feat: Grok broker usage accounting, per-wake limits and public projection - #26

Open

apresmoi wants to merge 21 commits into

feat/grok-lean-brokerfrom

feat/grok-accounting-limits

Commits on Sep 17, 2026

feat: add engine-neutral wake limit env names with Codex aliases
apresmoi
committed
9957160
feat: record per-request timestamps, Grok stream usage and turn-keyed usage rows
apresmoi
committed
7e28542
feat: seal Grok broker usage in turn record v2, control protocol v2 and service config v2 with enforced turn limits
apresmoi
committed
2bd8ded
feat: pass wake limits and declared model to the Grok broker from the dispatcher
apresmoi
committed
65d0144
feat: accept closed-list Grok model and reasoning effort and pin the broker accounting contract in the manifest
apresmoi
committed
ae8dd17
feat: add the public Grok broker projection
apresmoi
committed
48e9b8b
feat: define the Grok slot preflight receipt schema with fixtures and export the broker contract
apresmoi
committed
b5be62c
docs: describe Grok broker limits, sealed accounting, projection and slot receipts
apresmoi
committed
55852f3
test: prove Grok per-request rows carry measured proxy intervals, not the append time
apresmoi
committed
50a9325
fix: count a killed turn's in-flight request in every Grok per-request row
apresmoi
committed
39deffa
test: keep Grok engine declaration tests in their own file under the line limit
apresmoi
committed
cb1971f
fix: allow one in-flight upstream request per Grok turn and abort it when a limit trips
apresmoi
committed
a77a6d4
fix: bound per-request Grok usage and charge an estimate when a response reports none
apresmoi
committed
8932725
fix: seal Grok turn ledger bytes in the turn record and complete an interrupted append on replay
apresmoi
committed
9e49e92
fix: never re-seal a completed Grok turn when metering after the seal fails
apresmoi
committed
f1f95f0
test: refuse a slot preflight receipt carrying a canary the projection does not deny
apresmoi
committed
c9dbf3c
feat: bind slot preflight receipts to the projected seccomp profile and bubblewrap runtime
apresmoi
committed
a5fd91b
docs: record the Grok in-flight gate, usage estimates, sealed ledger bytes and projection path contract
apresmoi
committed
3a1fac8
fix: treat a Grok turn record as sealed once renamed and report a failed directory sync instead of rejecting
apresmoi
committed
97784b4
test: prove concurrent replays of one Grok turn are counted once and require readers to dedupe on turn
apresmoi
committed
3ab4e4a
fix: charge the estimate when a Grok response's final usage block is invalid
apresmoi
committed
3174716

Navigation Menu

feat: Grok broker usage accounting, per-wake limits and public projection - #26

feat: Grok broker usage accounting, per-wake limits and public projection#26
apresmoi wants to merge 21 commits into
feat/grok-lean-brokerfrom
feat/grok-accounting-limits

Commits on Sep 17, 2026

feat: add engine-neutral wake limit env names with Codex aliases

feat: record per-request timestamps, Grok stream usage and turn-keyed usage rows

feat: seal Grok broker usage in turn record v2, control protocol v2 and service config v2 with enforced turn limits

feat: pass wake limits and declared model to the Grok broker from the dispatcher

feat: accept closed-list Grok model and reasoning effort and pin the broker accounting contract in the manifest

feat: add the public Grok broker projection

feat: define the Grok slot preflight receipt schema with fixtures and export the broker contract

docs: describe Grok broker limits, sealed accounting, projection and slot receipts

test: prove Grok per-request rows carry measured proxy intervals, not the append time

fix: count a killed turn's in-flight request in every Grok per-request row

test: keep Grok engine declaration tests in their own file under the line limit

fix: allow one in-flight upstream request per Grok turn and abort it when a limit trips

fix: bound per-request Grok usage and charge an estimate when a response reports none

fix: seal Grok turn ledger bytes in the turn record and complete an interrupted append on replay

fix: never re-seal a completed Grok turn when metering after the seal fails

test: refuse a slot preflight receipt carrying a canary the projection does not deny

feat: bind slot preflight receipts to the projected seccomp profile and bubblewrap runtime

docs: record the Grok in-flight gate, usage estimates, sealed ledger bytes and projection path contract

fix: treat a Grok turn record as sealed once renamed and report a failed directory sync instead of rejecting

test: prove concurrent replays of one Grok turn are counted once and require readers to dedupe on turn

fix: charge the estimate when a Grok response's final usage block is invalid