PM patryk malinowski
Multimedia understanding, and the unglamorous layer underneath it: the part that has to survive a closed tab, a paused Space and a user who refreshes mid-answer.
Not the model choices. These.
A model turn takes minutes and a browser can close at any second. Runs are driven from the Worker and written to the database as they complete, so the stream is lost but the answer is not.
Quota used to be charged on the attempt. A paused Space could burn a user's whole daily allowance on error messages. It now moves when a model delivers, and where a token must be minted first, the use is refunded, guarded by the token id.
The Space is public, so anyone with the URL could use the model. Every use mints a short-lived HMAC token, and page access is checked at the edge rather than by a redirect the browser can ignore.
Two tabs on one account should not quietly spend the same budget twice. A claim plus a heartbeat, newest wins, and the loser is told rather than left guessing.