Disabled Provider Gates
Safety — internal provider routing policy only
- No public model picker · no live provider forced · FAKE/deterministic default · secrets server-side only · no provider keys in frontend.
- Owner/admin gated · cost caps enforced · fallbacks fail closed.
- Payment / public launch unaffected.
These endpoints always return 403
Global live enable, public provider selection, user model picker, external provider access, raw secret storage and uncontrolled fallback are disabled. Each attempt is logged as a SecurityEvent.
| Gate | Code | Test | Result |
|---|---|---|---|
| Global live provider enable | LIVE_PROVIDER_ROUTING_DISABLED | — | |
| Public provider selection | PUBLIC_PROVIDER_SELECTION_DISABLED | — | |
| User model picker | USER_MODEL_PICKER_DISABLED | — | |
| External provider access | EXTERNAL_PROVIDER_ACCESS_DISABLED | — | |
| Raw secret storage | RAW_PROVIDER_SECRET_STORAGE_DISABLED | — | |
| Uncontrolled fallback | UNCONTROLLED_PROVIDER_FALLBACK_DISABLED | — |