Define a matrix by data class:
For each class, approve purpose, legal basis, location, encryption, retention, deletion, export, access, training use and redaction. Pending: the requester did not supply corporate policies or jurisdictions; this document therefore sets no retention periods.
Traces: one trace per turn with spans for capture, relay, STT, endpointing, LLM, policy, MCP, TTS, network and playout. The future RC proposes standardized names for propagating W3C Trace Context in _meta, but this form remains a candidate until ratification 4. In the stable adapter, Vocero will propagate traceparent through compatible internal metadata without requiring future domain changes.
Experience metrics
turn_endpointing_ms: acoustic endpoint to turn commit.stt_partial_ms and stt_final_ms.llm_ttft_ms: commit to first token.tts_ttfa_ms: available text to first audio.ttfs_ms: end of speech to first playable sound.barge_in_stop_ms: interruption detection to effective silence.tool_latency_ms by tool and outcome.turn_e2e_ms by direct or tool-assisted path.TTFT and end-to-end latency are recognized as distinct, relevant dimensions for voice/realtime workloads 9.
Quality metrics
Resource metrics
-[REC/BENCH] These values are provisional engineering targets, not measured figures, guarantees or a contractual SLO. They must be ratified after benchmarking with real audio, networks, tools and concurrency.
| Indicator | Proposed initial target | Window/percentile | Ratification condition |
|---|---|---|---|
| Conversational service availability | ≥ 99,5 % | Monthly | Exclude agreed windows and define the GPU dependency |
Response audio start ttfs_ms | ≤ 1,200 ms | p95, direct turn | Target corporate network and warm session |
| Barge-in stopping | ≤ 300 ms | p95 | Measured through playout silence, not only ACK |
| Turns without platform errors | ≥ 99,0 % | Monthly | Separate dependency errors from invalid input |
| MCP read executions accepted by the gateway | ≥ 99,0 % | Monthly | Exclude policy rejections and downstream timeouts |
| Loss of accepted control events | 0 | Every window | Verified by sequence and ACK |
| Unauthorized voice use | 0 | Every window | Mandatory alert and audit |
Provisional budget for ttfs_ms for analysis, not a commitment:
endpointing + STT final + scheduling + LLM TTFT + TTS primer audio + transporte/playoutNo fixed milliseconds are allocated per stage before benchmarking; the dashboard must show contributions and percentiles separately.
+| Indicator | Proposed initial target | Window/percentile | Ratification condition |
|---|---|---|---|
| Conversational service availability | ≥ 99.5 % | Monthly | Exclude agreed windows and define the GPU dependency |
Response audio start ttfs_ms | ≤ 1,200 ms | p95, direct turn | Target corporate network and warm session |
| Barge-in stopping | ≤ 300 ms | p95 | Measured through playout silence, not only ACK |
| Turns without platform errors | ≥ 99.0 % | Monthly | Separate dependency errors from invalid input |
| MCP read executions accepted by the gateway | ≥ 99.0 % | Monthly | Exclude policy rejections and downstream timeouts |
| Loss of accepted control events | 0 | Every window | Verified by sequence and ACK |
| Unauthorized voice use | 0 | Every window | Mandatory alert and audit |
Provisional budget for ttfs_ms for analysis, not a commitment:
endpointing + STT final + scheduling + LLM TTFT + TTS first audio + transport/playoutNo fixed milliseconds are allocated per stage before benchmarking; the dashboard must show contributions and percentiles separately.
generation.cancel and the last emitted chunk.[REC] Each link publishes high_watermark, low_watermark and an overflow policy. The LLM can produce text faster than TTS or the network can consume it; the system must throttle tokens, group pronounceable units and limit buffered audio. Realtime pipelines document the general problem of fast producers and slow consumers 10.
Policies:
buffered_ms and playout; the server adjusts chunking or pauses.