Spending limits outside the model
Limits and tool permissions are enforced by the database before any cost is recorded. Exceeding a limit blocks the action.
Verified purchases only
Pro subscriptions and usage credit purchases are applied only after the signed purchase confirmation is verified on the server. Browser results are never trusted. Each purchase is applied exactly once.
Protected cost record
Cost record entries are written only by the system. Users cannot insert or edit them.
Refunds handled once
An approved refund is recorded exactly once, even if the notification repeats.
Account protection
- Email and password sign-in with required email confirmation.
- Known leaked passwords are rejected.
- Changing the password requires the current password; email changes require confirmation.
Owner-only data
Every business, run and cost record is readable only by its owner. Administrative actions require a separately stored role.