Delegated billing
Set the real
spend cap.
TrustedRouter creates a delegated key in your workspace, so your credits pay for the run. The key is full access to your TrustedRouter workspace, not a narrowly scoped model token. OpenEvalz keeps it in an expiring server-side session; your HTTP-only cookie contains only an opaque session id.