Support customer-operated enterprise identity, model access and deployment - #40

Open

turgaybulut wants to merge 35 commits into

mainfrom

feat/customer-operated-enterprise

Commits on Sep 7, 2026

Retire legacy subscriptions in favor of operator provisioning
turgaybulut
committed
cf17246

Commits on Sep 8, 2026

feat: capture and persist gateway diagnostic metadata
turgaybulut
committed
b712c7e
Record gateway policy decisions through durable audit lifecycle
turgaybulut
committed
0ffd32e
feat(enterprise): add scoped teams and durable key controls
turgaybulut
committed
d6d3f4a
fix(accounting): preserve scope lock order during team settlement
turgaybulut
committed
a09c4cd
Expose policy decisions and caller identity in audit log reads
turgaybulut
committed
976c787
fix(audit): distinguish key access denial from quota exhaustion
turgaybulut
committed
4af4750
feat(enterprise): add customer OIDC sessions and Vault secrets
turgaybulut
committed
735ddf2
feat(enterprise): expose worker successful-pass readiness
turgaybulut
committed
6202ebd
fix(identity): synchronize team grants and finish local logout offline
turgaybulut
committed
69d385c
feat(enterprise): route tenant models through approved deployments
turgaybulut
committed
d968cd7
fix: expose unknown request pricing without fabricated zero costs
turgaybulut
committed
cda5ce0
fix: mark unpriced overview totals as incomplete
turgaybulut
committed
c4e15c9
fix: label budget alerts with pricing completeness
turgaybulut
committed
29f8fac
fix: preserve unknown billing costs and scope prompt hashes by deployment
turgaybulut
committed
affa82a
Sign enterprise releases and verify offline image bundles
turgaybulut
committed
07af639
Reuse platform-specific BuildKit SBOM in release delivery
turgaybulut
committed
d7680db
feat(deploy): package gateway dashboard and workers with Helm
turgaybulut
committed
2309155
test(on-prem): add isolated chart and real identity smoke harness
turgaybulut
committed
db29675
feat(gateway): audit native Anthropic token counting without billing
turgaybulut
committed
f7c9c45
fix(enterprise): retain model configuration and deployment audit evidence
turgaybulut
committed
7be329e
docs(gateway): describe registry routing and nonbillable token counts
turgaybulut
committed
a593055
fix(enterprise): bound model health checks by a wall-clock deadline
turgaybulut
committed
987cb73
docs(enterprise): document separate-database restore rehearsal
turgaybulut
committed
e292dda
Verify offline imports using archive configuration digests
turgaybulut
committed
8a0036b
fix(deploy): make migration deadlines configurable and use native init retries
turgaybulut
committed
e00d6b4
docs(release): use the private dashboard package namespace
turgaybulut
committed
70fe575
docs(deploy): clarify Redis requirements and canonical image digests
turgaybulut
committed
397b412
docs(enterprise): isolate restored worker side effects
turgaybulut
committed
4d3d0d8
fix(deploy): verify isolated chart with native images and real services
turgaybulut
committed
546a493
fix(deploy): reject unsafe cluster reuse before cleanup
turgaybulut
committed
fd765a7
test(deploy): include reuse safety in ownership and CI checks
turgaybulut
committed
8b3c1e1
docs: retain maintained project guides and remove workspace records
turgaybulut
committed
936fabc
Fix Cosign installation and require modern fixture TLS
turgaybulut
committed
afd06d9
Handle token-count system instructions in prompt hashing
turgaybulut
committed
f3d9ff1

Navigation Menu

Support customer-operated enterprise identity, model access and deployment - #40

Support customer-operated enterprise identity, model access and deployment#40
turgaybulut wants to merge 35 commits into
mainfrom
feat/customer-operated-enterprise

Commits on Sep 7, 2026

Retire legacy subscriptions in favor of operator provisioning

Commits on Sep 8, 2026

feat: capture and persist gateway diagnostic metadata

Record gateway policy decisions through durable audit lifecycle

feat(enterprise): add scoped teams and durable key controls

fix(accounting): preserve scope lock order during team settlement

Expose policy decisions and caller identity in audit log reads

fix(audit): distinguish key access denial from quota exhaustion

feat(enterprise): add customer OIDC sessions and Vault secrets

feat(enterprise): expose worker successful-pass readiness

fix(identity): synchronize team grants and finish local logout offline

feat(enterprise): route tenant models through approved deployments

fix: expose unknown request pricing without fabricated zero costs

fix: mark unpriced overview totals as incomplete

fix: label budget alerts with pricing completeness

fix: preserve unknown billing costs and scope prompt hashes by deployment

Sign enterprise releases and verify offline image bundles

Reuse platform-specific BuildKit SBOM in release delivery

feat(deploy): package gateway dashboard and workers with Helm

test(on-prem): add isolated chart and real identity smoke harness

feat(gateway): audit native Anthropic token counting without billing

fix(enterprise): retain model configuration and deployment audit evidence

docs(gateway): describe registry routing and nonbillable token counts

fix(enterprise): bound model health checks by a wall-clock deadline

docs(enterprise): document separate-database restore rehearsal

Verify offline imports using archive configuration digests

fix(deploy): make migration deadlines configurable and use native init retries

docs(release): use the private dashboard package namespace

docs(deploy): clarify Redis requirements and canonical image digests

docs(enterprise): isolate restored worker side effects

fix(deploy): verify isolated chart with native images and real services

fix(deploy): reject unsafe cluster reuse before cleanup

test(deploy): include reuse safety in ownership and CI checks

docs: retain maintained project guides and remove workspace records

Fix Cosign installation and require modern fixture TLS

Handle token-count system instructions in prompt hashing