zarinpal-analytics-backend/docs/decisions/0017-growth-coach-ai-boundary.md

ADR 0017: Keep growth-coach decisions deterministic

AvalAI may rank and explain actions and select only an allowlisted metric, direction, and action level. Go locks baselines, targets, periods, state transitions, completion, and difficulty proposals. AI cannot mutate product state. Provider storage is disabled and request memory is reconstructed from persisted merchant state. Profile text is untrusted prompt data. Raw payments, payer keys, and secrets are excluded.