Session Portability in AI Inference APIs: Challenges and Community Perspectives

The Portability Problem

Modern inference APIs are moving away from the idea that a user‑owned transcript fully captures an AI session. Providers now return mixtures of text and opaque, server‑bound state such as encrypted reasoning tokens, hidden search evidence, and compacted context blobs that only the original provider can decrypt. As a result, the transcript saved locally is only a partial view of a session whose operational state remains on the provider’s servers.

How Providers Break Portability

Providers justify each opaque feature with user‑centric arguments, but together they erode ownership. Examples include:

  • Reasoning tokens billed to the user but returned only as encrypted blobs with useless summaries.
  • Web searches where the model sees source material the client never sees, returning only citations or snippets.
  • Server‑side compaction that emits an encrypted compaction item described as "opaque and not intended to be human‑interpretable."
  • Subagent instructions and messages hidden as encrypted payloads that cannot be inspected or replayed by another model.
  • File, vector‑store, container, and cache references that resolve only within the provider’s environment.
  • Conversation state keyed by IDs stored entirely on the provider’s servers, making a response ID a foreign key into a database the user does not control.

Practical Tests for Portability

The article proposes five concrete tests to evaluate whether a session is truly portable:

  1. Inspection: Can the user see what the model saw, what tools did, and what agents told each other?
  2. Export: Is the session self‑contained, apart from ordinary artifacts that can also be downloaded?
  3. Replay: Can another implementation reconstruct a semantically equivalent context from the exported data?
  4. Audit: Can a human explain why the system took an action after the fact?
  5. Deletion: Can the user identify and remove every server‑side copy on which the session depends? A response ID or a ciphertext fails these tests because the data resides on the server or cannot be decrypted by the user.

Community Reactions

Commenters on Hacker News highlighted both agreement and alternative viewpoints:

  • One user noted the article made them reconsider using a Codex subscription because hidden reasoning undermines auditability.
  • Another reported successfully switching between Claude and Codex sessions, accepting some quality loss as comparable to context compaction.
  • A comment: "I'm having Claude/Codex continue each others' sessions pretty frequently without issue."
  • Several commenters argued that providers deliberately keep implementation details hidden to avoid users prying into internal workings.
  • A contrasting view claimed that for long, important conversations it is acceptable to stay with a single provider and start fresh elsewhere.
  • Some pointed out that externalizing tools via MCP servers or building custom agent state databases (e.g., a separate MCP‑accessible database) can restore control.
  • Others suggested practical workarounds such as maintaining a notes directory with markdown summaries that any model can pick up, or using middleware that logs micro‑prompts for auditability.
  • A few emphasized that open‑weight models provide permanence because they cannot be pulled away by a company, enabling users to keep guides, therapists, or friends indefinitely.
  • One commenter warned that migration to open weight models is likely unless regulation favors closed source, citing cost and transparency as drivers.
  • Another highlighted cost‑driven model switching mid‑session, using powerful models for exploration and smaller models for execution.

Toward a Portable API

The article lists seven rules that inference providers and agent builders should adopt to restore portability:

  1. Treat the local event log as canonical; server storage may mirror it but the client must be able to reconstruct the session without dereferencing server IDs.
  2. Make storage explicit: store: false should be easy, documented, and preferably the default; any feature requiring retention must declare this at the point of use.
  3. Ensure no opaque item is the sole carrier of meaning: encrypted reasoning, compaction, and tool signatures may accompany a readable, provider‑neutral handoff representation.
  4. Require hosted tools to log full‑fidelity evidence: exact inputs, outputs, filtering, provenance, timestamps, and content hashes, not only polished answers and citations.
  5. Make subagent communication auditable by persisting the exact readable task, messages, results, lineage, model, and tool permissions for every agent.
  6. Return inspectable compaction: a readable summary, the instructions used to create it, and enough lineage to understand what was discarded.
  7. Allow export of artifacts such as files, container outputs, search snapshots, and generated media into a content‑addressed local archive.

Distillation and Model‑Layer Lock‑In

Beyond session portability, the article notes a related lock‑in at the model layer. Major labs claim ownership of outputs while prohibiting customers from using the service to train competing models, yet they themselves use distillation internally. The post argues that the default attitude toward distillation should shift from hostility to support, because distillation can turn expensive frontier capability into smaller, cheaper, faster models that run locally, offline, or under user control, thereby increasing competition and preserving capability when an API disappears.

Conclusion

The core tension is between provider‑driven performance optimizations that rely on opaque, server‑bound state and user‑driven needs for inspection, export, replay, audit, and deletion. Without portability, a user’s accumulated context becomes trapped in a single ecosystem, weakening the incentive for providers to compete on quality, price, reliability, and trust. Achieving portable sessions requires explicit storage, readable handoffs for all opaque features, full‑fidelity tool logs, auditable subagent communication, and exportable artifacts—steps that would let users close an account, keep a session, and hand it to another model even if the new model disagrees or performs worse.

Sources