Permit 0. Cap-style vars opt in: DEMO_DAILY_RUN_CAP=0 ("freeze the
demo") and RUN_RETENTION_DAYS=0 ("purge terminal runs immediately")
are real operator intents — exactly the values an incident reaches for —
and rejecting them silently reverts to the fallback while the
config-error line reads as a caught typo. Duration/TTL vars keep the
default rejection: a 0-second JWT or 0-hour sandbox is never meant.
Permit 0. Cap-style vars opt in:
DEMO_DAILY_RUN_CAP=0("freeze the demo") andRUN_RETENTION_DAYS=0("purge terminal runs immediately") are real operator intents — exactly the values an incident reaches for — and rejecting them silently reverts to the fallback while the config-error line reads as a caught typo. Duration/TTL vars keep the default rejection: a 0-second JWT or 0-hour sandbox is never meant.