workplan: RAILIANCE-WP-0017 enforce consumption mode

Residual of resource-control RESOURCE-WP-0005: refuse new orders
that would exceed a restricted entity's published allowance.

WORK-RECORDS.md

@@ -19,6 +19,7 @@
 | workplan | RAILIANCE-WP-0015 | finished | — | workplans/RAILIANCE-WP-0015-platform-rapp-consistency.md |
 | workplan | RAILIANCE-WP-0016 | finished | — | workplans/RAILIANCE-WP-0016-apps-pg-resource-evidence.md |
 | workplan | RAILIANCE-WP-0016 | active | — | workplans/RAILIANCE-WP-0016-architecture-cleanup-backlog.md |
+| workplan | RAILIANCE-WP-0017 | proposed | — | workplans/RAILIANCE-WP-0017-consumption-mode-enforcement.md |
 | task | RAILIANCE-WP-0005-T01 | done | — | workplans/RAILIANCE-WP-0005-credential-request-and-lease-broker.md |
 | task | RAILIANCE-WP-0005-T02 | done | — | workplans/RAILIANCE-WP-0005-credential-request-and-lease-broker.md |
 | task | RAILIANCE-WP-0005-T03 | done | — | workplans/RAILIANCE-WP-0005-credential-request-and-lease-broker.md |
@@ -78,3 +79,4 @@
 | task | RAILIANCE-WP-0016-T03 | done | — | workplans/RAILIANCE-WP-0016-architecture-cleanup-backlog.md |
 | task | RAILIANCE-WP-0016-T04 | done | — | workplans/RAILIANCE-WP-0016-architecture-cleanup-backlog.md |
 | task | RAILIANCE-WP-0016-T05 | todo | — | workplans/RAILIANCE-WP-0016-architecture-cleanup-backlog.md |
+| task | RAILIANCE-WP-0017-T01 | todo | — | workplans/RAILIANCE-WP-0017-consumption-mode-enforcement.md |

workplans/RAILIANCE-WP-0017-consumption-mode-enforcement.md

@@ -0,0 +1,55 @@
+---
+id: RAILIANCE-WP-0017
+type: workplan
+title: "Enforce resource-control consumption mode"
+domain: financials
+repo: railiance-platform
+status: proposed
+owner: codex
+topic_slug: railiance
+created: "2026-08-14"
+updated: "2026-08-14"
+related:
+  - RESOURCE-WP-0005
+origin: residual
+origin_ref: RESOURCE-WP-0005
+state_hub_workstream_id: "f33be601-51b5-4bcf-82bf-31f8dba59b9f"
+---
+
+# RAILIANCE-WP-0017 — enforce consumption mode
+
+## Goal
+
+Consume the `open` / `restricted` signal published by
+`resource-control` and enforce it on new orders and elastic usage.
+`resource-control` does not throttle the cluster.
+
+Origin: `RESOURCE-WP-0005-T07`. Terms:
+`resource-control/docs/TermsOfResourceProcurement.md` § 11.
+Runbook: `resource-control/docs/resource-procurement-facility.md`.
+
+## Boundaries
+
+- Restricted monthly new-consumption is €50 transfer price minus that
+  month's interest. At the default €1 000 overdue balance that is
+  €45.83 transfer price / €38.19 delivered cost.
+- Already-committed provider contracts are flagged to human financial
+  authority, not cancelled (OQ-2).
+- Safety paths (backup, identity, ingress needed to avoid data loss)
+  may continue; overage is an exception line, not a hidden charge.
+
+## T01 — Subscribe to the consumption-mode signal
+
+```task
+id: RAILIANCE-WP-0017-T01
+status: todo
+priority: high
+state_hub_task_id: "1c872918-0872-4b2a-8596-89b106239e54"
+```
+
+Define how platform procurement and admission read the latest
+per-entity consumption mode and remaining transfer-price allowance for
+the current period.
+
+Done when a restricted entity cannot place a new order that would
+exceed the published allowance, and an `open` entity is unchanged.