carlos / platform Public

Carloku backend integration checkpoint: allowances, consent and metering open review pending

On branch feat/carloku-backend-integration-20261003

paul@keymail.dev

Integrates the paid-launch currency, tax and operator changes with versioned Free 60 pooled monthly hours / Personal 100 base-band hours, the metering recovery checkpoint, and inert default-OFF overage preference persistence. The feature merge preserves the existing billing migrations and CLI test isolation. It also fixes permanently backdated admission retries after a wall-clock step, while retaining strict ledger refusal and durable retry ownership.

Checkpoint: 2a40fed0, parents fc99f7fb and 78d95cc6. Scoped Opus composition review and clock-fix review accepted; post-review11 metering review accepted within its stated scope. The merged six-package focused run passed; the clock correction separately passes ops/usage normal, race and vet, with two semantic mutants killed. Full local gate, three cross builds and exact-tip Amadan CI are running; no combined green claim yet.

LIVE BILLING OFF. This is a review checkpoint, not permission to merge main, deploy or call providers. Preference is not effective spending authority and has no customer handlers or runtime consumers. Resource-budget code remains in a separate uncommitted worktree under independent review. Storage retry and experimental VFS are separate. Whole-branch acceptance, production metering/consumer wiring, provider proof, customer copy, exhausted-awake and retained-storage policies, and USD/GBP rates remain open. Earlier known review/wiring limitations are retained in the durable backend checkpoint.

Canonical export is unchanged from the checked d504 artifact consumed by parent pricing4c455c8: internal/plans/public-pricebook.json, SHA256 97e395688601384666ba43cd50f8daca43709be8a38d520b8a7561213015cb41. Terms2026-10-03-v1, book2026-10-03-draft1 remains draft. Pricing deployment stays with parent.

paul@keymail.dev

Verified feature checkpoint advanced by fast-forward from b58b6610 to exact9fa0af01f7d581b2cfc2fe3df22a1ab1964953c5. Destination exact-tip Amadan CI SUCCESS: gate, cross and minio-contract. Source review254 covers only the read-only sponsored-candidate inventory prerequisite.

Actual Opus code and bounded composition ACCEPT are frozen at the reviewed two-file hashes. Completed Oct7 local evidence was consumed and reverified, not rerun: 2017 top-level entries, 693 nested cases, five fuzz seeds, all8 ext4/FULL partitions exit0; independent rebuild matched binary115740cc byte-for-byte. Build/vet/gofmt/launchctx/66 nonconsole packages/all5 cross targets passed. Acceptance uses Paul's explicit same-tip CI plus complete disk-backed FULL local host exception. Original failed monolithic results and isolation incident remain preserved; no crash/powerloss claim.

The helper remains unmounted and creates no enrollment/grant/authority records. All existing Carloku accounts being sponsored for now is settled policy; no actual cohort or grants have been applied. The next bounded work is a concrete single inert enrollment transaction/immutable record design, with actual Opus review before code. CPU/resource/monthly/exhaustion/storage/rates and credential/provider/restore/rollout holds remain. LIVE OFF; no main merge, deployment or provider actions. Parent pricing/demo ownership unchanged.

Durable checkpoint: notes/backend-integration-9fa0af01-checkpoint-20261009.json under the paid-launch runroot. SAME lead eb391b1c-52d7-47ce-9a0d-687444bf1e42; Oct7 capacity error preserved, Oct9 resume explicitly authorized, no replacement or automatic retry.

paul@keymail.dev

Feature integration fast-forwarded from9fa0af01 to exact4a9649218ce5d6f0c009adf1de2f2b9277cae8bc; source review270. Accepted under Paul's explicit host-specific validation exception. Destination exact CI SUCCESS (gate/cross/minio), independently verified complete disk-backed ext4 FULL local coverage:2034 top entries,727 nested,2761 started/terminal cases,5 default fuzz seeds,8 partitions exit0, only2 expected manual preview/demo skips. Independent binary/discovery byte-identical; build/vet/gofmt/launchctx/66 nonconsole including litestream/all5cross PASS.

Three-file inert enrollment unit: private finite roster recording and historical status, immutable receipts/add-only membership, strict additive schema hook. Actual Opus design and code/composition reviewed; F1 foreign reserved-name first-Open defect reproduced, fixed and accepted in final review. Focused normal/race passed22 tests each; writer-reservation mutant compiled and failed intended assertion. Original monolithic and fixture failures retained; no timeout/durability/gate changes or crash proof.

Deploying this tip would perform schema migration on Open and remains held. No live enrollment/grants/handlers/CLI/provider/runtime changes, main merge/deploy, or billing activation. Existing Carloku fixed-cohort sponsorship decision remains approved; no future automatic eligibility or charging. Next: reviewed platform operator API/CLI preview/enroll/status contract; grant/apply/monthly/resource policy, credential/provider/restore/rollout holds remain. Parent owns pricing/demo/deploy.

Durable checkpoint: notes/backend-integration-4a964921-checkpoint-20261009.json. LIVE OFF. Same lead, no automatic retry or paused Claude restart.

paul@keymail.dev

Design-only follow-up on verified4a964921: actual Opus ACCEPT WITH REQUIRED CORRECTIONS O1-O10, all folded into frozen amended operator API/CLI contract. No further design round required. Three paths: GET/api/billing/sponsored/preview, POST/api/billing/sponsored/enrollments, GET/api/billing/sponsored/enrollments/{operation}. Person-bearer operator auth, same-snapshot preview authorization, bounded complete JSON, explicit finite reviewed file, same-operation recovery and historical-only status. No grants/apply.

No source changes, tests rerun or new gate claims. Entire vertical implementation explicitly waits parent-coordinated copy approval;20 stable meaning entries sent, no approved prose yet. Same lead, no writer or review process running.

Checkpoint notes/sponsored-operator-checkpoint-20261009.json SHA5bb0cba0313b466dbb548d88a95b52c4ef5ee4c71d2aca00e797142dcb5bc2f3; exact amended source manifestSHA200520ae2024098e63870503b425a560284f0df46eb132d94bcfd929d2ba5cee. Original packets and mistaken65-character audit metadata preserved; all27 corrected source hashes verified. No provider limit.

Local route mounting allowed only after copy gate; actual preview/roster/enrollment/grants, production deployment/migration/provider/runtime/account actions, main merge and billing remain held. PricingPR15/demoheartbeatdd516200 untouched. LIVE OFF.

paul@keymail.dev

Verified feature checkpoint 945616c3b4f224f9550d4d13f6c79b010128dfb9, fast-forward only from4a964921. Source review289; exact destinationCI gate/cross/minio-contract SUCCESS.

Adds the reviewed sponsored operator API/CLI preview, finite explicit enrollment and historical status unit. All49 approved strings remain verbatim; R5 placement clarified without wording/policy changes. Actual Opus follow-up code and bounded composition ACCEPT (e39bac9f87fbab8f84339328b63acabde8bb68892eafcac67a2ff312bce4254e), independent code/copy audit PASS.

Accepted under Paul’s explicit host-specific validation exception: same exact commit canonical single-process CI plus complete independently audited local ext4 FULL partitions. Eight exits0;2044 top entries;2771 total started/terminal cases including727 nested;5 fuzz seeds;only2 expected demo/preview skips. All build/vet/gofmt/launchctx/native66+litestream/fivecross passed. Independent binary/discovery byte-identical.24 focused functions pass normal/race. Original monolithic failures and new regression/fixture failures preserved; no timeout/durability/gate changes or crash/powerloss claim.

No actual preview/roster/enrollment/grants/provider/runtime/account action, deployment, production migration, main merge or billing activation. Deploying mounts usable endpoints and existing4a migration even billingOFF, held. Grant/apply and actual signup/quota/residency/metering consumers remain separate; resource/monthly/exhaustion/storage/rates/credential approvals remain unresolved. Existing finite cohort sponsorship is settled. Parent pricingPR15/demo untouched; e4ea experimental and sidecar rollout holds retained. LIVE OFF.

Durable checkpoint: /home/paulca/.local/share/carloku-paid-launch-20260930/notes/backend-integration-945616c3-checkpoint-20261013.json SHA256 485f3de4e5258e43fbc9dc37e59f5a9825edb5689bac9fc4b744fc0f0b41bb97

paul@keymail.dev

Current handoff, Oct20: see discussion321, “Blocked handoff: Carloku billing — verified165472b8 and archived Unit A WIP.” This supersedes the older opening description and next-step status above; historical evidence remains unchanged.

Verified integration stays at165472b8fccc2211471577d94a21f095741f8304. Unfinished92-file Unit A source, reconstruction patch and selected evidence are now remotely preserved on separate archival branch handoff/carloku-blocked-20261020, exact c153aec6372189e5a925a5bfcf470ede0942bb5d. DO NOT merge the archival branch. Parent reconstruction and independent file-hash audits passed; no product tests rerun or new code acceptance claimed.

Actual latest Opus source review is HOLDCAUSENOTESTABLISHED for original NOTSENT CLOSED. Missing occurrence-specific evidence remains a blocker; passing D5 focused tests/mutants does not clear it. Previous lead is closed, original author worktree preserved uncommitted. Next is an explicit reviewed technical plan for that evidence gap, not another commercial-policy question. No further diagnostics or implementation restarted.

All3 sponsorship policies and Paul/BOPERATORBUNDLE selection are settled. Discovery provenance/execution and remaining launch code/rollout are still held. LIVE OFF; no main merge, deployment, provider/account/grant operations.