--- id: JNY-PFM-LLM-003 title: A Rhythm administrator grants and withdraws temporary AI capacity feature: FEAT-PFM-LLM-05 product_area: platform module: llm revision: 1 status: draft product_intent: proposed implementation_evidence: partially-observed supersedes: [] source_sha: services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1 react-console: baf6dae382d6f41dce976c7f848667ccc37e076f actor: ACT-PFM-004 goal: 'Restore AI access for a limited period, notify administrators when requested and retain the control history.' capabilities: - CAP-PFM-LLM-011 - CAP-PFM-LLM-014 - CAP-PFM-LLM-007 screens: - '/hq/tenants/{id}' steps: - 'n': 1 surface: getHqTenantLlmUsage action: Inspect the organization’s usage position. capability: CAP-PFM-LLM-011 expected: The organization is stopped with its allowance committed. provenance: test source: >- services-platform:modules/llm/tests/integration/services/usage-reports/tenant-usage.integration.spec.js#answers a hard stopped status at all of the allowance - 'n': 2 surface: previewHqTenantLlmUsageOverride action: Preview a dated capacity grant. capability: CAP-PFM-LLM-014 expected: The preview computes the resulting position without saving or auditing a grant. provenance: test source: >- services-platform:modules/llm/tests/e2e/llm-overrides.e2e.spec.js#previews the position with the override in force, writing and auditing nothing - 'n': 3 surface: grantHqTenantLlmUsageOverride action: 'Submit the grant with its reason, ticket and requested notice.' capability: CAP-PFM-LLM-014 expected: The service saves the grant and sends the restoration notice when applicable. provenance: test source: >- services-platform:modules/llm/tests/integration/services/overrides/allowance-overrides.integration.spec.js#tells the organization’s administrators, saying until when - 'n': 4 surface: '/console/{tenantId}/queries/new' action: Submit an AI request from the organization. capability: CAP-PFM-LLM-007 expected: Admission uses the additional capacity. provenance: test source: >- services-platform:modules/llm/tests/integration/services/overrides/allowance-overrides.integration.spec.js#lets the ledger admit a call the base alone would refuse - 'n': 5 surface: revokeHqTenantLlmUsageOverride action: Revoke the grant with a reason. capability: CAP-PFM-LLM-014 expected: The saved grant records revocation and ceases to provide capacity. provenance: test source: >- services-platform:modules/llm/tests/e2e/llm-overrides.e2e.spec.js#revokes it, answering it as revoked with who and why - 'n': 6 surface: listHqTenantLlmUsageAudit action: Read the AI control audit history. capability: CAP-PFM-LLM-011 expected: The grant and revocation appear with their reasons. provenance: test source: >- services-platform:modules/llm/tests/e2e/llm-overrides.e2e.spec.js#audits the revocation as a non-widening action beside the grant alternates: - from_step: 3 condition: The organization already has room for AI requests. path: Save the grant without a restoration notice. outcome: Capacity increases without an unnecessary restoration message. provenance: test source: >- services-platform:modules/llm/tests/integration/services/overrides/allowance-overrides.integration.spec.js#sends nothing when the organization still had room, even if asked failures: - from_step: 3 condition: The combined allowance would exceed the ceiling. path: Reject the proposed grant without saving it. outcome: The administrator must propose a smaller grant or wait for reset. provenance: test source: >- services-platform:modules/llm/tests/integration/services/overrides/allowance-overrides.integration.spec.js#refuses a grant that would take the allowance past the ceiling together with the override in force - from_step: 3 condition: The same grant is submitted twice. path: Each submission creates and audits a grant. outcome: An administrator must revoke unintended duplicate capacity. provenance: documented source: 'services-platform:docs/llm.md#Overrides' rules_in_play: - BR-CAP-PFM-LLM-014-01 - BR-CAP-PFM-LLM-014-02 - BR-CAP-PFM-LLM-014-03 - BR-CAP-PFM-LLM-014-05 - BR-CAP-PFM-LLM-014-07 - BR-CAP-PFM-LLM-014-08 - BR-CAP-PFM-LLM-014-09 - BR-CAP-PFM-LLM-007-06 assertions: - id: AS-JNY-PFM-LLM-003-01 statement: A grant admits a request that the base allowance would refuse. provenance: test source: >- services-platform:modules/llm/tests/integration/services/overrides/allowance-overrides.integration.spec.js#lets the ledger admit a call the base alone would refuse - id: AS-JNY-PFM-LLM-003-02 statement: 'After revocation, admission no longer counts that grant.' provenance: test source: >- services-platform:modules/llm/tests/integration/services/overrides/allowance-overrides.integration.spec.js#stops the override applying to the next call - id: AS-JNY-PFM-LLM-003-03 statement: The audit history retains both control actions and their reasons. provenance: test source: >- services-platform:modules/llm/tests/e2e/llm-overrides.e2e.spec.js#audits the revocation as a non-widening action beside the grant e2e_policy: required e2e_reason: >- The service walkthrough has API evidence. A browser walkthrough is required when grant and revoke controls are enabled, including protection against duplicate submission. evidence: - >- services-platform at ad3f6a6582843008ed0f5a17b131878d15829af1: docs/milestones/PLAT-M2-ai-usage-hq-controls.md; docs/proposals/llm-observability/12-milestone-plan.md (PLAT-M2 walkthrough); docs/llm.md (Overrides); modules/llm/tests/e2e/llm-overrides.e2e.spec.js; tests/integration/services/overrides/allowance-overrides.integration.spec.js. - >- react-console at baf6dae382d6f41dce976c7f848667ccc37e076f: components/console/hq/tenant-ai-usage-card.tsx (Grant Override disabled). proved_by: [] --- # A Rhythm administrator grants and withdraws temporary AI capacity ## Story An organization asks Rhythm for temporary help after AI pauses. An administrator inspects its position, previews additional capacity and submits a dated grant with a reason. Staff then resume requests within that capacity. The administrator later revokes the grant and reviews the control history; the corresponding console controls are still incomplete.