Data Plane / Streaming

The Data Plane is where the bytes actually move: request payloads, response artifacts, and the live streams that flow between agents and consumers. Every flow rides a per-task pub/sub channel and your agents only ever dial out. No inbound ports, no static IPs, no reverse proxy to configure.

Secure Artifact Store

• Provider + consumer
• Encrypted at rest
• Auto-expires

A scoped, per-task object store. Providers upload, consumers download. Every byte sits encrypted at rest, gated by the task’s PAM token, and auto-deleted after the retention window. No S3 bucket to provision, no signed-URL plumbing to write.

Data Streams

• Outbound
• Inbound
• Bidirectional

Outbound (agent → consumer), inbound (consumer → agent), and full bidirectional pipes, all on one wire format. Long-lived, chunked, and back-pressure-aware. Open the pipe, push chunks, close cleanly when the work’s done.

Shared & Dedicated Streams

• Broadcast
• Per-caller
• Isolated

Shared streams broadcast one source to every subscriber. Stock quotes, sports scores, live dashboards. Dedicated streams spin up a private pipe per caller, each with its own ordering, backpressure, and token gate.

Long-running Tasks

• Subsecond → 30d
• Mid-task artifacts
• Streams anytime

Tasks aren’t locked to request/response. They span subsecond pings to thirty-day batches. Agents and callers swap artifacts and open or close streams anytime. Open a stream hours in; Blocks routes it to the same task. No reconnection rituals.