Disclaimers & Regulatory Disclosures

1. Employer, Municipal & Client Independence

All technical articles, architectural post-mortems, benchmarks, videos, code repositories, and commentary published on ramonrios.net reflect the independent engineering research and personal views of Ramon Rios Jr.

• No Institutional Endorsement: Nothing on this website represents the official policy, position, or endorsement of any past, current, or prospective employer, municipal government (including the City of Montrose), public agency, healthcare network, or enterprise client.
• Separation of Personal Portfolio & Third-Party Roles: Any reference to public-sector or enterprise leadership history (/resume/1, /about) is provided strictly as factual biographical context.

2. Case Study Anonymization, NDA Compliance & Trademarks

• Confidentiality & Sanitization: Engineering post-mortems and architectural case studies published in our Technical Blog are based on authorized client engagements, public-record milestones, or sanitized/composite infrastructure scenarios. Specific IP addresses, internal hostnames, proprietary business secrets, and protected client records are omitted or anonymized in strict compliance with Non-Disclosure Agreements (NDAs).
• Third-Party Trademarks: Product and company names mentioned on this site—including Odoo, Microsoft, Windows PowerToys, Google Cloud, Cloudflare, Tailscale, n8n, Proxmox, PostgreSQL, and Docker—are trademarks or registered trademarks of their respective holders. Their use on this site is strictly for technical identification and interoperability analysis and does not imply vendor sponsorship or endorsement.

3. Cybersecurity & Adversarial Research Disclaimer ("The Invisible Adversary")

This platform publishes technical analyses of network security, zero-trust architecture, credential hygiene, reverse-proxy hardening, and adversarial attack vectors (including the "The Invisible Adversary" research series).

Neither Ramon Rios Jr. nor Coqui Cloud assumes any liability for the misuse of published security information by third parties.

4. Vulnerability Disclosure Policy (VDP) & Good-Faith Safe Harbor

We welcome coordinated, good-faith vulnerability reports from security researchers regarding *.ramonrios.net and *.coqui.cloud:

• Authorized Scope & Rules of Engagement: If you identify a potential security vulnerability on our infrastructure, please report it privately to [email protected] or via /helpdesk with clear reproduction steps.
• Prohibited Testing Actions: Do not perform Denial-of-Service (DoS/DDoS) attacks, social engineering/phishing of staff or clients, automated high-volume vulnerability scanning that degrades service, or exfiltration/modification of any user data beyond the minimum proof-of-concept required to demonstrate the flaw.
• Safe Harbor Commitment: For independent researchers who adhere to these guidelines in good faith and allow reasonable time for remediation prior to public disclosure, we will not initiate civil or criminal legal action or invoke the anti-hacking liquidated damages clauses in our Terms & Conditions.

5. Healthcare IT, HIPAA, HITECH & 42 CFR Part 2 Disclaimer

Several architectural showcases on this site—including Aura hOS™ and clinical interoperability articles—discuss Electronic Health Record (EHR) workflows, psychiatric and behavioral health operations, HIPAA / HITECH security controls, and 42 CFR Part 2 substance-use disorder confidentiality frameworks.

• Not Medical or Clinical Advice: All healthcare-related content on ramonrios.net is presented strictly from a software engineering, database architecture, and technical access-control perspective. Nothing on this site constitutes medical advice, clinical diagnosis, psychiatric treatment, or healthcare provider guidance.
• Not Legal Compliance Counsel: Technical descriptions of HIPAA encryption, role-based access control (RBAC), and audit logging do not constitute formal legal counsel. Healthcare organizations must consult qualified healthcare attorneys and certified compliance officers to validate their institutional regulatory posture.

6. Forensic & Workplace Toxicology Workflows Disclaimer (CDTA / DOT / SAMHSA)

Articles and portfolio pages referencing the Toxicology Operations Suite and the Colorado Drug Testing Agency (CDTA) describe software automation for specimen intake, chain-of-custody tracking, laboratory PDF ingestion, DOT consortium random pool management, and court/probation reporting.

• Software Engineering Demonstration Only: These pages document enterprise workflow engineering and cryptographic document delivery. They do not constitute toxicological interpretation, laboratory certification, Medical Review Officer (MRO) review, or legal advice regarding U.S. Department of Transportation (DOT) 49 CFR Part 40 or SAMHSA guidelines.
• Donor & Employer Portal Separation: Donors, employers, and probation officers seeking live testing services, fast-pass scheduling, or official laboratory results must use the dedicated, segregated production portal of their testing agency rather than general inquiry forms on ramonrios.net.

7. FinOps, SaaS Consolidation & ROI Calculator Disclaimer

Financial figures, license-reduction percentages, and Total Cost of Ownership (TCO) comparisons generated by the CoquiAudit FinOps ROI Calculator or referenced in published case studies (such as documented $88,000+/yr software run-rate reductions) are architectural engineering estimates modeled on historical deployments and user-supplied inputs.

• Variable Operational Outcomes: Actual cost savings, migration timelines, and return on investment vary significantly based on an organization's existing multi-year vendor lock-in contracts, data cleanliness, custom integration scope, and internal user adoption.
• Not Financial, Accounting, or Tax Advice: Nothing generated by /audit-calculator or published on this website constitutes certified public accounting (CPA), financial advisory, tax, or investment advice.

8. Open-Source Utilities, Workstation Daemons & Hardware

• Workstation Daemons & Scripts (PasteRich, PowerToys, GitHub): Downloadable tools, clipboard daemons, shell scripts, and Odoo community addons are provided strictly "AS IS" without warranty of any kind (see Section 21 of our Terms & Conditions). Always inspect source code and test in an isolated staging or virtual environment before running in production.
• NFC & RF Hardware (CoquiCards): Physical NFC business cards operate on standard 13.56 MHz (ISO/IEC 14443 Type A) passive radio-frequency identification. Users with implanted medical devices (such as pacemakers or defibrillators) should observe standard device-manufacturer distance guidelines regarding smartphones and NFC readers.

9. Autonomous AI Agents, LLM Pipelines & Human-in-the-Loop Governance

In alignment with the Colorado Artificial Intelligence Act (SB24-205) and NIST AI Risk Management principles, we disclose that select interactive features on ramonrios.net—including CoquiCareer, CoquiAudit, and AI MarTech workflows—use Large Language Models (LLMs) and automated orchestration pipelines.

• Informational & Non-Binding Outputs: AI-generated fit scores, architectural summaries, and automated responses are provided for rapid evaluation only. Because probabilistic language models can produce incomplete or inaccurate statements, no automated output constitutes a binding contractual commitment, quote, or warranty.
• Human-in-the-Loop Review: All formal Statements of Work (/proposals), production infrastructure changes, and executive advisory engagements are reviewed and approved directly by human engineering leadership.