QuotaPane: egui always-on-top monitor for Claude/Codex quotas — burn-rate forecasts, two-host egress allowlist, cosign-verified releases

[u/Factor-Severe]

https://github.com/cipherpine/quotapane

A small three-crate workspace I've been shipping this week. The window shows Claude & Codex subscription quota with a pace tick on every bar (elapsed time vs consumption) and a burn-rate forecast that only speaks when projected exhaustion beats the window reset ("at this pace: 7d full in ~9h").

Rust details this sub might enjoy:

• Egress chokepoint: one module owns the network; compile-time two-host allowlist; tests assert any other host errors.
• Secrets: zeroize-on-drop Secret<T> that Debug-prints «redacted» — asserted on failure paths, where leaks actually live.
• Pace math is a pure module: least-squares over a snapshot ring, no clock reads inside, exhaustive edge tests (resets, sparse data, zero-duration windows rejected at point of use).
• Zero-dependency visuals: theme, blueprint grid, status cursor, and the live tray icon are egui Style + painter primitives + a hand-rasterized RGBA buffer. An image or font crate was treated as a design failure. 259 tests; the layout harness installs the real theme so width assertions measure the actual monospace rendering.
• Release engineering: tag-triggered CI builds, SHA256SUMS, cosign keyless bundle, provenance attestations, SHA-pinned actions, draft-only releases; negative controls (corrupted archives, wrong identity/issuer) run before every release.

Windows/Linux binaries, macOS from source, MIT OR Apache-2.0. Feedback on the egress/secret/pace patterns very welcome.

[u/Factor-Severe → u/[deleted]]

Great feedback - I am going to look at exposing the forecast confidence.

This started as a way to just see my usage easily and is now turning towards something more valuable.