ADR-0015 — Capability-first serving gateway

Status: accepted (M5)

Projects call a central authenticated Gateway with a versioned capability. Concrete model/runtime selection is server-side. This preserves upgrade isolation, prevents public worker exposure and provides one QoS, audit and privacy boundary. No cloud or direct-worker fallback is allowed.