Prepaid-only by design

No credit extension and no negative balances. Billable execution requires reserved funds.

Atomic-only execution

One request, one deterministic transform, one immediate response. No hidden async work.

Auditable billing

Estimate → lock funds → execute → settle actual cost → release remainder with immutable ledger records.

Bounded runtime

Server-side caps for payload size, execution time, and fallback token limits.