Model calls

Facts

A definition names the facts it relies on. It never asserts them and never infers them: each value comes from the participant that is entitled to assert it.

• providerrequired
• modelrequired
• requested_token_ceilingoptional
• context_classificationoptional
• reservation_idoptional

Enforcement paths

Every path on which the consequence can occur is either enforced or a named bypass. There is no third category, and coverage is reported as counts — never a percentage.

0/2 enforced paths observed · 2 named bypasses

Enforced

• sdk-adapter

  Governed provider adapter in the calling process: the decision is made before the HTTP request is constructed.

• local-gateway

  Loopback gateway used by processes that cannot load the adapter; the decision is made before the connection to the provider is opened.

Named bypasses

• direct-provider-sdk

  A process that calls a provider SDK directly with its own credentials, bypassing both the adapter and the gateway. Aarmos observes nothing on this path.

• on-device-inference

  A model running in-process with no network egress. There is no transmission boundary for Aarmos to intercept.

Evidence

Evidence for this action is projected under a 4096-byte budget. Attribution — who asserted a fact — is never truncated; only the listed payload facts can be shortened under budget pressure.

provider · model · requested_token_ceiling · context_classification