# description
Per-route, per-tier, and per-tenant cost ceilings consumed by services/backend/shared/netpolicy/spend (Go) + services/ai/core/spend (Python). The runtime gate consults these maps before every LLM dial — see ADR-088.

# properties.routes.description
Per-route single-turn ceilings. `default` is required — every unlisted route inherits it.

# properties.tiers.description
BYOK role taxonomy (free | byok | admin-override). Sets the per-window ceiling.

# properties.tenants.description
Per-tenant overrides keyed by tenant_id. Empty in OSS dev.

# properties.vendors.description
Non-LLM vendor $ caps (ADR-088 extension). Rolling-window ceilings on metered non-LLM vendor spend (Twilio/Resend/Deepgram), keyed by vendor id. Each vendor must have a matching perimeter.firewall egress row + vendors.toml BAA row.

# properties.cedar_mirror.description
Cedar shadow-mirror metadata for the spend routes (ADR-094 PDP rollout posture). Declarative only — the network lane does not author Cedar policy; the orchestrator wires the action from this shape. Mirrors each spend route to a `<namespace>::<resource_type>` resource with the named cap-breach action.

# properties.cedar_mirror.properties.shadow.description
true → emit a decision-log event, never deny (shadow soak); false → enforce.