ADR-015: streams depth — carried-metadata keys, global-FIFO ordering, StreamEvent, trim_to (OQ-12 resolved)

docs/architecture/decisions/006-wake-and-delivery-contract.md

@@ -59,7 +59,7 @@ coalesced-but-complete re-read on SQLite).
 | Mechanism | Durability | Replay | Atomicity | Guarantee |
 |---|---|---|---|---|
 | `notify` / listen | none | never | commit-atomic (delivers at commit; rollback drops) | fire-and-forget, at-most-once per listener session |
-| streams | durable table row | yes, per-consumer offset, replay-on-attach default | publish is commit-atomic | every committed event readable by every consumer that hasn't passed its offset |
+| streams | durable table row | yes, per-consumer offset, replay-on-attach default | publish is commit-atomic | every committed event readable by every consumer that hasn't passed its offset; **global FIFO by offset within each stream** (read paths yield `offset ASC`; offsets immutable, never renumbered — [ADR-015](015-streams-depth.md) §4) |
 | queues | durable row | claim/ack model | enqueue is commit-atomic | at-least-once *work* with visibility timeouts |
 
 - The trait **does not promise replay under `listen()`** — on either