geth/docs/adr/0013-pipe-and-pubsub.md

ADR 0013: Pipe And Pubsub

Status

Accepted.

Decision

Pipe resources will use authorized Iroh streams for stdin/stdout-style byte streams and forwarding. Pubsub will use lossy gossip for wakeups, presence, status, and ephemeral notifications.

Pubsub is not authoritative storage. Important facts must live in durable resources such as kv, document, db, CAS manifests, or future auth logs. The prototype uses the geth control ALPN as an authorization preflight before a daemon joins or broadcasts on a deterministic native iroh-gossip topic.

Consequences

The modules can support ad hoc workflow and presence without confusing gossip with durable state. Gossip delivery is best-effort. Consumers must tolerate missed, duplicated, and out-of-order notifications and use durable resources for reconciliation.