and catalogs through the copylocker CLI and the authenticated Admin API.
- Honest threat model Residual risks are written down in public. We raise the cost of cracking; we do not claim impossibility.
From zero to first unseal
Three commands
$ cargo install --locked --path crates/copylocker-cli$ copylocker init server --product my-app \
--d1-database-id … --kv-namespace-id … --secret-store-id …$ copylocker deploy --confirmServer up, license issued, first unseal() — the full loop is in the 5-minute quickstart.
Protection levels
Pick how much work a cracker must redo
- L0 A single boolean check. Demos only — never ship it.
- L1 Multi-point async instrumentation with delayed, randomized failure.
- L2 default Critical config and data sealed under a feature key.
- L3 Critical code chunks and WASM segments sealed. High-value software.
- L4 Critical computation stays server-side. Cannot be cracked offline.
Honest security
We raise the cost of cracking.
We do not claim impossibility.
An attacker with physical control of a machine can eventually extract whatever that machine can decrypt. Every client-side scheme only raises the bar — and the web build is inherently weaker than the native builds. CopyLocker's residual risks are written down, in public, in the threat model: what breaks, for whom, at what cost.