Every page view runs the same nine steps under one correlation id — so any decision on the network can be replayed end to end. Four services own the loop; a handful of invariants keep it honest.
The page offers a slot; Relay classifies its topic, entities and brand safety — cached by content fingerprint.
Try it in Match Lab →Rights, geo and suspension filter the catalogue before ranking ever runs — never after. Within a 5s bound.
What survives is scored: a deterministic baseline, a learned layer, then a business-constraints clamp that can only lower a score.
The best fit serves only if it clears the relevance floor. Below it, nothing is served — a bad fit is never better than the house slate.
For the opportunity, the ad server runs an auction — targeting, brand safety, pacing, pricing model — or returns the house slate.
Try it in Ad Lab →A viewability-gated autoplay mounts real HLS: the pre-roll creative, then the matched video. Never a dead frame.
Revenue is recognised at the qualifying view — a validated impression or the view threshold, not ad start.
Gross splits at the agreement effective when the event occurred — each publisher and content owner on its own terms.
A period closes idempotently over the event ledger: re-closing returns the stored statement, never a double count.
See real traces →Organizations, effective-dated agreements, rights and kill switches, tenancy, publisher destinations and tag keys.
Page/context classification, candidate retrieval, the ranking layers, the NO_MATCH floor, anonymous visitor profiles.
CSAI direct and VAST ad decisions, targeting, pacing, frequency, pricing models, billable-event validation.
The idempotent event ledger, the funnel, event-time allocation, period reconciliation, and the correlation-id trace.
Rights and safety are enforced on the candidate set first. Ranking can reorder, never re-admit.
A later amendment never rewrites an earlier event. The split is the terms in force when it happened.
CPV is a validated view, not an ad start. The billable event is the settlement anchor.
A period close is keyed on recon:{period}:{version}. Re-running is a no-op; no impression double-counts.
Every read and write is scoped by organization on the backend. The client is never trusted for scope.
The whole world is reproducible from one seed — the same inputs always produce the same decision.