The injectable per-tenant run cap: return false to refuse an unattended start (a capped fire is skipped + audited, the schedule stays healthy). Async so a D1/KV-backed cap fits. Absent ⇒ uncapped.
The injectable per-tenant run cap: return false to refuse an unattended start (a capped fire is skipped + audited, the schedule stays healthy). Async so a D1/KV-backed cap fits. Absent ⇒ uncapped.