The Architecture Decision Records: decisions that are hard to reverse, why they were made, and the status of each.
| ADR | Decision | Status |
|---|
| 0001 | KDF fixed-input layout follows RFC 9946 Appendix A | Accepted |
| 0002 | Stop traffic after 1 s of silence, tear down the Test Connection at 3 s | Accepted |
| 0003 | Tokio runs the Control Phase; nothing precise runs on Tokio timers | Accepted |
| 0004 | Sending Rate Structure sizes are IPv4-based; IPv6 senders subtract 20 bytes | Accepted |
| 0005 | Congestion uses a back-to-back Errored Interval counter and a latched Congestion Confirmed state | Accepted |
| 0006 | Transport errors are classified on both receive and send, not suppressed | Accepted |
| 0007 | The Server learns each Setup Request’s arrival address through nix, or quinn-udp on Windows | Accepted |
| 0008 | The Data Phase Engine: a pool of Engine Threads on a Linux Server, one per Test Connection elsewhere, with bounded catch-up | Accepted |
| 0009 | authUnixTime is checked within ±5 s inclusive modulo 2^32, the first Setup Request is signed with the Client key, and digests cover the PDU as received | Accepted |
| 0010 | Key Table rows follow RFC 7210 with an HMAC-SHA-256 AlgID, lifetimes checked on our clock, and an Operator extension | Accepted |
| 0011 | Over-rate policing judges against the highest rate assigned in the last second | Accepted |
| 0012 | Catch-up is bounded by a time budget | Accepted |
| 0013 | udpstp’s stable interfaces from 0.1.0 | Accepted |
| 0014 | The Server runs as a Windows service of its own, under a virtual account, logging to daily files | Accepted |
| 0015 | Windows Shared Key files use a bounded private-file policy and a native inspection adapter | Accepted |