# AI Gateway群

CURRENT_STATUS: UNKNOWN
OBSERVATION: SPEC_ONLY
FRESHNESS: UNKNOWN
PAGE_TYPE: reference
CANONICAL_URL: /tools/ea-166-ai-gateway
CLAIM_IDS: none
EVIDENCE_IDS: EVD-EA-166-URL-DAB892839DF4, EVD-EA-166-URL-62E5A2D5FE3E, EVD-EA-166-URL-C1CC13E818A2, EVD-EA-166-URL-EC8B42E94341, EVD-EA-166-URL-89526D1B8A91, EA-166-R11-RESEARCH, EA-166-R11-WEB-READBACK
UNKNOWN_IDS: EA-166-UNKNOWN-01, EA-166-UNKNOWN-CURRENTNESS
OPS_IDS: none

## Summary
「AI Gateway群は、複数providerへの接続を集約し、routing／fallback、認証、rate limit、logging、cost、cache、policy等を実装するcontrol-plane群である。LiteLLM、OpenRouter、Vercel、Cloudflareの公式資料は機能境界が異なるため、共通機能と製品固有の実装・契約・版・地域・設定を分離して評価する。」

## Current judgment
1. ESTABLISHED [S1-S4 support]: The category consistently exposes a control-plane pattern—provider/model selection, request routing, and some combination of auth, logging, cost, limits, caching, fallback, or policy—but each product defines a different boundary.
2. ESTABLISHED [S1 support]: LiteLLM documents self-hostable SDK/Proxy distinctions and multi-tenant spend/auth/logging/guardrail/cache/router features.
3. ESTABLISHED [S2 support]: OpenRouter documents a managed normalized API with provider-dependent tool transformation and model allow/exclude/cost-tier routing.
4. ESTABLISHED [S3 support]: Vercel documents managed credentials, provider/fallback routing, logs with provider attempts/latency/tokens/cost, budgets, access/data policies, BYOK, and OIDC for Vercel deployments; the same page says provider terms apply.
5. ESTABLISHED [S4 support]: Cloudflare documents analytics/logging, caching, rate limiting, request retry, model fallback, and multiple provider integrations; its page records a current plan statement, which is still a product/plan gate.
6. INFERENCE [S1-S4]: A gateway can centralize policy and observability, but a cross-product claim such as “gateway guarantees reliability, privacy, cost control, or provider equivalence” is not established by these feature lists. The gateway becomes an additional trust, transformation, outage, and audit boundary.

## Scope
Enterprise AI Core / provider mapping / gateway / governance / cost / observability / security / implementation

## Confirmed
- ESTABLISHED [S1-S4 support]: The category consistently exposes a control-plane pattern—provider/model selection, request routing, and some combination of auth, logging, cost, limits, caching, fallback, or policy—but each product defines a different boundary.
- ESTABLISHED [S1 support]: LiteLLM documents self-hostable SDK/Proxy distinctions and multi-tenant spend/auth/logging/guardrail/cache/router features.
- ESTABLISHED [S2 support]: OpenRouter documents a managed normalized API with provider-dependent tool transformation and model allow/exclude/cost-tier routing.
- ESTABLISHED [S3 support]: Vercel documents managed credentials, provider/fallback routing, logs with provider attempts/latency/tokens/cost, budgets, access/data policies, BYOK, and OIDC for Vercel deployments; the same page says provider terms apply.
- ESTABLISHED [S4 support]: Cloudflare documents analytics/logging, caching, rate limiting, request retry, model fallback, and multiple provider integrations; its page records a current plan statement, which is still a product/plan gate.
- INFERENCE [S1-S4]: A gateway can centralize policy and observability, but a cross-product claim such as “gateway guarantees reliability, privacy, cost control, or provider equivalence” is not established by these feature lists. The gateway becomes an additional trust, transformation, outage, and audit boundary.

## UNKNOWN
- EA-166-UNKNOWN-01: neutral gateway semantics; cross-product interoperability; route determinism; tool/result transformation; cache privacy; budget enforcement; data residency; provider contract; markup; audit completeness; outage/fallback behavior; independent benchmark/SLO.
- EA-166-UNKNOWN-CURRENTNESS: 外部根拠の再確認日がcanonical body/control-planeで確定していないため、currentnessはUNKNOWNとして保持する。日付を推測補完しない。

## Evidence
- EVD-EA-166-URL-DAB892839DF4 (RESEARCH): LiteLLM repository | AUTHOR_ORG: BerriAI / LiteLLM maintainers | CANONICAL_URL: — https://github.com/BerriAI/litellm
- EVD-EA-166-URL-62E5A2D5FE3E (RESEARCH): [S2] SOURCE_CLASS: official_provider_docs | EXACT_TITLE: OpenRouter API Reference / Auto Router | AUTHOR_ORG: OpenRouter | CANONICAL_URL: — https://openrouter.ai/docs/api_reference/overview
- EVD-EA-166-URL-C1CC13E818A2 (RESEARCH): [S2] SOURCE_CLASS: official_provider_docs | EXACT_TITLE: OpenRouter API Reference / Auto Router | AUTHOR_ORG: OpenRouter | CANONICAL_URL: https://openrouter.ai/docs/api_reference/o — https://openrouter.ai/docs/guides/routing/routers/auto-router
- EVD-EA-166-URL-EC8B42E94341 (RESEARCH): [S3] SOURCE_CLASS: official_provider_docs | EXACT_TITLE: Vercel AI Gateway: Models, Routing, and Observability | AUTHOR_ORG: Vercel | CANONICAL_URL: — https://vercel.com/docs/ai-gateway
- EVD-EA-166-URL-89526D1B8A91 (RESEARCH): [S4] SOURCE_CLASS: official_provider_docs | EXACT_TITLE: Cloudflare AI Gateway | AUTHOR_ORG: Cloudflare | CANONICAL_URL: — https://developers.cloudflare.com/ai-gateway/
- EA-166-R11-RESEARCH (RESEARCH): EA-166 監査済みresearch / canonical revision binding
- EA-166-R11-WEB-READBACK (IMPL): EA-166 Web body identity / canonical readback

## Failure / limits
Feature-list overlap is not functional equivalence. Managed versus OSS deployment, release, plan, region, BYOK, provider contract, log retention, cache scope, route algorithm, retry semantics, transformed tool schemas, and audit export differ. Vendor pages do not prove independent latency, quality, privacy, or SLO. Fallback/retry may duplicate or alter requests. No cross-gateway benchmark or live call was run.
## Failure / limits
Do not merge LiteLLM OSS, OpenRouter managed API, Vercel managed gateway, and Cloudflare gateway into one product or one guarantee. Do not state that the presence of logs, budgets, fallback, or cache equals effective enforcement without configuration and negative testing.
UNIT_CLOSE_STATUS: INDIVIDUAL_BOUNDED_CLOSE / EVIDENCE_RECORDED / UNKNOWN_PRESERVED
## Practice
product and release/commit; self-hosted versus managed; plan/region; provider/model catalog; API transformation; credentials/BYOK/OIDC; routing/fallback/retry; budgets/rate limits; caching; logs/traces/audit export; retention/data residency; admin/RBAC; outage behavior; pricing/markup; contract/SLO.
## Practice
Evidence-only desk research. No gateway was configured, authenticated, called, or compared with a live provider.
## Practice
No cross-gateway conformance, latency, cost, fallback-duplication, transformation, privacy, or outage-recovery evaluation was run.
## Practice
A gateway centralizes high-value secrets and high-sensitivity telemetry. Require route/provider attribution, request transformation record, policy decision, token/cost source, retry attempts, cache hit, redaction, retention, and downstream result. Treat gateway outage and misrouting as distinct failure modes from provider outage. Cost must include gateway, provider, retries, cache/storage, and operational review; not measured.
## Practice
Future update Work should build a four-product comparison matrix with pinned release/page dates and a safe read-only TEST_PROFILE: direct versus gateway output, provider attribution, schema/tool transformation, retry/fallback, rate/budget, cache isolation, logging/redaction, data policy, outage, and audit readback. No external side-effect tool should be enabled.
## WHY_THIS_MATTERS_TO_UPDATE
Enterprise AI gateway is a control-plane category rather than one universal product. A useful update must compare concrete gateway claims while keeping self-hosted OSS, managed routing, provider transformation, logging, budget, cache, and data-policy surfaces separate.

## SCOPE_ROUTING
Enterprise AI Core / provider mapping / gateway / governance / cost / observability / security / implementation

## CLAIM_OR_RESEARCH_QUESTION
Across LiteLLM, OpenRouter, Vercel AI Gateway, and Cloudflare AI Gateway, which gateway capabilities are directly documented, and which cross-product conclusions remain unproven?

## EVIDENCE_TABLE
[S1] SOURCE_CLASS: author_maintained_repo | EXACT_TITLE: BerriAI/litellm - LiteLLM repository | AUTHOR_ORG: BerriAI / LiteLLM maintainers | CANONICAL_URL: https://github.com/BerriAI/litellm | PUBLICATION_UPDATE_ACCESS: accessed 2026-09-14 00:16 JST | VERSION_RELEASE_TAG: default branch; unpinned | SUPPORTING_LOCATOR: lines 542-549 for Proxy/SDK, centralized auth, multi-tenant spend, logging/guardrails/caching, Router retry/fallback, stable-tag note | EVIDENCE_LABEL: OSS_PRACTICE + PRODUCT_VOLATILE | RELATION: support for LiteLLM's documented gateway surface; limit for release/provider parity.
[S2] SOURCE_CLASS: official_provider_docs | EXACT_TITLE: OpenRouter API Reference / Auto Router | AUTHOR_ORG: OpenRouter | CANONICAL_URL: https://openrouter.ai/docs/api_reference/overview and https://openrouter.ai/docs/guides/routing/routers/auto-router | PUBLICATION_UPDATE_ACCESS: accessed 2026-09-14 00:16 JST | VERSION_RELEASE_TAG: current docs; unpinned | SUPPORTING_LOCATOR: API normalization/tool transformation lines 25-36 and 75-81; model allow/exclude and cost-tier lines 450-487 | EVIDENCE_LABEL: PRODUCT_VOLATILE + VERIFIED_SPEC | RELATION: support for managed API/routing claims; limit for cross-provider equivalence.
[S3] SOURCE_CLASS: official_provider_docs | EXACT_TITLE: Vercel AI Gateway: Models, Routing, and Observability | AUTHOR_ORG: Vercel | CANONICAL_URL: https://vercel.com/docs/ai-gateway | PUBLICATION_UPDATE_ACCESS: current page accessed 2026-09-14 00:16 JST | VERSION_RELEASE_TAG: current docs; product/plan availability volatile | SUPPORTING_LOCATOR: lines 386-423 for managed gateway, provider/fallback routing, logs, latency/token/cost, budgets/access/data policies/BYOK; lines 426-433 for API key/OIDC and logging/budget controls | EVIDENCE_LABEL: VERIFIED_SPEC + PRODUCT_VOLATILE | RELATION: support for Vercel-specific control surface; limit for plan/terms/provider behavior.
[S4] SOURCE_CLASS: official_provider_docs | EXACT_TITLE: Cloudflare AI Gateway | AUTHOR_ORG: Cloudflare | CANONICAL_URL: https://developers.cloudflare.com/ai-gateway/ | PUBLICATION_UPDATE_ACCESS: last updated 2026-04-20; accessed 2026-09-14 00:16 JST | VERSION_RELEASE_TAG: current docs; page says available on all plans, subject to current product terms | SUPPORTING_LOCATOR: lines 138-147 for visibility/control; lines 157-182 for analytics, logging, caching, rate limiting, retry/fallback; lines 186-188 for provider examples | EVIDENCE_LABEL: VERIFIED_SPEC + PRODUCT_VOLATILE | RELATION: support for Cloudflare-specific controls; limit for actual configuration and provider parity.

## FINDINGS
1. ESTABLISHED [S1-S4 support]: The category consistently exposes a control-plane pattern—provider/model selection, request routing, and some combination of auth, logging, cost, limits, caching, fallback, or policy—but each product defines a different boundary.
2. ESTABLISHED [S1 support]: LiteLLM documents self-hostable SDK/Proxy distinctions and multi-tenant spend/auth/logging/guardrail/cache/router features.
3. ESTABLISHED [S2 support]: OpenRouter documents a managed normalized API with provider-dependent tool transformation and model allow/exclude/cost-tier routing.
4. ESTABLISHED [S3 support]: Vercel documents managed credentials, provider/fallback routing, logs with provider attempts/latency/tokens/cost, budgets, access/data policies, BYOK, and OIDC for Vercel deployments; the same page says provider terms apply.
5. ESTABLISHED [S4 support]: Cloudflare documents analytics/logging, caching, rate limiting, request retry, model fallback, and multiple provider integrations; its page records a current plan statement, which is still a product/plan gate.
6. INFERENCE [S1-S4]: A gateway can centralize policy and observability, but a cross-product claim such as “gateway guarantees reliability, privacy, cost control, or provider equivalence” is not established by these feature lists. The gateway becomes an additional trust, transformation, outage, and audit boundary.

## LIMITS / COUNTEREVIDENCE / FAILURE ENVELOPE
Feature-list overlap is not functional equivalence. Managed versus OSS deployment, release, plan, region, BYOK, provider contract, log retention, cache scope, route algorithm, retry semantics, transformed tool schemas, and audit export differ. Vendor pages do not prove independent latency, quality, privacy, or SLO. Fallback/retry may duplicate or alter requests. No cross-gateway benchmark or live call was run.

## AVAILABILITY_GATES
product and release/commit; self-hosted versus managed; plan/region; provider/model catalog; API transformation; credentials/BYOK/OIDC; routing/fallback/retry; budgets/rate limits; caching; logs/traces/audit export; retention/data residency; admin/RBAC; outage behavior; pricing/markup; contract/SLO.

## IMPLEMENTATION_STATE
Evidence-only desk research. No gateway was configured, authenticated, called, or compared with a live provider.

## BENCHMARK_OR_EVAL
No cross-gateway conformance, latency, cost, fallback-duplication, transformation, privacy, or outage-recovery evaluation was run.

## SECURITY / PRIVACY / AUDIT / COST / OPERABILITY
A gateway centralizes high-value secrets and high-sensitivity telemetry. Require route/provider attribution, request transformation record, policy decision, token/cost source, retry attempts, cache hit, redaction, retention, and downstream result. Treat gateway outage and misrouting as distinct failure modes from provider outage. Cost must include gateway, provider, retries, cache/storage, and operational review; not measured.

## SAFE_WORDING_FOR_FUTURE_BOOK
「AI Gateway群は、複数providerへの接続を集約し、routing／fallback、認証、rate limit、logging、cost、cache、policy等を実装するcontrol-plane群である。LiteLLM、OpenRouter、Vercel、Cloudflareの公式資料は機能境界が異なるため、共通機能と製品固有の実装・契約・版・地域・設定を分離して評価する。」

## UPDATE_WORK_HANDOFF
Future update Work should build a four-product comparison matrix with pinned release/page dates and a safe read-only TEST_PROFILE: direct versus gateway output, provider attribution, schema/tool transformation, retry/fallback, rate/budget, cache isolation, logging/redaction, data policy, outage, and audit readback. No external side-effect tool should be enabled.

## OPEN_UNKNOWN
neutral gateway semantics; cross-product interoperability; route determinism; tool/result transformation; cache privacy; budget enforcement; data residency; provider contract; markup; audit completeness; outage/fallback behavior; independent benchmark/SLO.

## STOP_CONDITION
Do not merge LiteLLM OSS, OpenRouter managed API, Vercel managed gateway, and Cloudflare gateway into one product or one guarantee. Do not state that the presence of logs, budgets, fallback, or cache equals effective enforcement without configuration and negative testing.
UNIT_CLOSE_STATUS: INDIVIDUAL_BOUNDED_CLOSE / EVIDENCE_RECORDED / UNKNOWN_PRESERVED

## EVIDENCE PACKET
---

NEXT: /agent/start.json
STOP: This is a knowledge projection, not an execution order.