Control plane
Governance & simulation
Explain a routing decision without invoking a provider
Governance endpoints expose policy, budget and route evidence to appropriately scoped workspace operators.
Route simulation
POST /v1/route/simulate evaluates identity, model capability, provider, region and policy without resolving provider credentials, reserving budget or invoking a provider.
Governance summary
GET /v1/governance/summary returns tenant-scoped, content-free operational evidence. It is not a consumer bill or generation-history store.
Policy revisions
Policies use stable IDs and revisions. Apply optimistic concurrency, preserve approvals and retain rollback evidence when promoting shadow behaviour to enforce.
Decision reasons
A denial should identify the policy revision, failed constraint and safe reason code. Do not return provider secrets, sensitive prompt fragments or internal stack traces.