Gateway-Only LLM Routing Enforced

Status Update · 2026-02-25 · 09:10 AM PT

Status: Resolved.

What changed: Collapsed every LLM call path to a single mediated gateway and removed the provider API keys from the environment. There is no longer a second route to a model — the gateway is the only door.

What broke: Un-migrated call sites that still imported a provider client directly. They had to be moved onto the gateway before the keys came out.

Next step: Enforce-readiness verification: confirm no code path can reach a model except through the gateway.

Tags: #governance #execution #infra