This commit is contained in:
@@ -18,18 +18,19 @@ the remaining budget.
|
||||
- **THEN** the endpoint returns a structured failure without invoking the
|
||||
configured provider
|
||||
|
||||
### Requirement: Planner proxy settles provider-reported token usage without persisting prompts
|
||||
### Requirement: Planner proxy settles provider-reported token usage without duplicating planner decision content
|
||||
The Cloud planner-decision endpoint SHALL settle its reservation to the
|
||||
provider-reported token usage when available and SHALL retain only non-secret
|
||||
metering metadata, never the raw prompt, screenshot, provider credentials, or
|
||||
session/lease secret.
|
||||
metering metadata in its usage event, never raw prompt text, screenshot bytes,
|
||||
provider credentials, or session/lease secrets. This does not constrain the
|
||||
separate bounded planner-decision history defined by `cloud-planner-proxy`.
|
||||
|
||||
#### Scenario: Provider response includes usage
|
||||
- **WHEN** the configured provider returns a valid tool-call decision and
|
||||
token-usage metadata
|
||||
- **THEN** the endpoint records and returns the decision, settles the Host's
|
||||
reservation to the reported usage, and does not durably store request text
|
||||
or screenshot bytes
|
||||
reservation to the reported usage, and records a usage event without request
|
||||
text or screenshot bytes
|
||||
|
||||
#### Scenario: Usage is indeterminate after failure
|
||||
- **WHEN** a reservation exists but the endpoint cannot determine provider
|
||||
|
||||
Reference in New Issue
Block a user