The files your app serves publicly are exactly the ones you declared and nothing else, even in a folder nobody got around to classifying yet. If one AI vendor’s key is not configured, that one feature quietly reports itself unavailable instead of crashing the whole service.
What ports as-is
- A fail-closed allow-list evaluated before any disk access
- A deny response indistinguishable from a missing file
- Required configuration fails the process at start-up, naming the key
- Credentials keyed on provider plus capability
What we build for you
- Which folders under the served root are genuinely meant to be public
- Which credentials are required to start versus optional per feature
- Which AI vendors are on the roster and what each costs per unit
