ModelGate v5.0.2
The installed modelgate serve command now defaults to 127.0.0.1 and checks
the same publication policy as the Make/Compose launcher before starting
Uvicorn. Non-loopback hosts refuse unset, empty, whitespace-only and known
development admin tokens. Explicit host, port and log-level options remain
available; configured tokens remain literal and an empty local token disables
the admin API.
This closes the CLI entry point missed by the previous startup hardening.
Package metadata, /healthz and OpenAPI now consistently identify 5.0.2.
Verification: 183 tests, Ruff lint/format and the locked dependency check passed
locally. A local 150 rps, 12-second run completed 1,800/1,800 requests with zero
drops during prewarming, shadow/canary traffic and a mid-run model swap.
Hosted CI passed
both test/load and web jobs for PR head 428fda076a2aed87cd2bd4e684245ca497ea8214.
This is still a development demo. Admin tokens protect /admin/*, not
predictions, metrics or health endpoints; remote exposure needs additional
production controls.