Runs on your agent's plan// @flows <source> -> <target> [via <mechanism>]Documents data moving from one component to another, and what carries it.@flows in the GuardLink reference bravos -> your coding agent-- "Runs on your agent's plan"
How much of your AI plan Bravos uses
Bravos runs inside the coding agent you already use and calls no AI model of its own, so its work counts against that agent's plan like the rest of your coding, and Bugb charges nothing per run. Pick your provider, plan and model to see how much of the plan's limit each part takes, and where each number comes from.
Plan usage
Anthropic Max · weekly limit
First threat model, once6% of a week
500 files, on your plan. A big one runs across several sessions.
Each pentest run2% of a week
Up to 8 findings, on your plan.
A typical week after that2% of a week
1 pentest run a week. Annotating new code adds about 1% to your coding sessions.
Replaying approved tests0%
No AI use, at any level.
Measured Our own Max plan's weekly meter read 85% after 3.2B tokens recorded that week. Claude plans
This is your plan's own usage, the same meter your coding uses. Bugb adds nothing per run.
How we work it out
The work comes from Bravos run end to end on Temporal, an open-source workflow engine written in Go with 1,715 source files, in Claude Code on our Claude Max plan over about 40 hours. We added up the tokens and model calls the agent recorded for each of its 3,955 replies, and apply the same work to every provider at its own rates.
Tokens and plan usage measured on Temporal
Stage
Model
Model calls
Tokens
Of a Claude Max week
Threat model: 1,618 files annotated
Claude Opus 5.5
3,521
544M
18%
Pentest: 10 findings tested
Claude Opus 4.8
219
79M
5%
Code graph and setup
Claude Opus 5.5
215
32M
1%
Whole run
3,955
655M
24%
Threat model and pentest
The annotation campaign wrote 6,564 annotations across 1,618 files, plus test templates for what it found: about 336K tokens and 2.2 model calls per file, 97% of the tokens re-read from the agent's cache. The pentest session tested 10 findings (9 confirmed): about 7.9M tokens per finding. A saved test you replay later uses no AI.
Annotating as you code
In that same session the agent changed code, and Bravos sent it back 3 times to annotate what it had changed. Those replies took 0.7% of the session, because the code was already in the agent's context. One session is a small sample, so read it as an order of magnitude.
From work to a plan's limit
Each bar is the work weighed at the provider's own rates, divided by the plan's allowance. Every bar says where its allowance comes from:
Measured: our Claude Max weekly meter read 85% after 3.2B tokens that week. Use from other devices was not in our records, so it errs high.
Published limit: the provider publishes the allowance and how usage counts against it.
Scaled: the provider publishes a multiple of another plan, such as 5x Pro.
Estimate: the provider publishes no size, so we assume the same allowance per dollar as our measured Claude Max. We replace these as we measure each plan.
Checked 9 November 2026 on each provider's own pages. Plans and limits change; tell us at contact if one is out of date. See what a pentest uses for what each level does.