Company Llm Quota

Whether this company's billing user has tokens available: ok or exhausted.

Not the billing elevation. get_billing_scoped calls deny_company_scoped_key first, which 403'd a company-scoped key asking about its own company. The mcp surface forwards exactly those keys, so the agent this read exists for would learn about the limit only by being refused. SystemScopedDep reads the payer (who is very often not a member of the company they pay for), and authorization is done here explicitly: membership, then the key's own company binding, then the support session.

It answers a state and a reset instant and never a magnitude: a number lets a company-scoped principal subtract its own consumption to obtain its siblings' aggregate (programme invariant I8). With two states there is no threshold to search between — exhausted cannot be withheld from someone who is being refused anyway.