AI Free-Trial Abuse Shield & Atomic Token Circuit-Breaker Production Codebase + 260-Row B2B Growth Master DB (Redis Lua + Node.js/Next.js Middleware)

One attacker using 9 Apple Private Relay (Hide My Email) accounts and a residential/datacenter proxy can farm $1,900+ in Flux/Replicate image generations or OpenAI/Anthropic tokens before standard post-response billing counters catch up.

Unlike simple rate-limit snippets, this production codebase kit + 260-row B2B dataset includes:

• src/lua/atomic-cost-circuit-breaker.lua: Atomic Redis / Upstash Lua script that reserves micro-dollar token budgets BEFORE the LLM/GPU stream begins, enforces a global hourly kill-switch, and blocks multi-account device/subnet farming in a single atomic round-trip.
• src/detectors/trial-abuse-detector.mjs: Canonicalizes Gmail dot/plus aliases, flags Apple Private Relay (privaterelay.appleid.com) & disposable domains, blocks high-risk cloud/VPN ASNs (DigitalOcean, AWS, Hetzner, M247), verifies domain MX records, and hashes WebGL + /24 subnet hardware fingerprints.
• src/middleware/ai-circuit-breaker.mjs & simulate-apple-id-attack.mjs: Drop-in middleware + executable 9-account attack simulator.
• BONUS data/2026-b2b-growth-affiliates-newsletters-and-icp-master-260-rows.csv & .json: 260 verified launch directories, high-ticket recurring affiliate programs (20%-50% revshare), tech newsletters, and outbound ICP playbooks.