Better model download management

docs/Decisions.md

@@ -272,3 +272,21 @@ and its loaded pipeline are left untouched in that path.
 **Why:** M7 future want. Enables logged-in users on weak devices to transcribe live microphone audio using the server engine.
 **Shape:** The client opens a WebSocket connection to `/api/transcribe/live`. The client streams 16kHz Float32 PCM chunks (from `MicCapture`) over the WebSocket. The server runs `LiveTranscriber` and `LiveSegmenter` (from `src/lib/live.ts`, which is pure and runs perfectly in Node/Bun). For each segment/pass, the server's `LiveTranscriber` writes the audio to a temporary file and invokes the Python sidecar. The server sends `LiveUpdate` objects back to the client over the WebSocket.
 **Consequence:** The client does zero ML and minimal buffering, acting only as a mic-streamer and UI-renderer for live passes on the server.
+
+## D-020 — Model downloads are user-initiated, never a side effect of selection
+**Status:** Accepted (2026-07-14)
+Selecting a model in `ModelPicker` (or changing the backend preference) no longer
+starts the weight download. Weights load exactly when they are needed or asked for:
+- **Lazy:** a file drop or live start on the **browser** engine posts the
+  (idempotent) load, as both paths already did — the download overlaps decoding /
+  mic startup.
+- **Explicit:** a **Download** button on the selected, not-yet-cached model in
+  `ModelPicker` starts the load immediately — this keeps D-005's "prepare for
+  offline use" story alive now that selection alone caches nothing.
+- **Server engine:** server runs never touch the browser pipeline, so with the
+  toggle on "server" nothing downloads. (Previously the eager selection load
+  downloaded browser weights even when every transcription would run server-side.)
+**Consequence:** model/backend switches just reset the load UI state
+(`loadStarted`, progress); the next load starts from clean progress. The explicit
+download is a full pipeline load, so it also warms up inference and surfaces the
+"Running on …" backend badge.