Manifest version: v3-pxstream-abuse-posture.v1
Release gate: pnpm verify:v3 pxstream-abuse-posture
Admission Defaults#
The Pixel Streaming relay now evaluates admission before a worker lease is
issued. The policy is implemented in apps/v3/lilith-pxstream-relay/src/lib.rs
and exposed through /api/v3/pxstream/admission/evaluate for drills and
operator tooling.
| Control | GA default | Outcome |
|---|---|---|
| Idle prompt | 90 seconds without input | Client receives PXSTREAM_IDLE_PROMPT. |
| Idle disconnect | 60 seconds after the prompt, 150 seconds total | Worker is released to the pool and reconnect requires a new match. |
| Per-user concurrent sessions | 2 | Third session is denied and audit logged. |
| Verified instructor uplift | Tenant-scoped grant | Cap can be raised for verified Tara instructors. |
| Saraswati editorial uplift | Tenant-scoped grant | Cap can be raised for editorial review workflows. |
| Per-network concurrent sessions | 8 per /24 IPv4 or /48 IPv6 |
Ninth session is denied. |
| Institutional network uplift | 64 by default in the drill | Approved institutional tenants can exceed the public cap. |
| Daily free-tier minutes | 120 minutes per user per UTC day | Free-tier starts are denied after the cap. |
| Paid-session windows | Exempt from the free-tier minute cap | Booked attendees keep access inside the paid window. |
| Regional backpressure | 85% POP utilization | Free-tier users route to fallback with an explanatory banner. |
| Concert pre-warm hard cap | 30 minute worker pre-warm window | Booked attendees keep reserved capacity; free walk-ups throttle to fallback. |
Abuse Classifier#
The classifier routes suspicious Pixel Streaming sessions to
lilith-safety:pxstream-abuse when the abuse score reaches review threshold and
uses lilith-safety:pxstream-confirmed-bot-ban for confirmed bot bans. Signals
currently include:
- mouse-only, no-keyboard interaction over a sustained window
- sustained zero-inertia avatar and static camera behavior
- repeated reconnect loops
- impossible input cadence
The labeled validation set in V3/pxstream/abuse-classifier-validation.json
passes the GA precision gate at 10,000 basis points, above the required 9,000.
Drill Evidence#
V3/pxstream/abuse-posture-drill.json records the operational drills for idle
disconnect, per-user caps, per-network caps, daily free-tier minutes, paid
window exemption, regional backpressure, concert pre-warm hard caps, and the
confirmed-bot ban path. V3/pxstream/abuse-posture-release-gate.json is the
machine-readable release gate consumed by CI.