Files
zeekayandHanzo Dev e2223a0a1a egress is the outbound trust boundary: callers ask for a call, never for a key
ingress decides who may come in; this decides who may spend. An upstream
credential is money, and today it sits in the calling process's environment
where anything that can reach the process can take one and nothing records that
it happened.

Seeded with the design rather than code, because the decisions that matter are
the ones that are cheap now and expensive later: import the provider surface
from ai rather than copying it, import the rate limits from gateway rather than
growing a second set, never return a credential, and run off the managed cluster
— which is a correctness property here, not a deployment preference.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-14 18:29:20 -07:00

Symbolic link
6 B