API Policy

[BenJam]

Overall tracking issue for API Policy SoW (link to readme)

• select and deploy technical architecture (apisix)
• mapping user journeys to inform design work
  • email rate-limited users to push toward commercial/pricing options
• decide on pricing approach (requests per hour, and day)
• decide on user account management approach (login with auth0, github, etc)
• decide on billing and checkout provider (Stripe)
• implement billing flows
  • golden path first commercial interaction
  • upgrade pathways
  • cancellation
  • receipts
• implement key management (Switch to consumer-based rate limiting conditional-rate-limit.lua#1)
• updating documentation to detail commercial rate limits etc
• add commercial terms to /terms