Architecture decisions
ADR 0009: Buffered evaluation before streaming enforcement
- Status: Accepted
- Date: 2026-10-03
Context
Streaming introduces chunk-spanning entities, incremental Unicode decoding, bounded buffering, partial disclosure, tool-call withholding, cancellation, and SSE reconstruction. A nominal streaming endpoint without those guarantees can be easier to bypass than buffered evaluation.
Decision
V1 evaluates complete buffered events. Streaming is a later protocol and threat- model milestone, not an optimization of the same implementation.
Consequences
- Initial correctness and conformance are tractable.
- Latency and payload limits must be explicit for buffered traffic.
- No documentation may imply that chunked traffic is protected until the advanced enforcement phase passes cross-chunk and partial-disclosure tests.