WHISTLEGRAPH_WORKER_SECRET (x-ac-worker, timing-safe) plus x-ac-owner stands in for the owner's bearer token; handle lookup, the free allowance, the paid hold and settlement then run exactly as if the phone had called. No secret configured means no worker path.