fix(api): accept the advertised gateway-default model on chat surfaces

[seonghobae]

Problem

Model discovery and serving had drifted across gateway defaults, configured-gateway metadata, free routing, and provider privacy evidence.

Fix

• Make omitted model, contextual-orchestrator, and orchestrator/auto one contract across Chat, Responses, and embeddings; keep orchestrator/free strictly zero-cost.
• Discover configured gateway model, pricing, capability, and privacy metadata through KV credentials and an explicit HTTPS allowlist. Conflicting or partial deployment evidence stays unknown.
• Preserve individual models and exclude non-chat capabilities only from chat routing.
• Apply OpenRouter's official ZDR endpoint inventory and provider/endpoint data policies to paid and free models.
• Persist privacy booleans and policy-source provenance; unknown remains distinct from unsupported.
• Crawl official policy sources through Wardnet's bounded DNS-pinned fetch API. An explicitly ZDR-capable discovered model may enrich no-training/no-retention metadata only with a literal source quote.
• Optionally render client-side policy pages through Camoufox MCP. Every tab receives Wardnet's dedicated-token proxy; deployment assigns Wardnet DNS, disables browser TRR, and blocks direct egress.
• Fail over malformed responses only inside the selected bounded model group.

Official privacy sources:

• ZDR endpoint impact API
• Zero-data-retention enforcement
• Provider logging and data policies
• data_collection=deny routing policy

Ecosystem dependencies

• Wardnet destination policy: PR fix(security): pin provider egress and repair the Atheris lock #96
• Wardnet bounded outbound fetch: PR docs(security): coordinated disclosure lifecycle on main #113
• Wardnet DNS resolver and authenticated browser egress proxy: PR fix(security): separate browser admin sessions from long-lived bearer credentials #116

These remain stacked protected deliveries; their absence leaves policy enrichment unavailable rather than bypassing the boundary.

Validation

• Latest complete local suite before the final concurrent hardening commit: 2383 passed.
• Exact-head privacy/discovery/boundary/docstring suite: 75 passed.
• Exact-head Ruff and diff checks pass.
• Live configured-gateway and routing evidence remains recorded in the product gap baseline; no operator gateway hostname is committed or included here.
• Exact-head hosted security/tests/reviews remain required before protected merge.

[coderabbitai]

Warning

Review limit reached

Next included review available in 15 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: d17e3e91-fdbc-4929-a7fa-5b5d1304eb15

📥 Commits

Reviewing files that changed from the base of the PR and between 56a898b and 6801f17.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (25)

• README.md
• contextual_orchestrator/__main__.py
• contextual_orchestrator/model_discovery.py
• contextual_orchestrator/orchestrator.py
• contextual_orchestrator/privacy_policy_analysis.py
• contextual_orchestrator/provider_bootstrap.py
• contextual_orchestrator/provider_catalog_store.py
• contextual_orchestrator/server.py
• docs/kv-credentials.md
• docs/planning/adrs/0032-model-group-cost-aware-discovery.md
• docs/product-technical-gap-baseline.md
• pyproject.toml
• tests/test_auto_discovery_server.py
• tests/test_chat_orchestration_mode_http_honesty.py
• tests/test_discover_models_cli.py
• tests/test_model_discovery.py
• tests/test_model_discovery_boundaries.py
• tests/test_model_strip_writeback_http_honesty.py
• tests/test_orchestrated_responses_stream.py
• tests/test_privacy_policy_analysis.py
• tests/test_provider_bootstrap.py
• tests/test_provider_catalog_store.py
• tests/test_provider_reliability.py
• tests/test_provider_tls.py
• tests/test_responses_model_required_http_honesty.py

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

Devin Review found 0 new potential issues.

[devin-ai-integration]

Devin Review found 1 new potential issue.