secrets-engine/docs/proposals/glas-metered-20260927

Metered owner activation candidate — 2026-09-27

Historical preparation packet. The replacement-window final outcome supersedes the pending installation and approval statements below. Native credential delivery/revocation completed; the owner attempt failed. Accounting reconciliation, corrected runtime admission and separate retry authority remain.

This is a reviewed source candidate, not native authorization. No provider key was read, no approval created or consumed, and no paid/production queue attempt was made. After explicit user approval, the corrected owner and Secrets Engine commit 11cc0d5452c1520060031f50d77f20b80f6dcf85 were installed on Railiance. Deployment checks pass; spend limits and the standing worker are unchanged.

Concrete correction

owner.json retains the installed runtime, spend-policy digest and authority reference. Only its Messages policy changes:

• input liability context: 200000 → 1000000 (Sonnet 5 has no 200k variant);
• output ceiling: 32000 → 64000 (observed from the pinned actual CLI);
• allow mid-conversation-system-2026-04-07, observed on the primary request;
• tariff reference: dated 2026-09-27 review of first-party global standard pricing.

The optional CLI title-generation request remains refused: its structured-output beta/format are not admitted. The primary request succeeds in the synthetic proof. Mid-conversation system-role messages remain refused by the narrow transport. The later synthetic tool proof establishes a successful two-request Bash tool/result exchange using a disposable EUR 10 fixture envelope; it does not establish paid/native queue admission. Do not broaden that transport as an implied consequence of allowing the header.

The input upper rate remains 4 micro-USD/token (covers one-hour cache creation), output 10. Maximum full-output request hold: USD 4.64. At the configured 0.87 EUR/USD treatment that is EUR 4.0368. The existing USD 5.74 run reservation can fit one such request; even a second minimum-output request cannot fit after it. Actual low usage does not refund the full conservative charge. Two full-output requests would require USD 9.28 (EUR 8.0736 at that configured conversion); increasing the existing EUR 5 cap requires a new spend-policy/grant, ledger and recipient pins. It is not part of this correction. The preserved EUR 20 daily/EUR 500 total and validity through January 2027 are installed proof policy values, not acceptance of the old factory proposal or a guaranteed future FX/tariff ceiling. Recheck FX, tariff validity and the execution window before use.

Sources: model limits and pricing, inspected 2026-09-27. provider-facts.json records these inputs and the observed CLI shape.

Validation: the complete Secrets Engine suite passed 498 tests. The exact final proof script hash is recorded in the target receipt.

Evidence and exact requests

• activation-review.json: six unapproved exact CheckRequests, apply/verify/exec for each of the provider and worker-token lanes, plus their two native plans.
• ../../evidence/2026-09-27-installed-policy-refusal.json: the installed policy fails context, output and beta compatibility checks.
• ../../evidence/2026-09-27-sonnet5-runtime-proof.json: actual Railiance CLI 2.1.266/profile 1.1.1/model Sonnet 5, positive fake stream, zero-forward capacity refusal, private-state exclusion, read-only unchanged artifact and teardown.
• ../../evidence/2026-09-27-metered-host-preflight.json: old mode-0600 owner pin, unchanged spend pin, all three ledger tables empty, clean target and active Activity Core forward. These are observations, not permanent preconditions.

The six requests are built by the same _expected_request code as the PEP. They have no issued approval IDs or evaluator-origin digests. Do not use a local hash as a native evaluator digest. The provider lane requires human control; the companion retains its separately accepted ordinary lane approval.

Reproduce the offline review from the secrets-engine root:

uv run python tools/prepare_metered_activation.py \
  --catalog-dir catalog \
  --owner-snapshot docs/proposals/glas-metered-20260927/owner.json \
  --spend-snapshot docs/proposals/glas-metered-20260927/spend-policy.snapshot.json \
  --provider-facts docs/proposals/glas-metered-20260927/provider-facts.json \
  --output /tmp/new-metered-activation-review.json

The output must not already exist. This command performs no network access, credential retrieval, host mutation, queue claim or approval consumption.

Remaining native sequence

1. Completed with user approval: install corrected host owner and source release. Replace only /home/tegwick/hfact/owner-metered/owner.json, preserving mode 0600. Require the old SHA-256 0e263f8299a42f63caf3595ff3eb7adc10354673f7b5125e0811def3bea7c274, unchanged spend-policy pin and empty parent/request/route tables before the replacement. Refuse drift; do not reset or recreate the existing ledger.
2. Completed: host Secrets Engine updated from f7c12bed to 11cc0d5, including the companion-only guards and corrected catalog pin. No worker restart or profile promotion is required for this file-only correction. Validate the exact recipient path/pins and run its backend-free metered-once --check.
3. User selected preparation of the €10 proposal. Accept its new native spend grant and exact validity before activation. The existing EUR 5 cap permits one bounded model response but cannot establish a completed native tool session. Do not queue the one-commit task expecting two calls to fit.
4. Use the current owner routing catalog and scoped attended requester lane secrets-engine-requester-login to obtain evaluator bindings and create fresh exact approvals. Use the admitted human review surface for the provider lane. Do not seed human entries, reuse OpenRouter IDs, or reinterpret CCR custody as action approval. Refresh Railiance Clock admission at execution.
5. Under the scoped approval-client reader and separately attended backend lane, apply only the two data-read policies/AppRoles (5m TTL, max 15m, single-use SecretIDs, eight token uses). Verify exact read and unrelated identity, sibling path, metadata/list/write denials and revocation separately per lane. Keep existing KV values and the standing claim-loop credential untouched.
6. Invoke only the pinned one-cycle owner after both lanes pass their own claim/PDP/consume/readiness gates. Record natural claim/heartbeat/close, request holds, cleanup, actual outcome and revocation. Retain failures.

The approved configuration/code installation is complete. Requester login, real human entries, a new spend grant and paid execution remain outstanding. Required attended authentication cannot be substituted by an agent action. The complete factory G0 and useful delivery remain HFACT T01/T05; this packet is the narrower disposable Glas proof.

The latest observed ECB rate (2026-09-25) is approximately EUR 0.876962/USD, above the installed 0.87 treatment. Paid execution remains disabled pending fresh accepted FX/tariff validity; see the €10 proposal.