The API of KnowledgeBase and *KnowlegdeSession should clearly document if it is thread-safe or not.

See http://stackoverflow.com/questions/3817639/best-practices-for-using-drools-expert-flow-in-a-web-application

If it depends on the method the main class header should state it does and each method should state if it's thread safe or not.