Add a content-free usage ledger with legacy backfill. Reserve Workspace and durable Strategy/CV work before execution so deleted history or duplicate admission cannot reset limits.
Keep external providers behind server consent, task, and prompt-cost gates while persisting actual provider provenance.