Hard limits that are actually hard
Strict mode performs atomic reservations before inference and reconciles estimates after usage is known.
Reserve spend before a request, reconcile actual usage afterward, and degrade, reroute, alert, approve, or block at the scope that owns the budget.
Dashboards explain yesterday's invoice. Hard controls must act before inference. AI Gateway HQ estimates exposure, reserves against the applicable budget or prepaid balance, selects from eligible routes, and settles the reservation when supported usage data returns.
FinOps defines the boundary; platform teams define which technically eligible alternatives can operate inside it.
Set request, rate, token, provider-cost, organization, workload-key, and prepaid limits.
Alert, cap, reroute, degrade, require a different workflow, or stop before forwarding.
Maintain explicit provider/model rates used for estimates and examine variance against supported reported usage.
Estimate the maximum gateway and provider exposure from the request and configured output cap.
Atomically reserve against the applicable organization, workload, and prepaid limits before forwarding.
Choose the least-cost eligible target only after capability, policy, and health requirements pass.
Reconcile the reservation against reported usage and preserve a reason-coded ledger entry.
For cost management, organization and workload-key limits are reserved before provider traffic instead of reported only after the bill arrives.
For cost management, organization and workload-key limits are reserved before provider traffic instead of reported only after the bill arrives.
For ai finops, the console shows each setting, its owner, and its scope so administrators can review changes before they reach live traffic.
Strict mode performs atomic reservations before inference and reconciles estimates after usage is known.
Cost-optimized pools estimate each compatible target from request size, output cap, and administrator-configured rates before forwarding.
Customers using their own authorized provider credentials retain their provider pricing. Optional managed Bedrock access is separately prepaid at a visible server catalog rate.
The tenant console allocates the latest retained request evidence by workload, environment, client mode, data class, provider account, route, and model while separating exact and conservative settlement. Durable period reporting, provider invoice import, and variance automation are not currently included.
Review security boundaries and current status Use the AI cost-control checklistWhat buyers, administrators, and security reviewers need to confirm for ai finops.
Strict mode reserves an estimate atomically before forwarding. Estimation and provider reporting can still differ, so output caps and conservative rate configuration remain important.
The published BYOK model does not add an inference markup. Gateway request fees and any optional managed-model credits are separate and visible.
Yes. An account owner can buy prepaid credit through Stripe-hosted checkout, then separately opt into an amount, threshold, and hard monthly auto-reload cap. Auto-reload stays off until the owner configures it.
Start with a provider connection, a limited workload key, and Observe mode; move to enforcement after your team confirms the result.