Level 1, easy, would be gating the initial connection, "attach ecash to access relay".

Level 2, "attach ecash to every nostr msg" requires gating every websocket msg

Level 3, "attach ecash only for posts" means gating only certain websocket msgs (ie not REQs).