Expand description
Shadow-spend ledger (ADR 0009 D2).
Shadow scoring makes real model calls to answer “what would Firstpass have served, and what would it have cost?” for traffic that is only being observed. That is the number an operator needs before flipping to enforce, and it is not free.
So the ceiling is not advisory. This ledger is checked before every shadow evaluation and debited after it, and when a day’s budget is exhausted shadow work stops and says so — a measurement that silently degrades is worse than one that never ran, because the operator keeps trusting a projection that has quietly stopped tracking their traffic.
Scoped per (tenant, route) so one tenant’s shadow spend cannot consume another’s budget, which matters the moment this runs anywhere multi-tenant (ADR 0004).
Structs§
- Shadow
Ledger - Per-(tenant, route) shadow spend for the current UTC day.
Enums§
- Skip
- Why a shadow evaluation did not run. Recorded rather than swallowed.