Model calls

Facts

A definition names the facts it relies on. It never asserts them and never infers them: each value comes from the participant that is entitled to assert it.

• providerrequired
• modelrequired
• requested_token_ceilingoptional
• context_classificationoptional
• reservation_idoptional

Enforcement paths

Every path on which the consequence can occur is enforced, named as a bypass capable of reaching the consequence without a Decision, or declared out of scope for this action. Coverage is reported as counts — never a percentage.

0/1 enforced paths observed · 2 named bypasses · 1 outside scope · 1 declared path not implemented

Enforced

• local-gateway

  Loopback gateway in front of the provider. The decision is made before the connection to the provider is opened, and the authorization is bound to a digest of the exact request bytes that will be sent.

Named bypasses

• tunnel-payload

  Traffic carried inside a CONNECT tunnel after the tunnel has been established. Establishment is governed; the bytes that follow are not observed and reach the provider without a per-request Decision.

• direct-provider-sdk

  A process that calls a provider SDK directly with its own credentials, bypassing both the adapter and the gateway. Aarmos observes nothing on this path.

Outside this action

• on-device-inference

  A model running in-process with no network egress. There is no transmission boundary, so this path is deliberately outside what this action governs.

Evidence

Evidence for this action is projected under a 4096-byte budget. Attribution — who asserted a fact — is never truncated; only the listed payload facts can be shortened under budget pressure.

provider · model · requested_token_ceiling · context_classification