Routes
Every model call, paired with a verification policy.
Routes are the Prova Gateways policy layer. Pick one per endpoint: observe, flag, block, or repair. Every response carries a signed certificate with a SHA-256 identifier and a machine readable verdict.
Attach the Prova verdict as a response header and JSON sidecar. The original response is never altered. Use this to build dashboards and audit trails without touching your serving path.
For INVALID responses, append a structured warning block to the completion text. Upstream callers see the full response plus an explicit flag. The HTTP status stays 200.
Refuse to return INVALID responses to the caller. The upstream request receives a structured error with the certificate ID and the precise failure citation.
Auto-rewrite INVALID reasoning and re-verify. If the repaired chain is valid, return it with a repair-flagged certificate. If not, fall back to the configured policy.