{"name":"cri.enabled","slug":"cri-enabled","family":"setting","title":"Settings keys","noun":"settings key","description":"If key material can't be fetched, the gateway answers 503 with a retry hint instead of an auth error.","description_source":"entry","described_by":{"version":"2.1.228","anchor":"gateway-answers-503-when-customer-routed-inference-keys-are-"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.228","released_at":"2026-08-11 17:45:45","spans":3}},"aliases":[],"entries":[{"version":"2.1.228","anchor":"gateway-answers-503-when-customer-routed-inference-keys-are-","heading":"Gateway answers 503 when customer-routed inference keys are unavailable","line":"If key material can't be fetched, the gateway answers 503 with a retry hint instead of an auth error.","released_at":"2026-08-11 17:45:45","reason":"named in this entry, found in this entry's text"},{"version":"2.1.228","anchor":"gateway-can-admit-claude-enterprise-callers-without-its-own-","heading":"Gateway can admit Claude Enterprise callers without its own login (customer-routed inference)","line":"Your gateway can accept Enterprise callers with Anthropic-minted tokens and run without any identity provider.","released_at":"2026-08-11 17:45:45","reason":"named in this entry, found in this entry's text"},{"version":"2.1.228","anchor":"self-hosted-gateway-can-admit-callers-with-anthropic-issued-","heading":"Self-hosted gateway can admit callers with Anthropic-issued JWTs","line":"The gateway can authenticate callers with Anthropic-issued JWTs verified against a remote key endpoint.","released_at":"2026-08-11 17:45:45","reason":"named in this entry, found in this entry's text"},{"version":"2.1.228","anchor":"gateway-config-now-rejects-unsafe-customer-routed-inference-","heading":"Gateway config now rejects unsafe customer-routed-inference setups","line":"Gateway config refuses to start with an empty audience or organization allowlist.","released_at":"2026-08-11 17:45:45","reason":"found in this entry's text"},{"version":"2.1.228","anchor":"gateway-gains-a-second-admission-path-for-machine-identities","heading":"Gateway gains a second admission path for machine identities","line":"The self-hosted gateway can admit machine identities that skip managed-settings policy entirely, off by default.","released_at":"2026-08-11 17:45:45","reason":"named in this entry, found in this entry's text"},{"version":"2.1.228","anchor":"gateway-can-verify-caller-identity-against-an-allowlist-off-","heading":"Gateway can verify caller identity against an allowlist, off unless configured","line":"The gateway can check caller tokens against an organisation allowlist when you enable it in config.","released_at":"2026-08-11 17:45:45","reason":"named in this entry, found in this entry's text"},{"version":"2.1.228","anchor":"gateway-customer-routed-inference-config-disabled-by-default","heading":"Gateway customer-routed inference config, disabled by default","line":"The self-hosted gateway accepts a strict customer-routed inference config block, off unless you enable it.","released_at":"2026-08-11 17:45:45","reason":"named in this entry"}],"entries_total":7,"docs":[],"docs_total":0,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/cri-enabled","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}