openspec: scan-limits-gating change — paid-order gating + daily/IP alert caps (no gateway)
This commit is contained in:
@@ -0,0 +1,15 @@
|
||||
## ADDED Requirements
|
||||
|
||||
### Requirement: Paid-order gating in alert decision
|
||||
The alert decision (`shouldAlert`) SHALL return false when the tag's linked order exists and is not `paid`.
|
||||
|
||||
#### Scenario: Lapsed tag scan
|
||||
- **WHEN** a scan arrives on a tag with a non-paid order
|
||||
- **THEN** `shouldAlert` returns false (record only)
|
||||
|
||||
### Requirement: Cap checks in alert decision
|
||||
The alert decision SHALL respect the per-tag daily cap and per-IP hourly rate limit.
|
||||
|
||||
#### Scenario: Over cap
|
||||
- **WHEN** the daily or hourly counter is exceeded
|
||||
- **THEN** `shouldAlert` returns false (record only)
|
||||
Reference in New Issue
Block a user