marchon/master-zapier-plan-draft
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
master-zapier-plan-draft/packages/zapier-decisions/decisions/D004-leaf-accounts.md
George Lambert ddf772454b
Some checks are pending
offline / test (push) Waiting to run
Details
Clean prepaid SoT, identity mailbox, public access planes, leaf policy, fleet spawn 
Persist account-balance books; edge caches prepaid from books. Add zappier-identity, verae-nats-accounts, verae-jobs-events, verae-access-staff, zapier-decisions. Edge binds loopback; lan-134 stays off; HTTP services prefer local spawn.
2026-09-11 17:15:16 -04:00

330 B
Raw Blame History

D004 — Leaf cannot touch billing, even if authz is skipped

Status: accepted
Step: 4

verae-nats-accounts/policy.json is the allow-list. access-leaf refuses any target not in the leaf set. nats.conf documents INTERNAL vs LEAF accounts for when the lab cluster is replaced with a real accounts-enabled nats-server.