Files
Maciej Lisiewski 0920b6a2b9 fix(delegate): a child on a built-in-named entry takes the entry's origin-bound pool
`delegation.provider: deepseek` with a `providers.deepseek` proxy keeps the
bare slug, so the child loaded the raw `deepseek` pool: its unrecorded rows
passed the endpoint check and the startup lease bound the built-in's key to
the proxy (overriding the entry's key_env too). The child now takes
load_runtime_pool, the view main/aux/fallback resolution already uses.

A key-less entry off the built-in's host now goes keyless instead of
borrowing the built-in's key: log that once per entry with the opt-in
(`key_env: <BUILTIN>_API_KEY`), never the key, and document it with a
migration note.

Fixes #130410
0920b6a2b9 · 2026-11-13 20:21:55 +01:00
History
..
…
…