None of them are pasting that into ChatGPT.
So we built the other thing.

# header (verified, not trusted)
{ "alg": "EdDSA", "typ": "JWT" }

# claims (verified against the public key in your Helm values)
{
  "iss": "feder8d.orchestrator",
  "sub": "t_8e7f29a14d3b",           # tenant_id
  "iat": 1717250400,
  "exp": 1720098400,                  # 33 days = billing period + 3d grace
  "tenant_id": "t_8e7f29a14d3b",
  "plan_id": "business",
  "entitlements": {
    "allowed_models": ["small_pool", "medium_pool", "embedding_*", "reranker"],
    "max_seats": -1,                  # -1 = unlimited
    "max_custom_domains": -1,
    "sso_included": true,
    "scim_included": true,
    "widget_enabled": true,
    "included_tokens_input": 50000000,
    "included_tokens_output": 10000000,
    "included_tokens_embedding": 200000000,
    "included_storage_gb": 100,
    "special_pi_allowed": true
  },
  "degraded": false,
  "trial": false,
  "lifecycle_state": "active"
}

# Default-deny: nothing leaves this namespace
# unless an explicit rule allows it.
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: deny-egress-default
  namespace: tenant-acme
spec:
  podSelector: {}
  policyTypes: [Egress]
  # empty egress = deny all
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-required
  namespace: tenant-acme
spec:
  podSelector: {}
  policyTypes: [Egress]
  egress:
    # Model Gateway only — no other AI providers
    - to:
        - namespaceSelector: { matchLabels: { name: feder8d-model-plane } }
      ports: [{ protocol: TCP, port: 8080 }]
    # Shared Postgres (your schema only — RLS enforces)
    - to:
        - namespaceSelector: { matchLabels: { name: feder8d-data } }
      ports: [{ protocol: TCP, port: 5432 }]
    # DNS + cluster Service mesh control plane
    - ports:
        - { protocol: UDP, port: 53 }

       Name        |   Owner
-------------------+-----------
 public            | feder8d
 tenant_acme       | tenant_acme          # dedicated role
 tenant_globex     | tenant_globex
 tenant_sudosky    | tenant_sudosky

# Each tenant's role can ONLY see their own schema.
# RLS is enforced as belt-and-braces, but the schema
# boundary alone makes cross-tenant reads impossible.

CREATE ROLE tenant_acme NOINHERIT LOGIN PASSWORD '...';
GRANT USAGE ON SCHEMA tenant_acme TO tenant_acme;
REVOKE ALL ON SCHEMA public FROM tenant_acme;
ALTER ROLE tenant_acme SET search_path = tenant_acme;

# Dedicated On-Prem deployments are sales-led for v1 —
# these values are tuned together with your ops team.
mode: on_prem
billing:
  backend: license_only      # offline-signed license
  license_path: /etc/feder8d/license.jwt
identity:
  provider: internal         # email + password, argon2id; no SSO
secrets:
  backend: vault             # bundled HashiCorp Vault
object_store:
  backend: minio             # bundled, S3-compatible
model_plane:
  provider: self_hosted
  pool:
    small:  { model: qwen2.5-7b-instruct, vram_gb: 16 }
    medium: { model: mistral-small-24b,  vram_gb: 48 }
backups:
  target: s3://customer-controlled-bucket
  velero_schedule: "0 */4 * * *"
telemetry:
  egress_allowed: false        # air-gapped mode