Commerce & Billing

Scope: the enterprise billing spine (Kill Bill) and the three terminal adapters as of 2026-11-09.

Status: Soft-proven; production migration gate OPEN (FINMON-16)

Blueprint sources: AGENTS.md (commerce guards), apps/agent-bff/src/commerce-*.js doc comments, killbill-bridge-service (listing), docs/commercialization/30_CONSOLIDATED_PROGRAM_BACKLOG.md (G4/KB items)

Facts

• Commerce is runtime-gated (G1–G4/KB lines): commerce guard evaluation is part of subscription flows (commerce-guards.js).
• Kill Bill runs as a bridge service (killbill-bridge-service, port in the 30xx family); the Java backend is embedded, gray deployment begins with catalog/tenant creation.
• As of the program record, Kill Bill production migration has not happened (FINMON-16 depends on prod keys + Malipo ledger + human approval) — current live money path is Soft/stand-in adapters (sikasie/malipo classes; no balances invented).
• Terminal adapters live behind adapter_class:payments; the wallet-binding interface (finmon-wallet.js) refuses unset adapters fail-closed.
• commercial_invoice, incrementUsageMeter, process_revenue_splits are real entry points used by the FINMON-S7 Soft voyage (see 31_FINMON.md).
• Currency-match settle: heterogeneous currencies do not settle together (FINMON-20, closed-loop rule).

Open items / gaps

• Production keys, live ledger, and tenant migration procedure are ops-side (blocked on the human approval gate).
• Reværonnement with the commerce guards (G1-G4) for citations is covered in apps/agent-bff/src/commerce-guards.js — skim before touching.
• For the complete catalog of monetization playbooks and the 16-phase remediation sequence, see COMPREHENSIVE_SYSTEM_CATALOG.md. The FINMON-16 production gate and the dual-control (MSS) design are documented in D-06 FINMON.md and A-03 Billing Ops.