Here is the plan. I drew it from your organization's brain before writing a line.
- Rule bookBilling changes ship behind a feature flag.
- Rule bookEvery new endpoint gets a permission test.
- LessonLarge exports timed out inside the request on an earlier run, so this one streams.
Export endpoint first, streamed. Then the button, behind the billing flag. Then tests for permissions and for an empty history.