How the fare is prevented from moving
There is one pricing function in the codebase. The website calls it, the build tests call it, and the connector that answers Claude and Perplexity calls it. There is no second implementation to drift.
A published fare that ever exceeded the formula would make the receipt read as a surcharge, so the build refuses to ship one. Every route is checked on every deploy.
Audited on every deploy