Ideas · Builder Notes
The gateway holds the provider key, not the agent
In Kognita alpha the AI gateway now uses its own provider key, and an agent presenting a provider key directly is denied and flagged.
If an agent holds the provider key, it can go around the gateway.
kognita serve --provider-key, or an environment variable, gives the gateway its own key. A caller presenting its own provider credential is denied and flagged with a review event.
This closed the last half of 0.5 item 20. Bypassing the gateway with a direct key is now visible.
Teams have to move key management to the gateway, which is an operational change.
The enforcement point should own the credential. Otherwise it is advisory.
Sources
Kognita is an open-source alpha. This note comes from Kognita PR #94 in the Kognita repository.