Every user gets their own Dynamo core - a dedicated instance we run for you. You install only the open client on your machine and point it at your instance. Your prompts and payloads never leave your machine: the instance sees metering facts only (stream ids, unit counts, amounts).
Launch instances run Control Mode: real enforcement - hard caps, per-second rate envelopes, instant revocation, signed vouchers, a fail-closed halt - with no money anywhere. Money rails exist in the protocol and are switched off at launch; they are enabled per instance when you need them, never by default.