openspec: scan-limits-gating change — paid-order gating + daily/IP alert caps (no gateway)

This commit is contained in:
2026-08-08 09:22:09 +10:00
parent 31174d41e6
commit 92ccf3d0f3
7 changed files with 132 additions and 0 deletions

View File

@@ -0,0 +1,15 @@
## ADDED Requirements
### Requirement: Paid-order gating in alert decision
The alert decision (`shouldAlert`) SHALL return false when the tag's linked order exists and is not `paid`.
#### Scenario: Lapsed tag scan
- **WHEN** a scan arrives on a tag with a non-paid order
- **THEN** `shouldAlert` returns false (record only)
### Requirement: Cap checks in alert decision
The alert decision SHALL respect the per-tag daily cap and per-IP hourly rate limit.
#### Scenario: Over cap
- **WHEN** the daily or hourly counter is exceeded
- **THEN** `shouldAlert` returns false (record only)