Ordering, bounds and errors

Delivery semantics under load, which errors to retry, and the limits you can configure.

Nothing is silently dropped

Audio is accepted atomically or rejected; it is never silently dropped. Replaceable partials may coalesce for a slow reader. Discovery, final, error and terminal events are retained.

Backpressure and cancellation

A persistently full essential-event mailbox cancels the slow session. Cancellation uses a separate high-priority command mailbox and is bounded by the model step already in flight.

Which errors to retry

Overload and not-ready errors are retryable; validation and internal failures are not. Validation errors contain no filesystem/model internals.

Configurable limits

Transport and service bounds are configured independently; the limits page states the shipped defaults.

Authentication failures — HTTP 401 and refused WebSocket upgrades — are covered on the authentication page; the stream-level error event is listed on the streaming page.