Overview
Edge rules — cache, drop, redirect, rewrite, header, web optimization, WAF, captcha, basic auth, rate limit, bot routing, origin pools and routes, fingerprinting and error pages. Every type has the same seven operations: list, create, reorder, get, update, delete and toggle.
Reading rules needs domain.view, every write rules.edit; a caller
without them gets 404, never 403. Every change is pushed to the edge
as soon as it is saved.
Plans. A domain with no active plan cannot create rules (402), and
the plan caps how many rules of each type a domain may hold
(max_rules_per_set, 403). A rule type the plan does not include is
not refused: the rule is created and can be edited, but it is saved
switched off, and switching it on is refused with 402 until the plan
includes the type. When a plan lapses to one without a type, the running
rules of that type are switched off, not deleted. Rules the platform
manages (managed_by) are exempt.