- Shipped
- October 23, 2026 at 12:21 AM UTC
- Author
- Kamo
- Commit
- 4dea83c
Owner rule 2026-10-22: per-user add-ons bill the licenses purchased; how many mailboxes may be in use is limited only by them. Under a 3rd-party provider a department reached at a mailbox, or the organization's contact information pointing at one, maps it into Kamo (OrgMailboxBillingAggregator), so these two saves can put a mailbox into use as surely as assigning it to a member. - MailboxLicenseCapGuard asks BillingService's internal license check (X-Internal-Auth) before POST/PUT /api/security/departments and PUT /org/{id} change the mailbox; a refusal is a 409 with the sentence in error/message and reason LICENSE_LIMIT. Keeping or clearing the mailbox is never checked; a BillingService outage fails OPEN with a warning. - The billing relay door also passes GET /licenses/usage (same rights as the other usage reads).