# Task cost and mutation budget review

Blank review worksheet. This document does not enforce policy and contains no measured test results. Run tests only with synthetic records in an isolated environment.

## Identity and scope

- Trusted task ID and issuing orchestrator:
- Worker/run IDs attached to this task:
- Approved action, target scope and approval reference:
- Policy and price-catalog revisions:
- Mutation counting unit (writes, unique records, notifications or another effect):
- How repeated writes and downstream effects count:
- Task-wide money ceiling:
- Task-wide mutation ceiling:
- Gateway/coordinator responsible for admission:
- Alternate routes and how they are restricted:
- Reconciliation owner and maximum observation window:

## Reservation record (one per attempted operation)

- Operation ID and idempotency scope:
- Task ID:
- Requested maximum money and mutation reservations:
- Existing committed consumption and unresolved reservations:
- Admission decision and policy reason:
- Atomic transaction or coordinated admission evidence:
- Dispatch evidence, including downstream queues:
- Provider operation ID and independent effect observation:
- Outcome: confirmed success / confirmed no effect / partial / unknown
- Actual money and mutations consumed:
- Reservation still held:
- Release evidence (do not infer no effect from timeout):
- Reviewer and timestamp:

## Synthetic acceptance cases

| Case | Expected boundary | Observed evidence | Verdict |
|---|---|---|---|
| Four concurrent batches of ten; task allowance twenty | At most two dispatch before settlement or release | | |
| Restart worker with new run ID | Same trusted task allowance applies | | |
| Money available, mutation capacity exhausted | No dispatch | | |
| Mutations available, money exhausted | No dispatch | | |
| One reservation succeeds, the other fails | No dispatch; stranded hold reconciled safely | | |
| Authorised read within its budget | Read succeeds | | |
| Write response times out | Unknown effect keeps capacity held pending reconciliation | | |
| Delayed worker resumes after reservation expiry | Fenced from dispatch or capacity remains held | | |
| Attempt to bypass gateway | Alternate path denied and evidence captured | | |

Use provider-side observations to check effects. Agent narration alone is insufficient. A failed positive control makes a denial result inconclusive.

## Decision

- Result: pass / fail / inconclusive
- Unresolved effects and routes:
- Restricted evidence location (do not paste credentials or customer records):
- Required change before production:
- Approver and next review date: