Fix workflow credits

Before buying fix workflow credits

Fix workflow credits are useful only after WebRiskOps has report evidence, an eligible finding and a safe delivery mode. Buying credits before the report is ready can leave the account with capacity that cannot start a workflow yet. Use this page when a published report or Billing says Automated fix credit required, Automated fix credit exhausted or Fix Plan unavailable.

Confirm report eligibility

Follow the path `Reports → Published report → Automated fix workflow → Billing`.

1. Open /reports/{report} for the published report that contains the finding you want to fix. Result: the report page shows findings, quality gate status and the Automated fix workflow area.
2. Confirm the report is published and quality gates passed. Result: you do not spend fix workflow credits on a draft, blocked or incomplete report.
3. In Automated fix workflow, select an eligible finding. Result: the selected issue count and fix credit cost show what the workflow will reserve.
4. Read the plan and credit message beside the workflow action. Result: you know whether Fix Plan, Agency Plan, existing credits, safe access or ticket-only fallback is the next step.
5. If credits are required, open /billing while switched to the same account and read Credit balance for Automated Fix. Result: you can compare Avail, Res and Spent before checkout.
6. If no finding is eligible, do not buy credits yet; use report remediation guidance or Ticket-only fallback. Result: the next action matches report evidence instead of unused billing capacity.

Buy or top up fix workflow credits

Use Billing only after the report has an eligible fix path. Checkout can add fix workflow credits to the account, but the workflow still waits for provider confirmation before it can reserve a credit.

1. In Billing, scroll to Credit top-ups. Result: Fix workflow credit top-ups show credit quantity, price label, checkout state and the `/checkout/automated_fix_credits` route when a top-up is enabled.
2. Use included Fix Plan or Agency Plan credits first; choose a fix-credit top-up only after the plan allowance is exhausted. Result: the credit purchase matches the report work you intend to start.
3. Click Top up credits only when the chosen card is enabled. Result: authenticated checkout opens for the selected fix workflow credit top-up.
4. Finish provider checkout and return to Billing. Result: the ledger may still show the old balance while payment confirmation is pending.
5. Wait until Credit balance and Latest ledger show the fix workflow credit grant. Result: the report workflow can reserve a confirmed credit.

Use credits safely

Fix workflow credits start tracked remediation work; they do not grant unrestricted production access or bypass report quality gates.

• Fix Plan is the first subscription step that includes generated remediation tasks, retests and monthly fix credits.
• Agency Plan includes a smaller pooled fix-credit allowance for client-site delivery.
• Fix-credit top-up is secondary capacity after the plan allowance is exhausted.
• Avail is the automated-fix credit count that can be reserved by a new eligible workflow.
• Res is already held by an in-progress or pending workflow and cannot start another fix.
• Spent is completed ledger history and cannot be reused.
• Eligible findings can become fix tasks.
• Ticket-only fallback can export or describe work when connected access is unavailable.
• Review-only patches still require customer approval before pull request creation.
• Retests can be requested after the customer applies or approves the change path.
• Unsafe access, missing evidence or unsupported scope stops the workflow even when credits exist.

Continue remediation or resolve blockers

When the report is eligible and fix workflow credits are available, return to the published report and start the automated fix workflow. If the workflow cannot start, use the blocked state before buying more credits.

• Automated fix credit required means buy or top up eligible fix workflow credits, then wait for ledger confirmation.
• Automated fix credit exhausted means available credits are empty after reservations and spent entries.
• No eligible finding selected means return to the report and choose a supported finding.
• Connected access unavailable means use [Ticket-only fallback](/docs/remediation/ticket-only-fallback) or connect safe access.
• Payment confirmation pending means wait on [Billing](/billing) until the ledger updates.