END USER LICENSE AGREEMENT — BASTION EULA Version: 2.3 Effective Date: September 24, 2026 Licensor: Konstantin Pupkov d/b/a Fromkos ("Licensor", "we", "us") Contact: info@fromkos.com IMPORTANT — READ CAREFULLY. This End User License Agreement ("Agreement") is a legal agreement between you, or the entity you represent ("Licensee", "you"), and the Licensor for the Bastion software, its container images, binaries, scripts, documentation, and accompanying materials (collectively, the "Software"). BY INSTALLING, COPYING, DEPLOYING, ACCESSING, OR USING THE SOFTWARE, OR BY CLICKING "I ACCEPT", YOU AGREE TO BE BOUND BY THIS AGREEMENT. IF YOU DO NOT AGREE, DO NOT INSTALL OR USE THE SOFTWARE. IF YOU ACCEPT ON BEHALF OF AN ENTITY, YOU REPRESENT THAT YOU HAVE AUTHORITY TO BIND THAT ENTITY. 1. LICENSE GRANT Subject to your compliance with this Agreement and, where applicable, the limits encoded in a valid license issued to you, Licensor grants you a non-exclusive, non-transferable, non-sublicensable, revocable license to install and run the Software on systems you own or control, for your internal business or personal purposes, including in server and networked environments. No rights are granted except as expressly stated here. 2. LICENSE TIERS AND LIMITS The Software may operate in a default (free/evaluation) tier with reduced limits, or under a paid license that encodes entitlements (such as the licensed owner, plan, expiry date, and resource limits). You agree not to exceed the limits of your tier, and not to circumvent, disable, or tamper with license verification, metering, or limit enforcement. 3. RESTRICTIONS You shall not, and shall not permit others to: (a) reverse engineer, decompile, or disassemble the Software except to the extent applicable law expressly permits despite this limitation; (b) remove or alter any proprietary notices; (c) rent, lease, lend, sell, sublicense, or provide the Software as a commercial hosted service to third parties except as expressly permitted in writing; (d) use the Software in violation of applicable law; or (e) forge, share, or redistribute license credentials. 4. OWNERSHIP The Software is licensed, not sold. Licensor and its licensors retain all right, title, and interest in and to the Software, including all intellectual property rights. Third-party and open-source components are governed by their own licenses; see the THIRD_PARTY_NOTICES file. Every third-party component that Licensor distributes with the Software is open-source and carries no separate fee: no additional purchase, subscription, or per-database license from any third party is required to install and run the Software as delivered. 5. CUSTOMER RESPONSIBILITIES AND ASSUMPTION OF RISK The Software is security-sensitive infrastructure that you operate yourself. YOU ARE SOLELY RESPONSIBLE, AND ASSUME ALL RISK, FOR: your deployment, configuration, network exposure, and access controls; generating, protecting, and backing up all keys, secrets, and credentials (including, without limitation, CHACHA20_KEY, prov.sks, and database, backup, and TLS material); the security, integrity, availability, and lawful processing of your data; and your compliance with all laws and regulations applicable to your use. LOSS OF YOUR KEYS OR SECRETS MAY RENDER YOUR DATA PERMANENTLY UNRECOVERABLE, AND LICENSOR HAS NO ABILITY OR OBLIGATION TO RECOVER IT. MIGRATION CONTENT AND TOOLS YOU SUPPLY. Migration Mode executes changelogs that YOU provide, using the open-source migration runtime bundled with the Software. You are responsible for the content, correctness, and effect of those changelogs, and for obtaining any license required by material or tooling you choose to introduce — including commercial editions or add-ons of database migration tools (for example, Liquibase Pro or paid editions of Redgate Flyway), which those vendors may price per database or per target. Licensor does not supply, resell, or license those editions, and the Software as delivered does not require them. 6. NO SUPPORT; NO SERVICE LEVELS The Software is provided WITHOUT ANY SUPPORT, MAINTENANCE, UPDATES, UPGRADES, ERROR CORRECTIONS, OR SERVICE-LEVEL COMMITMENTS. Licensor has no obligation to provide any of the foregoing. Any update that Licensor may choose to make available is provided at its sole discretion and is governed by this Agreement. Paid support, if ever offered, is sold separately under a separate written agreement. 7. DISCLAIMER OF WARRANTIES THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, LICENSOR DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. LICENSOR DOES NOT WARRANT THAT THE SOFTWARE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT IT WILL MEET YOUR REQUIREMENTS. YOU USE THE SOFTWARE ENTIRELY AT YOUR OWN RISK. 8. LIMITATION OF LIABILITY TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW: (a) IN NO EVENT WILL LICENSOR BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION, HOWEVER CAUSED AND UNDER ANY THEORY OF LIABILITY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES; AND (b) LICENSOR'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT OR THE SOFTWARE WILL NOT EXCEED THE GREATER OF THE AMOUNT YOU ACTUALLY PAID FOR THE SOFTWARE IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM OR FIFTY U.S. DOLLARS (USD $50). THESE LIMITATIONS APPLY EVEN IF A REMEDY FAILS OF ITS ESSENTIAL PURPOSE. Some jurisdictions do not allow certain exclusions or limitations, so some of the above may not apply to you; in that case liability is limited to the smallest amount permitted by law. 9. INDEMNIFICATION You will defend, indemnify, and hold harmless Licensor from and against any claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to your use of the Software, your data, or your breach of this Agreement or of applicable law. 10. FEES, SUBSCRIPTIONS, AND REFUNDS The Software is offered by subscription through AWS Marketplace. Fees, billing, any free trial, cancellation, and refunds are handled through AWS under the agreements that apply between you and AWS for that transaction, and under the refund policy stated on the AWS Marketplace listing. An entitlement obtained through an AWS Marketplace subscription is valid only while that subscription is active. It covers any version of the Software released while it is active, and it ends when the subscription ends. A subscription is not a perpetual licence and does not become one. The Software is hosted by you, in your own AWS account. A licence obtained directly from Licensor under an earlier version of this Agreement remains governed by the terms under which it was obtained. Nothing in this Agreement limits non-waivable consumer rights that apply to you. 11. TERM AND TERMINATION This Agreement is effective until terminated. It terminates automatically if you breach it. An entitlement obtained through an AWS Marketplace subscription terminates when that subscription ends or is cancelled, and any other paid license terminates upon its expiry. On termination you must stop using and delete all copies of the Software. Sections 4 through 9 and 12 through 14 survive termination. 12. EXPORT AND COMPLIANCE You will comply with all applicable export control and sanctions laws and will not use or export the Software in violation of them. 13. GOVERNING LAW AND DISPUTES This Agreement is governed by the laws of the State of California, U.S.A., without regard to its conflict-of-laws rules, and the parties submit to the exclusive jurisdiction of the state and federal courts located in California. The U.N. Convention on Contracts for the International Sale of Goods does not apply. 14. GENERAL This Agreement is the entire agreement between the parties regarding the Software and supersedes all prior understandings. If any provision is held unenforceable, it will be modified to the minimum extent necessary and the rest remains in effect. Failure to enforce a provision is not a waiver. You may not assign this Agreement without Licensor's consent; Licensor may assign it. Licensor may update this Agreement for future versions of the Software; your continued use after an updated version is made available constitutes acceptance of the updated terms for that version. BY CLICKING "I ACCEPT" OR USING THE SOFTWARE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS AGREEMENT, INCLUDING THE DISCLAIMER OF WARRANTIES (SECTION 7) AND LIMITATION OF LIABILITY (SECTION 8).