Overview
Principles
Governance is part of request execution
Octoryn is an independent, governance-first Router for enterprise and Octopus family products. It keeps provider access, policy enforcement and content-free evidence behind one API boundary without absorbing product databases or consumer commerce.
Keep the Router independent
Products call Router over HTTPS. Router does not import product code or own Documents, Media, Agents, Memory, Knowledge or other incubation-layer state.
- Provider credentials remain server-side
- Workspace identity is resolved before routing
- Application authorization remains the product's responsibility
Make governance executable
Eligibility, region, provider capability, budget and risk checks run before provider access. A policy alias is an operational contract, not a marketing label.
Separate compatibility from capability
An OpenAI-compatible field is accepted only when the selected route can preserve its semantics. Discover model capability, test critical paths and never assume every provider supports every optional field.
Preserve intentional differences
Octoryn does not reproduce consumer credits, referral systems, withdrawals or a general marketplace account model. Enterprise contracts, prepaid capacity and Stripe funding belong to the workspace control plane.