Concrete product packaging for SPEEDKIT Starter, Pro, and Enterprise. Pricing is the money rail; capabilities are the commercial product boundary.
CAPABILITY_BUNDLES=LIVE · PUBLIC_ONLY=true · FAKE_CHECKOUT=false
SPEEDKIT-STARTER · entitlement level 1
founder / builder / solo operator
SPEEDKIT-PRO · entitlement level 2
team / agency / technical operator
SPEEDKIT-ENTERPRISE · entitlement level 3
company / institution / compliance-heavy buyer
Capabilities JSON · Capability API · Product Control OS · Pricing
Capability enforcement is live. Plans now have allowed and denied capability sets, and the access-check API returns deterministic ALLOW/DENY decisions.
Plan usage is now measurable. Allowed capability use writes metered events to KV; denied capability use does not write.
Usage is now evidence. Allowed metered usage writes hash-chained ledger entries to KV. Denied usage remains blocked by policy and is not recorded as consumption.
Usage writes are now quota-gated. Access must pass first; then monthly plan capacity must exist; only then can usage or ledger evidence be written.
Ledger evidence is now replayable. The verify API recomputes every visible entry hash, checks previous-hash continuity, and confirms the latest hash.
Buyer usage now requires session authority. Public buyer flow resolves plan from Checkout session metadata; unpaid sessions cannot write usage or ledger evidence.
Buyer state is now inspectable from one session surface. The capsule exposes session authority, plan resolution, quota, ledger state, and cold replay status.
The marketplace OS is now consolidated. One closure capsule exposes runtime, product OS, buyer control, quota, usage, ledger, cold replay, and checkout readiness.
The marketplace OS now has one canonical public digest. The digest hashes Product OS, route map, closure, buyer control, entitlement usage, quota, ledger, verification, runtime, and marketplace control state.
The Marketplace OS digest now has a public receipt. The receipt binds the digest to systems=4, workspace=135, private_remaining=0, route count, and the consolidated control state.
The public receipt now has external replay. The verifier recomputes the receipt hash from receipt_material, confirms digest match, and validates private_remaining=0, systems=4, and workspace=135.
The public Marketplace OS now has one chain index. It binds the digest, receipt, verifier, closure, Product OS, and route map into one SHA-256 public chain hash.
The public control chain now has external replay. The verifier recomputes the chain hash from chain_material and confirms digest, receipt, verifier, route count, systems=4, workspace=135, and private_remaining=0.
The verified public control chain now has a certificate. It binds the chain hash, chain verification hash, digest, receipt, route count, systems=4, workspace=135, and private_remaining=0.
The public chain certificate now has external replay. The verifier recomputes the certificate hash from certificate_material and confirms chain, digest, receipt, systems=4, workspace=135, and private_remaining=0.
The verified public chain certificate now has a final public seal. It binds certificate verification, certificate hash, chain hash, digest, route count, systems=4, workspace=135, and private_remaining=0.
The final public chain seal now has external replay. The verifier recomputes seal_hash from seal_material and confirms certificate verification, chain hash, systems=4, workspace=135, and private_remaining=0.
The final public chain now has an evidence archive. It binds seal verification, seal hash, certificate verification, verified chain, systems=4, workspace=135, and private_remaining=0.
The final evidence archive now has external replay. The verifier recomputes archive_hash from archive_material and confirms seal verification, systems=4, workspace=135, and private_remaining=0.