- Shipped
- August 11, 2026 at 1:41 AM UTC
- Author
- kamo
- Commit
- 6209a25
The owner had exactly one lever over self-payment and it was the wrong shape: an irreversible promote gesture, with no way to say in advance whether it was permitted and no way to undo it — while a separate consumer checkout path let a member self-subscribe regardless. This is the preventive control, and it is what the rest of the console hides itself on. Four modes, labelled by what happens to other people rather than by the enum: an owner picking a policy is deciding what their staff can see, so that is what each option describes. Groups only appear once the mode permits them, because a group is several people doing what one person may already do. Non-owners see the setting read-only rather than not at all. "The organization pays centrally" is the answer to why they have no purchasing options, and hiding it only turns that into a support question. A failure loading this section leaves the plan picker working — a policy the console cannot read should not take the buying surface down with it.