Current truth
The current implementation target is:- Stripe-native machine payments for premium actions
- proof via
X-Stripe-Machine-Payment
Header shape
When machine payments apply
Machine payments are for premium actions, not every request. Examples:- AI generation
- premium webhook trigger paths
- higher-cost automation work
- other policy-gated premium surfaces
When they do not apply
Most normal operator automation should still use:X-API-Key- JWT/session auth where appropriate