Authorization Scheme - #115

Open

AryanAhadinia wants to merge 9 commits into

mainfrom

feat/model-authorization-rebased

Commits on Aug 13, 2026

feat(authorization): per-user model authorization via OpenTela labels

AryanAhadinia
and
claude
committed
203a91e
docs(adr): record the label-based model authorization decision

AryanAhadinia
and
claude
committed
09d0c10
fix(authorization): refuse to route served-name collisions with conflicting labels

AryanAhadinia
and
claude
committed
00fb055
fix(authorization): reconcile the label gate with namespaced model ids
AryanAhadinia
committed
f889e66
docs(authorization): default to public, document the alias lookup
AryanAhadinia
committed
f3d780b
fix(frontend): resolve the models bearer without caching the API key
AryanAhadinia
committed
ce3936f
feat(models): surface sml_version, and add an inert minimum-version gate

AryanAhadinia
and
claude
committed
b08a42c
fix(authorization): check the id that actually gets routed

AryanAhadinia
and
claude
committed
3ef72d6
Use Redis Caching
AryanAhadinia
committed
7a7ff52