Quota exceeded
Fail closed
When backend returns quota errors, the iframe should stop retrying and show a controlled message.
Admin usage
Usage and quota
Usage UI will later show bootstrap calls, bars calls, realtime sessions and quota status. For now it documents the fail-closed contract.
contract-first placeholderNo admin token in UI
Metrics
Future
Usage metrics need backend aggregation before a real dashboard can be trusted.
Audit
Required
Admin mutations and runtime security failures should be auditable in backend logs.