Tier 1: Encrypted Access

• Single configuration slot issued by sponsor glyph
• Default jurisdiction routing - no multi-zone selection
• Private DNS and basic threat protection active
• Cannot issue invitations or modify infrastructure

Tier 2: Trusted Operator

• Multiple config slots - region selection available
• Can issue Tier 1 invites and manage referral glyphs
• Access to static IP requests and DNS filter customisation
• Receives monthly passive scans for dark web monitoring

Tier 3: Infrastructure Steward

• Full referral dashboard access and audit tools
• Can revoke or reissue configurations across referral tree
• Deploy fallback zones and initiate jurisdiction overrides
• Submit custom blocklists and manage multi-hop logic

How Tiering Works

• Your sponsor approves elevation - not automated
• Usage history, uptime, and fingerprint alignment matter
• Tier 3 access is granted only to users managing infrastructure ethically and at scale

Upgrade Requests

If you’re ready for Tier 2:

• Contact your sponsor directly
• Submit uptime screenshot and tunnel history via /client/upgrade.html
• Wait for approval and slot expansion

“Your referral level isn’t just a feature list, it shows how trusted and capable you’ve become.”