Gatewyse 1.0.0 is the first release, and it has not shipped yet. Nothing was published before it, so there is no earlier history to read and nothing here is a breaking change against a released baseline — the scope model below is simply what 1.0.0 is.
In preparationv1.0.0
First release
Scope model — there is one tenant, created at boot and implicit in every request. The organization is the first boundary that discriminates anything, cascading organization to department. The base policy the tenant used to expose lives at /api/admin/settings.
Providers and models cascade base to organization to department by sparse patch. /providers and /models are the deployment catalogue and every mutation requires deployment scope; /provider-overrides and /model-overrides are what one scope changes about a catalogue entry.
Identity is per-scope memberships, not a flat role list, and authority is bounded by how the session authenticated. A role is scoped to the system, an organization or a department.
Identity & access — MFA enrollment (TOTP with one-time recovery codes), SCIM 2.0 provisioning at /scim/v2 with an escalation guard so an IdP can never grant super-admin, IdP group to role mapping on every SSO login, refresh-token rotation with reuse detection, session listing and admin force-logout, and SAML Single Logout.
Reliability & operations — provider circuit-breaker state shared across replicas via Redis, budget-alert delivery over webhook / Slack / email with once-only dispatch, backup restore with sha256 archive verification, and a schema-migration framework with an up/down/status CLI.
Providers — Novita, SiliconFlow, Nebius, Baseten, Hyperbolic, NVIDIA NIM and Jina land, bringing the catalogue to 49 adapters.
Developer experience — a typed TypeScript SDK, the gatewyse CLI, and a generated OpenAPI 3 spec at /openapi.json built from the Zod schemas.
Compliance & observability — GDPR data-subject export and erasure, discounted prompt-cache-read pricing, showback CSV export, a full OpenTelemetry pipeline for traces, metrics and logs across both server and worker, seven new Prometheus metrics, a bundled Grafana dashboard and alert rules, and a pluggable KeyProvider seam for KMS / BYOK.
Fixed — Anthropic adaptive-thinking request shape for Opus 4.8 / Sonnet 5 / Fable 5, and the google / microsoft / okta SSO presets being accepted at initiate but rejected at callback.
Security — encryption-key rotation now also re-encrypts organization and department credential overrides, MFA secrets and recovery codes in one transaction; API-key IP allow-lists match CIDR and IPv6 properly and fail closed on a malformed entry; audit retention defaults to 365 days rather than the seven it silently stamped; and the API-key provider/model scopes that were stored but never enforced are now refused outright, so a confinement that does not exist cannot be configured.