Provider selection does not bypass authorization.
The gateway extends intelligence governance while remaining beneath Kernel policy.
Agent
- May
- Request an approved intelligence capability with bounded context.
- May not
- Call an unapproved provider or expand its own budget.
Kernel
- May
- Authorize capability, risk and budget before routing.
- May not
- Treat model quality as authority evidence.
Gateway
- May
- Route, fall back, meter usage and record provenance.
- May not
- Override policy or conceal provider and cost evidence.
Provider
- May
- Return model output under the approved request contract.
- May not
- Receive undisclosed secrets or become AVC's source of authority.