Agent Network Guardrail "Model Allowlist" not respected with Bedrock provider

[m4x1202]

Before posting

• I searched existing discussions and issues, including closed ones, and checked the relevant docs.
• I believe this is a product bug rather than a configuration or setup question.
• I can reproduce this issue, or for intermittent issues I've included trigger, frequency, and timing details below.
• I removed or anonymized sensitive data from logs, screenshots, and configuration.

Affected area

Other / not sure

Deployment type

Self-hosted - advanced/custom deployment

Operating system or environment

Linux, macOS, Kubernetes

NetBird version and upgrade status

Client version: 0.74.2
Server (Management, relay, reverse-proxy, ...): 0.74.2
Dashboard: 2.90.3

Did this work before?

No, this never worked

Regression details

No response

Summary

I added a Guardrail Model Allowlist to my Agent network policies that should limit the user to only anthropic.claude-haiku-4-5 but the users can still use any model that is set up in the Provider (I'm using an AWS Bedrock API provider).

Current behavior

When setting my claude-code to use the model Opus4.8 model:

I can query without problems:

although i have the above mentioned Guardrail in place:

Expected behavior

I would expect my requests to fail due to the missing model in the Model Allowlist

Steps to reproduce

1. Setup a AWS Bedrock API provider
2. Add a few different models to be usable with this provider
3. Create an agent policy for your user group that allows access to the provider
4. Add a new Guardrail to that Policy
5. Add a Model Allowlist check and select a few models of the list setup in the provider (but not all)
6. Configure your local AI harness to use a model that is setup in the provider, but should not be allowed by the policy.

Environment and topology

N/A

Self-hosted details, if available

No response

Logs, status output, or debug evidence

N/A

Related issues or discussions

No response

Impact

No response

Additional context

Please let me know if I should provide any further context/information

[braginini]

We will check this one out. Thanks for reporting!

just to double check, have you configured your AI harness with the NetBird’s base URL?

[m4x1202]

Thanks.
I have.

➜  ~ cat ~/.claude/settings.json
{
  "env": {
    "ANTHROPIC_MODEL": "eu.anthropic.claude-sonnet-4-6[1m]",
    "ANTHROPIC_BEDROCK_BASE_URL": "https://octagon.proxy.netbird.xx.xx.xx/bedrock",
    "CLAUDE_CODE_USE_BEDROCK": "1",
    "CLAUDE_CODE_SKIP_BEDROCK_AUTH": "1"
  },
  "model": "eu.anthropic.claude-opus-4-8[1m]",
  "alwaysThinkingEnabled": false,
  "theme": "auto"
}

[braginini]

@m4x1202 addressed in #6764

Thanks for reporting!

P.S. would you mind having a quick chat about your usage? Ping me on Slack (Misha)

[m4x1202]

@braginini Thanks a lot!