Tollgate v0.1.1
Pre-release
Pre-release
·
1 commit
to main
since this release
v0.1.1
andrewjstevens
Andrew Stevens
This tag was signed with the committer’s verified signature.
andrewjstevens
Andrew Stevens
f9763e1
This commit was signed with the committer’s verified signature.
andrewjstevens
Andrew Stevens
Beta, pre-1.0. Recommended over v0.1.0 for evaluation.
Changes since v0.1.0:
- Budget exhaustion now returns 402 Payment Required (was 429); an unroutable or unpriced model returns 400 Bad Request (was 402). Each carries an x-tollgate-reason header. 429 is reserved for real rate limiting, and 402 is not auto-retried by provider SDKs, so a monthly cap no longer invites retry storms.
- Startup reconcile never lowers a live budget counter (max of cache and ledger).
- The .env.example placeholder pepper is rejected at startup and key issuance.
- Usage ledger now also rejects TRUNCATE (append-only hardening).
- Docs: honest Limitations section (no streaming yet; prompt-caching cost is approximate; flat observe authz; minimal metrics), architecture diagrams, and status codes matched to behaviour.
- CI: cargo audit advisory gate (h2 bumped to 0.4.19 for RUSTSEC-2026-0258) plus Dependabot.
MIT. Anthropic and Vertex (config-gated) plus a built-in mock. Interfaces and schema may change before 1.0.