01 / DECIDE
Architecture decision
Use browser-oriented realtime transport for direct media clients; use server-side transports when the server owns the media pipeline.
A server-authenticated session bootstrap lets the browser establish media transport without receiving the long-lived platform key. Map input, output, state, and side effects as one observable path before deciding which layer owns keep browser realtime credentials ephemeral.
02 / BUILD
Three-step implementation
- 01
Frame the contract
Write down the caller, data classification, success condition, timeout, cancellation, and ownership. Use browser-oriented realtime transport for direct media clients; use server-side transports when the server owns the media pipeline.
- 02
Build one narrow path
Implement one end-to-end path with request correlation, typed state, and reversible failure handling. A server-authenticated session bootstrap lets the browser establish media transport without receiving the long-lived platform key.
- 03
Prove the outcome
Turn acceptance into a repeatable fixture, contract test, or browser test. Browser automation proves the long-lived key never reaches source, network logs, storage, errors, or telemetry.
03 / BOUND
Production boundary
Ephemeral access still needs authenticated issuance, origin controls, rate limits, expiry, and revocation behavior.
04 / PROVE
Acceptance evidence
Browser automation proves the long-lived key never reaches source, network logs, storage, errors, or telemetry.
SOURCE / HTTP
Reproducible source probe
curl -fsSI 'https://developers.openai.com/api/docs/guides/realtime-conversations' | sed -n '1,5p'