Key decisions in plain English
Apache 2.0. Permissive licensing was a deliberate choice: no copyleft obligation for teams embedding the gateway, and no source-available clause restricting how you deploy it. We wanted a licence our own customers could adopt without a legal review. Rust gateway, not Go. Low p95 overhead with full tracing on is a hot-path budget — measured at 2 ms p50 / 4 ms p95 / 5 ms p99 added latency on a 4 vCPU host with capture on (benchmarks). Rust and tokio’s runtime get us there without exotic tuning. ClickHouse for spans. High-cardinality, high-throughput OLAP requirements rule out Postgres for spans. ClickHouse is the cheapest path to the throughput. Sigstore Rekor for audit anchoring. Tamper evidence without us having to run a notary. Public log, free, audited, and standard. OTLP semconv compatibility. Free interop with the entire OTel ecosystem. Customers who already export OTel traces don’t have to swap SDKs — they swap exporters. Agent-tool safety inline, not async. The point is to catch a compromised or hallucinated tool call at the gateway, inline, rather than reconstruct it from an incident after the fact. Every claim carries an eval. A claim that a guard exists is written down as an assertion inevals/, and the suite runs in CI. The assertions ship here so they are readable.
Behavioral assertions that need a live gateway report as skipped, never
as a fabricated pass.