Apache Casbin Gateway
3. Providers

3.4 Authenticity

A reseller can sell a frontier model and serve a cheaper one, count a cached prefix as fresh input, or answer in an API it only pretends to speak. None of that shows up in the traffic.

Authenticity asks the upstream directly, and comes back with a score out of 100 and a grade from A to F.

Authenticity

Nothing to press

Every provider is probed on its own:

  • when it is added,
  • when its endpoint, type or key changes,
  • when it has never been probed,
  • and again whenever its report goes stale.

The grade is on the Authenticity page and above the agents on the home page.

SettingDefaultEffect
providerProbeModeautomanual probes only when asked; off never probes
providerProbeIntervalHours—How long before a report goes stale

A probe spends a few cents of that provider's own credit, which the report states next to the finding.

What the test cases ask

The score is only a summary of the cases behind it, and every one of them is on the Test cases tab, naming the question it puts to the upstream, the exact request it sends, how the answer is judged, and what it is worth.

Test cases

Half of them ask what the upstream is:

  • Is the model that answers the one that was asked for — worth half credit off a vendor's own endpoint, where that field is whatever the upstream typed there.
  • Which vendor does the model say trained it.
  • Was anything injected in front of the request.
  • Do several identical requests come back from the same model at all.
  • Is a documented parameter (logprobs, n, a stop sequence) honoured, refused, or accepted with a 200 and quietly dropped.
  • A test bank of questions with one right answer, from counting the letters in a word to who wrote the Preface to the Pavilion of Prince Teng.

The rest read the envelope:

  • Does a two-level tool schema survive a forced call.
  • Does the event stream carry everything the API documents.
  • Is the prompt cache really accounted for.
  • Are two identical requests billed the same.
  • Are the vendor's own headers there.

Make it your own

Reweight a case, turn it off, rewrite its question, or add one of your own. The questions worth asking of a reseller are not the same everywhere, and a score whose method is not published is not evidence.

Restore defaults puts the shipped suite back and leaves your own cases alone.

The half that costs nothing

The report has a second half that sends no request at all: what the records Gateway already kept say about that upstream —

  • how much of the cache it really accounted for,
  • how many attempts failed,
  • how long it took to answer,
  • and how much of what it served has no price.

Next: 3.5 Import settings and links.

Edit on GitHub
Apache Incubator

Apache Casbin (Incubating) is an effort undergoing incubation at The Apache Software Foundation (ASF), sponsored by the Apache Incubator. Incubation is required of all newly accepted projects until a further review indicates that the infrastructure, communications, and decision making process have stabilized in a manner consistent with other successful ASF projects. While incubation status is not necessarily a reflection of the completeness or stability of the code, it does indicate that the project has yet to be fully endorsed by the ASF.

Copyright © 2026 The Apache Software Foundation, Licensed under the Apache License, Version 2.0.

Apache, Apache Casbin, the names of Apache projects, and the feather logo are either registered trademarks or trademarks of The Apache Software Foundation in the United States and/or other countries. All other marks mentioned may be trademarks or registered trademarks of their respective owners.

On this page