mirror of
https://github.com/netbirdio/netbird.git
synced 2026-08-28 18:41:30 +02:00
Add TestGuardrailPerGroupAllowlist_AllProviders: for each always-on provider surface — OpenAI (WireChat), Anthropic (WireMessages), Vertex (URL path) and Bedrock (URL path, normalized) — two policies target the provider, granting the client's group only the selected model and a second group only the other model. The client gets the selected model served (200) and the other group's model denied (403 llm_policy.model_blocked), proving the per-policy/group decision holds across body- and path-routed providers (the cross-group no-leak property).