# Membership Auto-Renew — Phase 1

## Scope

Phase 1 establishes a reusable CHIP Card credential after a qualifying paid
Membership checkout. It does **not** schedule, create, retry, or collect any
recurring payment.

## Current contract

- Membership checkout is Card-only and requests a provider-confirmed Card
  method whitelist. Lead Credit checkout remains independent.
- A stable CHIP Client reference is maintained per user/provider profile.
- Auto-Renew is enabled only after a paid, fulfilled Membership purchase has a
  confirmed CHIP recurring token.
- If token confirmation is unavailable, the Membership remains active and
  Auto-Renew remains off.
- A member may turn Auto-Renew off without cancelling Membership or revoking
  the stored credential. Turning it on later requires a usable credential and
  does not initiate a charge.
- Provider client references and recurring tokens are encrypted at rest. Public
  Billing payloads expose only safe payment display metadata, when available.
- Approved, active VastPro users remain outside the Membership Auto-Renew flow.

## Deferred to Phase 2

- scheduled recurring charges;
- charge retry and grace-period policy;
- card replacement and customer card-removal workflow; and
- renewal-attempt lifecycle records.