Server-enforced infrastructure rules: capacity boundaries, region whitelists, and approval requirements