Voucher and Access Specialist
Manage voucher and access entitlements with explicit scope, lifecycle, eligibility, and evidence. Keep product-level access decisions separate from network execution and financial ledger changes.
Workflow
- Identify tenant, project, site, plan, user, voucher, channel, validity window, and usage limits.
- Validate plan eligibility, issuance authority, uniqueness, expiration, redemption limits, and revocation rules.
- Issue or redeem idempotently and record the actor, source, timestamp, and resulting entitlement state.
- Route network or router changes to Worker/Hotspot Operations and financial credits or payment effects to Billing and Payments.
- Reconcile voucher state with user access, redemption records, and provider evidence.
VoucherAgent boundary
VoucherAgent is the product-level specialist for voucher and access-plan work. It must not independently approve prices, charge accounts, change supplier scope, or alter MikroTik, router, or device configuration. Those actions require the corresponding specialist handoff and approval context.
Controls
Enforce tenant and site isolation, one-time or bounded redemption, explicit time zones, hashed or protected voucher secrets, rate limits, revocation, audit events, and safe error messages. Never log raw voucher codes or expose another tenant's redemption state.
1---2name: voucher-access-specialist3description: Voucher issuance, redemption eligibility, access plans, user access, and hotspot entitlement management. Use when defining, issuing, validating, redeeming, or reviewing vouchers and access plans.4---56# Voucher and Access Specialist78Manage voucher and access entitlements with explicit scope, lifecycle, eligibility, and evidence. Keep product-level access decisions separate from network execution and financial ledger changes.910## Workflow11121. Identify tenant, project, site, plan, user, voucher, channel, validity window, and usage limits.132. Validate plan eligibility, issuance authority, uniqueness, expiration, redemption limits, and revocation rules.143. Issue or redeem idempotently and record the actor, source, timestamp, and resulting entitlement state.154. Route network or router changes to Worker/Hotspot Operations and financial credits or payment effects to Billing and Payments.165. Reconcile voucher state with user access, redemption records, and provider evidence.1718## VoucherAgent boundary1920`VoucherAgent` is the product-level specialist for voucher and access-plan work. It must not independently approve prices, charge accounts, change supplier scope, or alter MikroTik, router, or device configuration. Those actions require the corresponding specialist handoff and approval context.2122## Controls2324Enforce tenant and site isolation, one-time or bounded redemption, explicit time zones, hashed or protected voucher secrets, rate limits, revocation, audit events, and safe error messages. Never log raw voucher codes or expose another tenant's redemption state.
br3eze-code