A fetch draws on a real balance, so the ceiling is a person's to set and the plugin's job is to make a spend bounded and visible — never to decide one is worth it. Every line in this block is a way of spending less, or of keeping what was bought.
A wide low cap was sent and a tall dome on a long stem came back: thirty credits to learn something a silhouette check against the drawing would have shown for nothing. The check runs before the request, and a mismatch is a refusal.
The rule that an agent may not spend on its own judgement is right, and enforcing it by asking every time is what stops work between approvals. A ceiling set once by a person, with a ledger of what has gone against it, is the same rule enforced in a way an agent can work inside.
The service deletes what it made seventy-two hours later. One Cottony run recorded the settings it proved and not the mesh, and the mesh is now gone — so what comes back is copied locally with its sha256 and a provenance sidecar naming the prompt, the seed, the service, its version and the cost.
A fetched mesh comes at an arbitrary orientation, scale and origin, and a photograph brings whatever stood behind the subject back as geometry. Both are fixed on the boundary: the axes and the origin are this project's conventions, and the background is removed before it can be fused into a mesh no camera move takes it out of.
Handles for anything slow, a post-condition on every operation, typed errors that name the remedy, a surface that describes itself and this machine, and configuration resolved per call.
A surface is read on a sphere in three seconds, a render returns its measurements in the same answer, a distribution is reported as a set rather than a mean, and a sheet shows an asset beside its siblings.
What counts as a correct render, written as a file a search can aim at; a search that finds the rig numbers instead of a person finding them by hand; a cache so nothing renders twice; and a trace of everything the search rejected.
A Godot run judged by what the script printed rather than by an exit code that means nothing, a capture that works where there is no screen, a scale derived instead of tuned, and a runner pinned so two machines agree.
A fetched mesh rigged so it can be posed at all, motion as a clip rather than a second static render, curves as text a diff can show, and one source for both a 2D sprite and a 3D scene.
A shape stated as data rather than written as a program: a vocabulary read off real assets, numbers a search can reach, a review before anything is built, and a way back to code for the shape no format can state.