feat(ai): enforce local-first routing

Keep external providers behind server consent, task, and prompt-cost gates while persisting actual provider provenance.
2026-08-09 12:30:11 +02:00
parent c3f4a57195
commit 5eb9b3cb96
29 changed files with 967 additions and 145 deletions
@@ -24,8 +24,7 @@ Status: `IMPLEMENTED — NOT VERIFIED`.
 ## Remaining gates

 - AI-003/004 must register real Strategy/CV handlers and return actual 202 responses; no generic create API was exposed because it would bypass task ownership/policy.
- AI-002 must add provider/model concurrency, circuit health, provider/reason/model recording, payload minimization and external fallback decisions.
+- AI-002 added sequential local-first routing, single-model circuit health, provider/reason/model recording and task/prompt fallback gates. AI-003/004 still own producer-specific payload minimization and accounting.
 - Browser refresh/double-click/cancel/retry must be repeated against each real producer.
 - Worker remains off; MariaDB and production canary/restart/queue telemetry are unavailable.
 - The process-local capacity gate assumes one backend replica. Add a database reservation only before multi-replica rollout.
-