feat(ai): a daily ceiling, so lean spend is enforced rather than remembered #5584
1 changed file+14−0
Modified.env.example+14−0View fileUnifiedSplit
@@ -93,6 +93,20 @@ HEARTBEAT_REPORT_TOKEN=
9393# recording.
9494REPORTING_EPOCH=
9595ANTHROPIC_API_KEY=
96# Hard ceiling on TOTAL AI spend per day, in cents. Default 200 (US$2.00).
97#
98# Not a per-repo or per-user quota — those exist separately and answer a
99# fairness question between tenants. This answers the owner's: what is the most
100# this platform can cost me today, whatever goes wrong. A runaway loop can
101# exhaust a per-tenant quota and still empty the account, because there are
102# many tenants and one card.
103#
104# Sized from measurement: all-time spend to 2026-08-30 was 177 cents across 177
105# calls. When it trips, AI degrades exactly as it does for a provider outage
106# and recovers on its own; git, CI, merges and deploys are untouched, because
107# none of them call a model. Set to 0 to disable the ceiling entirely — 0 means
108# NO LIMIT, never "spend nothing".
109AI_DAILY_BUDGET_CENTS=
96110# Container memory ceiling (docker-compose.standalone.yml). Default 2g.
97111# INCIDENT 2026-08-27: the container ran unbounded and leaked, taking a
98112# shared host to 96% full via five 10-13 GB core dumps. Raise on a
99113
c comment · e edit title · m merge · a approve · r request changes · ? shortcuts