Draft the 2026-09-21 spend-envelope budget memo for SECRETS-WP-0009-T03

One unsigned memo, infd-20260921-b01, accepting the Glas Anthropic spend
envelope. The approval-create tool now takes an explicit batch, receipt and
expected count; defaults keep the 2026-09-14 sitting unchanged.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 272244@bnt-lap001
Assistant-Session: c8962fa7-b290-47df-865f-403ddb6c77e9

docs/batches/2026-09-21/budget/index.json

@@ -0,0 +1,24 @@
+{
+  "kind": "informed-decision-batch",
+  "id": "infd-batch-2026-09-21-budget",
+  "review_group": "net-kingdom-admins",
+  "status": "draft-unsigned",
+  "submitted": false,
+  "one_question_per_memo": true,
+  "approve_all_forbidden": true,
+  "agent_disposition_forbidden": true,
+  "ordinal": [
+    {
+      "n": 1,
+      "memo_id": "infd-20260921-b01",
+      "workplan": "SECRETS-WP-0009",
+      "task": "SECRETS-WP-0009-T03",
+      "hub_task_prefix": "f8069c8a",
+      "question": "Accept the spend envelope for metered Glas runs on the Anthropic key (EUR 5 per run, 20 per day, 500 total, until 2027-01-31)?",
+      "memo": "infd-20260921-b01.memo.json",
+      "packet": "infd-20260921-b01.packet.md",
+      "packet_hash": "sha256:a3d3f4e33d75579795c0e407971c0d472432569ef68a9408e9897587a58f0deb",
+      "required_highlight": "infd-20260921-b01-h1"
+    }
+  ]
+}

docs/batches/2026-09-21/budget/infd-20260921-b01.memo.json

@@ -0,0 +1 @@
+{"approval_binding_digest":null,"approval_id":null,"binding":{"justification":null,"principal":{"display_name":"Named reviewer in net-kingdom-admins","id":"pending-human-session","identifiers":[],"kind":"person","role":"reviewer"},"target":{"environment":"prod","id":"spend-envelope:hfact-glas-anthropic-2026-09","kind":"spend-envelope","label":"Glas metered runs on the Anthropic key (railiance01)","requires_new_bind":false},"terms":null},"binding_level":"organizational","brief":"Sets the spending authority that rein-aharness MessagesOwner enforces before each metered Glas run on railiance01. Accepting it does not deliver the key, run a model or create an OpenBao policy; those are three separate SECRETS-WP-0009-T03 approvals. The EUR 100 monthly limit is recorded here but not enforced by the software.","highlights":[{"id":"infd-20260921-b01-h1","item_id":"infd-20260921-b01-packet","locator":{"kind":"work_record","task":"SECRETS-WP-0009-T03","workplan":"SECRETS-WP-0009"},"note":"The EUR 100 per month limit is NOT enforced: SpendPolicy has no monthly ceiling. Only EUR 5 per run, EUR 20 per day and EUR 500 total are enforced. Every completed run is charged its full reservation (EUR 4.9938), not its actual cost.","required_ack":true,"severity":"critical"}],"id":"infd-20260921-b01","locale":"en","packet":[{"hash":"sha256:a3d3f4e33d75579795c0e407971c0d472432569ef68a9408e9897587a58f0deb","item_id":"infd-20260921-b01-packet","label":"infd-20260921-b01-packet"}],"question":"Accept the spend envelope for metered Glas runs on the Anthropic key (EUR 5 per run, 20 per day, 500 total, until 2027-01-31)?","requested_act":"approve","sealed":false,"step_kind":"approve","ui_release":"informed-decision@0.2.0","version":1}

docs/batches/2026-09-21/budget/infd-20260921-b01.packet.md

@@ -0,0 +1,51 @@
+# SECRETS-WP-0009-T03 — spend envelope for metered Glas runs
+
+Blocking workplan: SECRETS-WP-0009
+Blocking task: SECRETS-WP-0009-T03 (hub prefix f8069c8a)
+Related: HFACT-WP-0001-T01/T04 (SpendPolicy and owner config), GLAS-WP-0012
+
+## Question
+Accept the spend envelope for metered Glas runs on the Anthropic key (EUR 5 per run, 20 per day, 500 total, until 2027-01-31)?
+
+## One act
+Accept this envelope as the spend authority for rein-aharness MessagesOwner
+`metered-once` runs on railiance01 using the Anthropic key of catalog lane
+`glas-claude-agent-dev-anthropic`. The accepted approval id becomes the
+SpendPolicy `authority_ref` for envelope `hfact-glas-anthropic-2026-09`.
+
+## Enforced values (rein-aharness SpendPolicy, decimal strings)
+
+| Field | Value | Note |
+| --- | --- | --- |
+| `per_run_eur` | 5 | Operator-stated |
+| `daily_eur` | 20 | Operator-stated; timezone Europe/Berlin |
+| `total_eur` | 500 | Operator-stated; over the whole envelope |
+| `eur_per_usd` | 0.87 | Operator rate 1 EUR = 1.15 USD (1/1.15 = 0.8696), rounded up |
+| `max_liability_usd` | 5.74 | Per run. Reserves ceil(5.74 x 0.87) = EUR 4.9938, inside EUR 5 |
+| `max_budget_usd` | 5.00 | Per run. Claude CLI stop threshold, inside liability |
+| `valid_from` | acceptance time | |
+| `expires_at` | 2027-01-31T23:59:59+01:00 | Operator-stated |
+
+Resulting capacity: at most 4 runs per day and 100 runs in total. A completed run
+is charged its full reservation, not its reported cost. A failed, cancelled or
+unaccounted run keeps its reservation and blocks further runs until reconciled.
+Cost above liability permanently marks the envelope breached.
+
+The operator's overall USD 600 budget and USD 800 liability caps are dominated
+by `total_eur` 500 (= USD 575) and need no separate field.
+
+## Recorded, not enforced
+- EUR 100 per calendar month. SpendPolicy has no monthly ceiling; a rein-aharness
+  follow-up adds `monthly_eur`. Until then the operator reviews monthly use.
+
+## Scope bound by the SpendPolicy, filled in before the private file is written
+`worker_id`, `activity_definition_id`, `target_repo`, `project`, `profile_ref`,
+`profile_sha256`, `descriptor_sha256`, `repository_grant_id`, `max_turns` come from
+the admitted factory profile (HFACT-WP-0001-T01). They narrow this envelope; they
+cannot widen the amounts above.
+
+## Must not
+- Deliver, read or display the Anthropic key
+- Authorize the OpenBao apply, verify or exec actions (separate T03 approvals)
+- Cover llm-connect or its DeepSeek default; that path is not this envelope
+- Raise any amount or extend the expiry without a new memo