Transparency
Roadmap & Status
What is live, what is in progress, and what is coming, stated honestly.
We'd rather tell you something is in progress than overstate it. Roadmap items are prioritized with our first enterprise customers. Talk to sales to shape them.
Shipped Live
Available in the gateway today.
| OpenAI-compatible gateway | Drop-in reverse proxy with streaming, routing to OpenAI, Anthropic, Google Gemini and Groq. |
| Encrypted key vault | Provider keys stored encrypted and resolved at request time, never exposed to agents. |
| Gateway keys & scopes | Per-agent keys with provider and model scopes (gateway:*, gateway:<provider>, gateway:model:<name>). |
| Budget caps & rate limits | USD budgets (daily / monthly) and RPM limits enforced inline. |
| Instant revocation | A kill-switch that blocks all in-flight and future requests for a key. |
| Observability dashboard | Cost and usage, agent graph, lifecycle kanban and per-agent timeline. |
| Rate-card cost accounting | Cost computed once at write time and traceable to the rate that produced it. |
| OIDC single sign-on | Google, Okta and Azure AD. |
In progress In progress
We are actively building or pursuing these.
| SOC 2 Type I & Type II | Independent audit of our security controls. |
| GDPR & EU AI Act alignment | Continuous alignment with global privacy and AI regulation. |
| Data-handling modes | Metadata only, Redacted content, or Full content: chosen by you. |
| Zero-Retention Mode | Process the payload for real-time scanning, then drop it immediately. |
| Guardrails | PII masking and prompt-injection defense at the gateway. |
| One-click compliance exports | Audit-ready evidence for your compliance teams. |
Coming soon Coming soon
Designed and queued next.
| SAML SSO | In addition to OIDC. |
| Provider enterprise agreements | Inherit our enterprise terms and training opt-outs with major LLM providers. |
| Dedicated single-tenant deployment | A separate Spineforge instance and database per customer. |
| Self-hosted / on-prem gateway | Run the gateway in your own infrastructure under a commercial license. |
Planned Planned
On the roadmap, not yet scheduled.
| Delete data on demand | Remove stored prompts, responses and logs whenever you need. |
| Custom OIDC providers | Bring any OIDC-compliant identity provider. |
| Provider Admin API reconciliation | Per-key reconciliation to strengthen shadow-agent detection. |
Known limitations today
- The gateway is in the data path, so agents can't reach the model through it if the gateway is unreachable.
- Antigravity IDE is not supported yet; the Antigravity CLI is.
- Tools that only accept a fixed vendor endpoint (no OpenAI-compatible base URL override) can't be routed through the gateway.