Your hires
What you have authorised, and what is left of it.
Every hire carries the bounds you set, the headroom remaining, and a decision trace that cannot be edited after the fact. Revoke is available from any live state.
No hires yet.
Hires are stored in Postgres: they survive restarts, and the bounds you set stay enforceable until they expire or you revoke them.