Oct 6, 2026 · 1 min read
API Management policy that keeps the trace and drops caller baggage
A complete front-gateway policy: CORS for W3C headers, untrusted baggage removed, per-caller rate limits, and privacy-safe hop markers.
Tag
security
3 published posts with this tag.
Oct 6, 2026 · 1 min read
Host-owned routing for direct and MCP execution
A complete Python unit that maps validated domain intent to approved direct functions or approved MCP tool names.
Oct 6, 2026 · 1 min read
Copy only trusted baggage onto spans
A complete OpenTelemetry processor that tags child spans with your own conversation ID and ignores whatever the caller sent.