docs: define SaaS capacity controls

2026-07-10 12:07:08 +08:00
parent 16329df357
commit 4ca4afb141
27 changed files with 618 additions and 47 deletions
@@ -158,9 +158,12 @@ as it upholds `AgentFileOp.Authorized`.
  *effects* are then confined, is a policy choice left to implementation. The
  invariant governs effects either way; current choice is arbitrary commands
  (sandbox confines effects).
- **Per-user rate limiting and token budgets.** Orthogonal to the surface
-  boundary (this ADR is about *what* the agent may touch, not *how often* it
-  may run). Deferred to a separate concern.
- **Inbound file size / MIME limits.** The inbox lives inside the boundary,
-  but unbounded file size is a DoS vector distinct from the boundary
-  invariant. Deferred.
+
+## Related Decisions
+
+- **Rate limiting and token usage.** ADR-0022 requires multi-dimensional hard
+  request limits while keeping token thresholds as attributed soft alerts in
+  the initial release.
+- **Inbound file limits.** ADR-0022 requires hard file, attachment, archive,
+  Project-storage, and Organization-storage limits with explicit failure and
+  partial-file cleanup.