Implements auditable subscription, trial, grace-period, cancellation, and entitlement transitions independent of a processor.
Prototype evidence fixture—not an independent certification or production safety guarantee.
4 declared features · TypeScript / node
02Test evidence97% / 262 testspassing fixture run · Jul 20, 2026
03Security evidence96/100 security0 critical · 0 high · FixtureScan 1.4
04ProvenanceSigned fixture buildFunctionFoundry demo build service · Jul 18, 2026
05Reference offerCommercial sourceartifact-access · source-access · modification · commercial-use
fc3071de46b4…a6d07cd7d5Contract, fixture evidence, provenance, and offers above refer to manifest version 1.7.0. The digest identifies its seeded demo artifact; it is not an independent certification.
Implements auditable subscription, trial, grace-period, cancellation, and entitlement transitions independent of a processor. The versioned contract documents deterministic behavior, failure modes, configuration, and integration boundaries for production teams.
application/json
Validated application/json request payload
application/json
Typed application/json response with trace metadata
TypeScript / node 20, 22
PostgreSQL · Drizzle
node-service · container
Contract stability: stable · fixture declared
Declared compatible pieces
Compatibility links are declared fixture metadata and have not been independently integration-tested
133–375 agent minutes · 2.3–8.4 review hours
fixture directional · low confidencePrototype estimate only. It is not an empirical benchmark and must not be presented as measured savings.
Fixture evidence scanned 7/19/2026 with FixtureScan 1.4. Benchmarks use 2 vCPU / 2 GB fixture runner.
| Data classes | internal |
|---|---|
| Permissions | read-write temporary-storage: Bounded request processing |
| Security findings | 0 critical · 0 high |
| SBOM | CycloneDX 1.6 fixture · dependency inventory attached |
| Builder | FunctionFoundry demo build service · signed: true |
| Revision | fixture-subscription-billing-state-machine-v1 |
| Artifact SHA-256 | fc3071de46b46fd4a06e05ff9ee4a56b33ddab8c49e2a7958c7462a6d07cd7d5 |
| Maintenance | active |
| Option | Model | Rights | Restrictions | Price |
|---|---|---|---|---|
| Private evaluation evaluation | evaluation | evaluation | Non-production use only; Results retained for 30 days | $0.05 / evaluation Seller-stated · waived in prototype · $0 charged |
| Commercial source commercial-source · 10 seats | one-time | artifact-access, source-access, modification, commercial-use | No standalone redistribution; One production application | $999 |
| Organization source organization · 100 seats | one-time | artifact-access, source-access, modification, commercial-use | No standalone redistribution; Single purchasing organization | $2,500 |
Prototype license text is illustrative and has not received legal review.
| Version | Status | Evidence | Artifact |
|---|---|---|---|
| 1.7.0 | active | 97% coverage · scan recorded | fc3071de46b46fd4… |
{
"schemaVersion": "1.0",
"capabilityId": "00000000-0000-4000-8000-000000000007",
"name": "Subscription Billing State Machine",
"slug": "subscription-billing-state-machine",
"summary": "Implements auditable subscription, trial, grace-period, cancellation, and entitlement transitions independent of a processor.",
"granularity": "system",
"purposes": [
"subscription billing",
"state machine",
"entitlements"
],
"features": [
"proration model",
"webhook reconciliation",
"entitlement states",
"audit events"
],
"functionalDescription": "Implements auditable subscription, trial, grace-period, cancellation, and entitlement transitions independent of a processor. The versioned contract documents deterministic behavior, failure modes, configuration, and integration boundaries for production teams.",
"inputs": [
{
"name": "request",
"contentType": "application/json",
"description": "Validated application/json request payload",
"required": true
}
],
"outputs": [
{
"name": "result",
"contentType": "application/json",
"description": "Typed application/json response with trace metadata",
"required": true
}
],
"runtimes": [
{
"language": "TypeScript",
"runtime": "node",
"versions": [
"20",
"22"
]
}
],
"frameworks": [
"PostgreSQL",
"Drizzle"
],
"deploymentTargets": [
"node-service",
"container"
],
"dependencies": [
{
"name": "zod",
"version": ">=2",
"optional": false
}
],
"permissions": [
{
"resource": "temporary-storage",
"access": "read-write",
"reason": "Bounded request processing"
}
],
"dataClassifications": [
"internal"
],
"complianceClaims": [
"SBOM available",
"Dependency scan recorded"
],
"testEvidence": {
"coveragePercent": 97,
"tests": 262,
"lastRun": "2026-07-20T14:00:00.000Z",
"status": "passing"
},
"securityEvidence": {
"criticalFindings": 0,
"highFindings": 0,
"score": 96,
"scannedAt": "2026-07-19T09:30:00.000Z",
"scanner": "FixtureScan 1.4"
},
"benchmarks": [
{
"name": "p95 latency",
"value": 122,
"unit": "ms",
"environment": "2 vCPU / 2 GB fixture runner"
}
],
"buildBenchmark": {
"basis": "fixture-directional",
"sampleSize": 0,
"referenceTask": "Reimplement the declared subscription-billing-state-machine contract in a compatible greenfield repository",
"tokenEstimate": {
"low": 177000,
"high": 440000
},
"agentTimeMinutes": {
"low": 133,
"high": 375
},
"humanReviewHours": {
"low": 2.3,
"high": 8.4
},
"observedAt": null,
"methodology": "Directional fixture derived from declared granularity and integration effort; no coding-agent replay was run.",
"confidence": "low",
"disclosure": "Prototype estimate only. It is not an empirical benchmark and must not be presented as measured savings."
},
"integration": {
"estimatedHours": 5,
"packageManager": "pnpm",
"configurationNotes": [
"Pin the immutable artifact digest",
"Configure scoped service credentials"
]
},
"composition": {
"composable": true,
"interface": "event-consumer",
"compatibleWith": [
"idempotency-key-guard",
"audit-hash-chain-ledger",
"webhook-retry-dead-letter-worker"
],
"requires": [],
"contractStability": "stable",
"evidence": "fixture-declared",
"notes": [
"Compatibility links are declared fixture metadata and have not been independently integration-tested"
]
},
"commercialModels": [
"source-license"
],
"licenseOptions": [
{
"id": "evaluation",
"name": "Private evaluation",
"scope": "evaluation",
"priceCents": 5,
"unit": "evaluation",
"rights": [
"evaluation"
],
"developerSeats": null,
"restrictions": [
"Non-production use only",
"Results retained for 30 days"
]
},
{
"id": "commercial-source",
"name": "Commercial source",
"scope": "commercial-source",
"priceCents": 99900,
"unit": "one-time",
"rights": [
"artifact-access",
"source-access",
"modification",
"commercial-use"
],
"developerSeats": 10,
"restrictions": [
"No standalone redistribution",
"One production application"
]
},
{
"id": "organization-source",
"name": "Organization source",
"scope": "organization",
"priceCents": 250000,
"unit": "one-time",
"rights": [
"artifact-access",
"source-access",
"modification",
"commercial-use"
],
"developerSeats": 100,
"restrictions": [
"No standalone redistribution",
"Single purchasing organization"
]
}
],
"artifactDigests": [
{
"algorithm": "sha256",
"digest": "fc3071de46b46fd4a06e05ff9ee4a56b33ddab8c49e2a7958c7462a6d07cd7d5",
"artifactType": "source"
}
],
"provenance": {
"builder": "FunctionFoundry demo build service",
"sourceRevision": "fixture-subscription-billing-state-machine-v1",
"builtAt": "2026-07-18T12:00:00.000Z",
"signed": true
},
"maintenanceStatus": "active",
"version": "1.7.0",
"seller": {
"name": "LedgerWorks",
"verified": true,
"reputation": 4.9
},
"verificationBadges": [
"Contract verified",
"Security reviewed"
]
}