docs(adr): accepted SHA-256, Whisper, and TMK/VAD decisions

[seonghobae]

Draft only. Do not merge. Do not mark Ready.

Scope

• Branched from current default main (a8e4956). Not stacked on fix(ui): overlay landmarks and click-or-drag copy on drop zones #428, Switch OpenCode to NVIDIA NIM only #431, chore(deps-dev): bump coverage from 7.15.3 to 7.15.4 #408, fix(fuzz): align the Atheris lock with Python 3.14 #331, fix(media): tolerate non-UTF-8 ffmpeg and ffprobe metadata #317, 🎨 Palette: 필수 입력 필드 초기화 시 유효성 검사 접근성 피드백 유지 #455, ⚡ Bolt: [성능 개선] 검색 성능 향상: 불필요한 Set 복사 제거 및 루프 최적화 #453, or any other open feat/UI/deps PR.
• Documentation only. No product-code, Rust, Python, or test-harness changes. No customer README rewrite (one-line pointer because README already links docs/architecture/).
• Records decisions already true on main. Does not invent product behavior.

Files

• docs/adr/README.md — index; architecture notes become non-normative supporting detail once the ADR is the decision record
• docs/adr/0001-sha256-content-identity.md — full SHA-256 identity; exact duplicates and transcripts keyed by full content hash; unverified placeholders cannot authorize groups or mutations
• docs/adr/0002-pinned-whisper-gpu-transcription.md — pinned MLX/CUDA Whisper revisions; never Ollama; never silent CPU fallback; overlap + timestamp ownership
• docs/adr/0003-tmk-vad-fixed-duration-precedence.md — TMK → chapter/marker → VAD/silence → bounded fixed-duration; five-minute cuts are resource limits; late TMK promote-or-reprocess; quality-gate citations only
• One-line ADR pointers in the two architecture notes; Unreleased CHANGELOG line

Verified locators (re-fetched live 2026-08-25)

Source	Locator	Live-check result
Radford et al. (2022), Robust speech recognition via large-scale weak supervision	https://arxiv.org/abs/2212.04356	HTTP 200. MATCH. Authors Alec Radford, Jong Wook Kim, Tao Xu, Greg Brockman, Christine McLeavey, Ilya Sutskever. Repo PDF docs/papers/2212.04356-whisper.pdf is a supporting copy only.
National Institute of Standards and Technology. (2015). Secure Hash Standard (SHS) (FIPS PUB 180-4)	https://doi.org/10.6028/NIST.FIPS.180-4	HTTP 200 → NIST PDF. MATCH. GET of https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf is HTTP 200 application/pdf 833315 bytes (HEAD of that URL 404’d; GET is live). Figure 1: SHA-256 digest 256 bits, block 512 bits. Repo copy docs/standards/NIST.FIPS.180-4.pdf is a supporting copy only.
Yan et al. (2024), IWSLT 2024, pp. 164–169	https://doi.org/10.18653/v1/2024.iwslt-1.22 · https://aclanthology.org/2024.iwslt-1.22/	DOI 302 → ACL HTTP 200. MATCH. Authors Brian Yan, Patrick Fernandes, Jinchuan Tian, Siqi Ouyang, William Chen, Karen Livescu, Lei Li, Graham Neubig, Shinji Watanabe. Cited only for the quality-gate hallucination-risk claim already in the architecture note.
Bondarenko et al. (2025), NAACL Industry, pp. 988–997	https://doi.org/10.18653/v1/2025.naacl-industry.74 · https://aclanthology.org/2025.naacl-industry.74/	DOI 302 → ACL HTTP 200. MATCH. Authors Ivan Bondarenko, Daniil Grebenkin, Oleg Sedukhin, Mikhail Klementev, Roman Derunets, Lyudmila Budneva. Cited only for the quality-gate false-positive-filtering claim already in the architecture note.

No required locator was dropped. Not cited: RFC 4122, Gemma model cards, MLX GitHub, fuzzing survey, draft W3C, cancelled scans. MOSS is named only as an implementation pin, not a paper.

Do not merge. Do not mark Ready.

  

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}