2026-04-08

Trial rules and access control

Free runs are a product decision; throttling and abuse protection are a systems decision.

See also: docs/trial-and-access-rules.md

A guest trial is a go-to-market tool. It is also a potential denial-of-service channel if you do not cap cost per identity.

We pair business rules with the same DoS and rate-limiting thinking you would use on any public POST surface. The cheat sheet is not a law. It is a shared checklist for shapes that fail in production: burst traffic, cache misses, and asymmetric work per request.

So what

When someone asks for "unlimited free compute," the answer is a number and a policy owner. Our numbers live in the trial docs and code, not in a footnote in sales email.