Clips cut on MUXL segment boundaries, drawn from two places behind one interface (vod.FindClip): - completed live recordings, which now index each segment's start time and size so a clip range-reads only the segments it needs - the node's in-memory segment buffer (generalized from the moderation buffer), which a recording node holds for the full open-object window A node that only buffers the last few minutes of a stream another node is recording refuses (ClipUnavailable) rather than silently skipping the gap. Moderation report clips and the internal /clip route use the same path. Any signed-in caller may clip: OAuth, or a service-auth token bound to the method, so third-party apps can call it with the rpc scope.