Separate sample billing manager permission Enable separate sample cleanup review budget Simulate conversation reservation exhausted Evaluate entitlement at its exclusive expiry boundary

Local review controls simulate backend results. They cannot enforce permissions or paid access. No identities, emails, payments, real uploads or AI requests are sent.

Engineering review: paid conversation requires a fresh server entitlement and atomic usage reservation. Recipe cleanup uses a separate proposed budget and human-review path; its paid policy remains unresolved. These controls grant no real access.