Skip to content

feat(llm): require user-owned request credentials - #32

Merged
darwin67 merged 5 commits into
mainfrom
rfd-5-phase-1a-request-boundary
Sep 4, 2026
Merged

feat(llm): require user-owned request credentials#32
darwin67 merged 5 commits into
mainfrom
rfd-5-phase-1a-request-boundary

Conversation

@darwin67

@darwin67 darwin67 commented Sep 4, 2026

Copy link
Copy Markdown
Member

Summary

  • add typed, generation-fenced integration references and a scope-first credential resolver
  • wrap ReqLLM generation so only operation-local API keys or OAuth access credentials reach the adapter
  • route session and evaluation calls through the scoped boundary and require an explicit evaluation user

Verification

  • mix precommit (376 tests passed, 5 live-provider tests excluded)
  • mix test test/kodo/cluster/distributed_handoff_test.exs
  • mix test test/e2e/hermetic_full_stack_test.exs

@github-actions github-actions Bot added the feat label Sep 4, 2026
@darwin67
darwin67 merged commit cc0fb05 into main Sep 4, 2026
17 checks passed
@darwin67
darwin67 deleted the rfd-5-phase-1a-request-boundary branch September 4, 2026 03:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant