Blog

What a gateway makes possible,and what it has to refuse.

Two kinds of piece. What a gateway lets you do without touching your applications: change model vendors, retrofit approval onto software you cannot edit, get keys out of your code, see what AI costs per team. And what it has to refuse, which is the part a security review actually asks about.

Capability without code change

05
  1. 01

    Change your AI vendor without changing your application

    Every team that shipped an AI feature is married to whichever model they integrated first. It does not have to be a code change.

  2. 02

    Nobody switches models, because nobody can defend the quality risk

    The reason your AI bill keeps growing is not that cheaper models do not exist. It is that no engineer will stake their name on one without evidence.

  3. 03

    Approval for software you cannot change

    Step-up approval is straightforward to add to software you are actively building. Most software is not that. There is another way in.

  4. 04

    Get your API keys out of your applications without editing them

    Every organisation knows where its credentials are. In configuration files, inside software nobody wants to open.

  5. 05

    What does AI actually cost you, per team?

    Most organisations can tell you their total AI bill and almost nothing else about it. That is a reporting problem with an expensive shape.

The person's data

01
  1. 06

    Your card number is on your phone, not in their database

    Every company promises to protect the data you give them. This is a different promise: not giving it to them at all.

Governance and refusal

06
  1. 07

    Your agent should never hold a credential

    We have spent two years asking how to watch what AI agents do with access. The better question is why they have it.

  2. 08

    Asking a human without holding the connection

    Every design that puts a person in the path of a request eventually meets the same wall. Here is the way through it.

  3. 09

    A caller must not choose its own policy

    A defect family that shows up in almost every gateway, proxy and policy engine, including ones built by careful people.

  4. 10

    Deny by default is a claim you can test in ten seconds

    Almost every platform claims it. Very few survive the obvious experiment. Here is the experiment.

  5. 11

    Govern the web, and leave everything else alone

    The most useful thing a gateway can tell you is what it does not touch. Three questions that find out.

  6. 12

    What an audit trail actually has to answer

    Most audit logs are built to satisfy retention. Then something goes wrong and you discover what you needed instead.