Audit harness usage

Treat every number as one of three different things:

1. Trace usage — tokens recorded by a local harness.
2. API-equivalent estimate — trace tokens multiplied by a versioned public rate card.
3. Metered or invoiced cost — what a provider says it actually deducted.

Never collapse those labels. A $500 API-equivalent estimate can coexist with a fixed-price subscription and a $0 incremental invoice.

Quick start

Run the deterministic scanner before interpreting anything: