Programmable Messaging API · View 07 of 22 · Structure
Decisions
- Admission sits above ownership so that a refusal costs nothing and an acceptance costs a durable write — the cheap answer is always the fast one.
- Consent and compliance is the one evaluation on the submit path that fails closed; everything below it degrades instead.
- Ingest is drawn as its own upward layer because its load is unrelated to submit load and three times its volume.
Assumptions
- Control-plane reads are served from caches with a bounded staleness ceiling; past it, compliance fails closed.
- 25,000 receipts/second steady against 8,000 accepted messages/second: one message produces several facts.
Deliberate omissions
- Edges between every layer pair: only the ones that constrain the design are drawn.
