feat: pre-flight spend gate (--max-spend-usd, exit 4) — DSE-1514 round 4 of 4 - #66

Draft

ernestprovo23 wants to merge 10 commits into

feat/dse-1514-r3-cost-ceilingsfrom

feat/dse-1514-bounded-cost-receipts

Commits on Sep 4, 2026

feat(council): thread max_output_tokens through every call path (DSE-1514)
ernestprovo23
committed
4fe313b
feat(council): plan_calls enumerates the worst-case call plan per mode (DSE-1514)
ernestprovo23
committed
809fa30
feat(council): pre-flight spend gate refuses before the first provider call (DSE-1514)
ernestprovo23
committed
1142cb6
feat(cli): --max-output-tokens, --max-spend-usd, refusal exit code 4 (DSE-1514)
ernestprovo23
committed
4188446
fix(council): adversarial critics and judge embed upstream output in the call plan; table-driven plan_calls; one spend-gate chokepoint (DSE-1514 review)
ernestprovo23
committed
dab98e5
test(pricing): cross-mode ceilings, refusal-before-call, secret-safety on the priced manifest (DSE-1514)
ernestprovo23
committed
438306e
docs: cost ceilings and the spend gate — README, PDD §4a/§9, changelog, config example (DSE-1514)
ernestprovo23
committed
5e3208a
fix(cli,council,pricing): validate spend/output caps (NaN, Infinity, non-positive), never render locals, price streaming cache hits, harden the snapshot loader (DSE-1514 review)
ernestprovo23
committed
a0676d3
fix(council,docs): phase-aware reservation basis from the call plan; document the fourth refusal and the gate's scope (DSE-1514 QA C1/M1-M5)
ernestprovo23
committed
4420274
fix(council): record the output cap on debate per-round receipts (DSE-1514 QA I2)

ernestprovo23
and
claude
committed
8e83cf6