The shared starting point every workspace sees under “Or start from” in their own agreement editor. Operators get a copy when they load it — editing here never rewrites an agreement anyone has already saved, and never touches a live contract.

1. Create the products. In the Whop dashboard make one product for Symphony with two pricing plans — Standard and Premium — each with a monthly and an annual price ($97/$67 and $147/$102 a month).
2. Point Whop's webhook at Symphony. Use this URL, and subscribe it to membership.went_valid, membership.went_invalid, membership.deleted, membership.expired and payment.succeeded — these five and no others, because they are exactly what the webhook acts on:
   https://whopwebhook-uif5hrej2a-uc.a.run.app Copy
   This is the same endpoint Supreme Society AI access already uses — one webhook serves both, and the plan map below is what keeps them apart.
3. Paste the plan IDs and checkout links into the fields below, then turn Billing live on. À-la-carte tools (the Do Not Rent list, AI, insurance) are separate Whop products with their own card further down — same webhook, same five events, different map.
4. Secrets are set from a terminal, never here. Symphony never displays or stores them:
   firebase functions:secrets:set WHOP_API_KEY
   WHOP_WEBHOOK_SECRET is already set. WHOP_API_KEY is optional — without it, Cancel and Sync on the operator's Billing page hand off to the Whop portal instead of acting directly.

While Billing live is off, every workspace sees the Early Access state and no prices at all. Turn it on only once the plan IDs and checkout links below are filled in — the plan map is what keeps a Symphony purchase from also granting Supreme Society AI access.

Tools sold one at a time, to an account rather than to a workspace — a Symphony operator who wants the Do Not Rent list buys just that, instead of climbing the membership tiers to reach it. Each row is its own Whop product. Paste the plan IDs and the checkout link: payment grants the access, the end of the subscription takes it back, and every change is written to the audit trail. A buyer with no Supreme Society account gets one created and emailed a set-password link.

Money arrived for a product that is in neither map above, so nothing was granted — deliberately, because guessing would give away whichever tool the guess landed on. Add the product's ID to the right row and the buyer's next event applies it; for a one-off, grant it by hand from the member's profile in the Supreme Society admin panel.

An operator at their allowance told us why they need another workspace. Grant it by raising their allowance, then mark the request done so the queue stays honest.

Somebody paid and the webhook could not tell which workspace for — two workspaces share the billing address, or the buyer used an address Symphony has never seen. Nothing is guessed; attach it by hand.