Anton Panasenko af0e82c562 Enforce managed residency for model providers (#39645) ...

## Why

Model provider configuration could override the residency header required by
`enforce_residency`, so provider-backed requests did not reliably honor the
managed setting.

## What changed

- Apply the managed residency header after building a provider, making it
  authoritative for model requests and model discovery.
- Warn when a provider configures the residency header through
  `http_headers` or `env_http_headers`, while preserving the original provider
  configuration and unrelated headers.
- Cover HTTP and WebSocket requests, model discovery, and case-insensitive
  header detection with targeted tests.

GitOrigin-RevId: 461ef8989d5bd06ffdea694aee4265e392e07590

2026-08-20 07:33:27 +00:00

..

src

Enforce managed residency for model providers (#39645)

2026-08-20 07:33:27 +00:00

BUILD.bazel

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

Cargo.toml

Refresh expired AWS credentials for Bedrock (#39410)

2026-08-19 04:46:58 +00:00