Account terms now protect every way you use SIMCOAI

We fixed a gap that could let account API keys access SIMCOAI before the account owner had accepted the current policies. Access now waits for that acceptance, including read-only keys. Terms confirmation also checks your choices more carefully, and account settings follow the same access rules.