Routing Policy¶
Deterministic rules for choosing the execution runtime once a project has a Go decision.
Inputs¶
- Data classification (
private_sensitive/internal/low_sensitive). - Estimated runtime duration.
- Custom hardware/network dependencies.
- First-pass confidence (post-handoff feedback).
- Cost budget (optional).
Rules (apply in order; first match wins)¶
- R-1: Privacy hard floor. If
data_classification == private_sensitive, allowed runtimes arelocalorhome-labonly. Cloud is denied. - R-2: Custom hardware/network. If the work requires custom infra (LAN-only services, GPU profiles, hardware in the lab), prefer
home-lab. - R-3: Cloud-eligible long jobs. If
data_classification != private_sensitiveAND estimated runtime > 30 minutes AND no custom hardware, prefercloud. - R-4: Default short. Otherwise prefer
local. - R-5: Confidence override. After first pass, if confidence < threshold (default 0.6), route to
localwith human-assisted execution regardless of prior choice.
Allowed-runtime matrix¶
| data_class | local | home-lab | cloud |
|---|---|---|---|
private_sensitive |
yes | yes | no |
internal |
yes | yes | yes (with audit) |
low_sensitive |
yes | yes | yes |
Documentation requirements¶
The packet's "Execution routing rationale" section must record:
- Selected runtime.
- Which rule(s) matched.
- Alternatives considered and why rejected.
Re-routing¶
A run may be re-routed mid-flight only if:
- A new constraint appears (e.g., the job tries to fetch data that turned out to be
private_sensitive). - The original runtime fails repeatedly (R-5).
Re-routing is logged and counted against rework metric.