Added
- Runtime network egress scopes via tethered on the two non-LLM paths ContextGem controls: SaT model downloads (HuggingFace) in
_load_sat_model, and genai-prices pricing-data refresh (raw.githubusercontent.com) in_calculate_auto_pricing_costs. Each scope carries ahint=so that, if a host application'stethered.activate()blocks the call, the resultingEgressBlockedtraceback names the host and the escape hatch (e.g.paragraph_segmentation_mode='newlines',auto_pricing_refresh=False). LLM API calls are deliberately not scoped — endpoints are user-configured and remain governed by the host application's own policy.
Changed
- Promoted
tetheredfrom a development-only dependency to a runtime dependency to support the production scopes above.