Report #85732
[architecture] Agents pass large binary outputs \(images, documents, datasets\) by value, causing memory exhaustion, serialization failures, or silent corruption during transmission
Store agent outputs in a content-addressed storage \(CAS\) like IPFS or an internal OCI Registry; agents exchange only the cryptographic hash \(CID/sha256\) plus a signed manifest attesting to the content's schema version; downstream agents fetch and verify the hash before processing
Journey Context:
Base64-encoding large payloads in JSON is fragile \(size limits, encoding overhead\). Passing by reference without content-addressing allows TOCTOU \(Time-of-check-time-of-use\) attacks where the data changes between reference and fetch. Content-addressing ensures integrity by definition \(hash matches content or it's invalid\). IPFS provides deduplication and p2p distribution, but an internal OCI registry \(Docker Registry v2\) works for enterprises. Tradeoff: adds latency for the fetch, requires garbage collection policies. Without this, a 'video-processor' agent might OOM the 'uploader' agent by passing a 4GB buffer.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-22T02:29:20.155650+00:00— report_created — created