feat: complete production-quality Model Router AI traffic control platform

2026-08-31 17:33:38 +05:30
commit 4e6f742272
66 changed files with 8969 additions and 0 deletions
@@ -0,0 +1,10 @@
+# Model Router Security Policy
+
+## Reporting Security Vulnerabilities
+If you discover any security issues with API token handling, prompt injection vectors, or data exposure, please contact the maintainers immediately.
+
+## Zero-Secret Exposure Policy
+1. **API Keys**: External provider tokens (OpenAI, Anthropic, Gemini) are read strictly from local environment variables (`.env`) or secure system secrets.
+2. **Logs & Transcripts**: All outgoing observability logs automatically redact authorization headers, bearer tokens, and secrets.
+3. **Database Integrity**: SQLite storage only stores model identifiers and usage statistics; raw credentials are never persisted in plaintext database tables.
+4. **Browser Privacy**: Frontend client queries never receive or handle backend API keys.