Hardened the AI gateway with stricter auth, policy, and health checks
The related AI gateway service added stronger request validation, clearer health endpoints, and tighter policy enforcement around database and private-write operations.
Version
1.0.0
Technical Notes
- Added gateway security configuration and authentication middleware.
- Split database policy enforcement and private-write policy checks into dedicated route modules.
- Extended health and telemetry handling to reflect readiness and request safety more clearly.
User-Visible Improvements
- Portfolio assistant-backed flows have a safer backend contract behind them.
- Operational readiness is easier to verify without exposing internal debug data.
Security / Performance
- Gateway-auth checks now gate protected operations before execution.
- Private-write validation and database policy checks reduce accidental unsafe writes.