Use account entitlements

Before you start

Create the project first. Billing sells account-level coverage: scan credits, fix credits, monitoring subscriptions and agency allowances. The project page connects that coverage to one project service at a time. Use the public pricing page only to compare outcomes. Use authenticated Billing to see what this account can use now, then return to the project page to enable Activation scan, Monitoring, Fix workflow or Agency delivery. Billing may still say `Project setup comes first`, `Scope acceptance required`, `Domain authorization required`, `Account entitlement required` or `Payment confirmation pending`; those protected steps stay explicit instead of being skipped by shortcuts.

Use account coverage

Follow the path `Dashboard → Shortcut paths → Buy or review credits → Billing → Account entitlements → Project services`. The first scan should not require a sales call. The app should show a concrete automated state: buy now, wait for provider confirmation, accept scope, verify the domain, enable the project service, choose another plan or top-up, or stop because the requested scope is unsupported.

1. Open `/projects` or `/dashboard` and create the project before buying. Result: Billing and project services can point to the exact domain that will use the account coverage.
2. Open /pricing if you need to compare public plan limits before signing in. Result: the pricing page explains Free Snapshot, Scan Plan, Monitor Plan, Fix Plan and Agency Plan without changing the project.
3. Choose Scan Plan when one project needs recurring scan evidence, Monitor Plan when weekly checks and alerts are needed, Fix Plan when eligible findings need generated remediation, or Agency Plan for client-site delivery. Result: the account gets coverage sized for the project result you expect.
4. Sign in, open `/dashboard` and choose Buy or review credits, or open `/billing` directly. Result: Billing shows account entitlements, credit balances, provider state and which projects currently depend on those entitlements.
5. If checkout is enabled, start checkout and wait for provider return or webhook confirmation. Result: scan credits, fix credits, monitoring coverage or agency allowance become visible at the account level.
6. Return to the project page and read Project services. Result: you see whether Activation scan, Monitoring, Fix workflow or Agency delivery is available, enabled, paused or blocked for this project.
7. Enable only the service you need now. Result: account coverage is connected to the project without blindly enabling every paid service.

Continue to project services

After account coverage is clear, use the project page's Project services area. The service choice belongs to the project, not to Billing. Payment state alone does not approve extra pages, private areas or a different domain.

Blocked states

• Scope acceptance required means the project service cannot run until the project scope, assumptions, exclusions and legal-boundary disclaimer are accepted.
• Domain authorization required means the project needs verified ownership proof before private scan delivery can use the account entitlement.
• Account entitlement required means no eligible plan, subscription, allowance or credit balance is available yet. Choose an available Billing plan or use the public pricing page to compare limits first.
• Payment confirmation pending means checkout started but the provider webhook has not confirmed access. Wait for Billing to update before starting the scan.
• Credits exhausted means the plan exists but has no available scan credits for this run. Buy a supported top-up, upgrade the plan or wait for the allowance to renew.
• Project service blocked means the account may have coverage, but this project still needs setup, accepted scope, verified domain, baseline report, eligible finding or client assignment.
• Agency allowance owned elsewhere means the client project may depend on an agency billing account. Switch to the correct account before scanning.