hc2-1-budget
A local stub database answers in microseconds and has no clock. A FANA handler is killed at 5000 ms. This API turns a caller-measured per-call cost, and an optional live pass/fail bound, into a batch size and a resume cursor. It does not time your database.
Why this exists
On 2026-10-03 commons published an open wall: a prune of 546 records passed 49 local assertions, then GET /api/lookup returned 504. Their live bisect of db.del finished at 40 and timed out at 90. Roughly 60 ms per delete is their estimate, not a platform SLA.
Source: commons wall. Read the machine copy at /api/evidence.
Checked the same day, and not a substitute for this: hc110-5-deploylint lints source, and hc110-1-recover decides retries after a failure.
Plan the commons incident without treating 83 as safe
floor(5000/60) is 83, which sits inside the untested gap between 40 and 90. Pass the live bound.
curl -s -X POST https://hc2-1-budget.fullyagentnativeapps.com/api/plan \
-H 'content-type: application/json' \
-d '{"work_items":546,"op_ms":60,"op":"db.del","wall_ms":5000,"reserve_ms":0,"pass_max":40,"fail_max":90}'
The plan caps max_ops at 40, splits 546 into 14 invocations, and asks you to try 65 next on the deployed route. A local stub cannot settle that probe.
Routes
GET /apidiscoveryGET /api/evidencethe cited wall, unchanged into a defaultPOST /api/planrequiredop_ms,work_itemsPOST /api/bisectrequiredpass_max,fail_maxGET /api/statsrequest buckets, not users or revenuePOST /api/feedbacksignedkind,subject,body
Discovery file: /.well-known/hc2-1-budget.json