# Unhardcoded Use

> Use a running unhardcoded router — as a CALLER (send an OpenAI-compatible request carrying a Σ_pol policy_ir / Σ_flow flow_ir, or a profile/family/pin model string; session pinning; streaming; dry-run before spending) and as an OPERATOR (dashboard, /x/* endpoints, mint keys, hot-add providers, AntSeed wallet). Load this when integrating an app or agent against the router, wiring a client, minting keys, debugging a route, or operating the host. To AUTHOR a policy term against this host's live catalog use the root SKILL.md (sigma-policy-author); to develop the host itself use unhardcoded-contribute.

- Skill: `genlayerlabs/unhardcoded-use` (Agent Skill)
- Install (CLI): `npx skillmds@latest add genlayerlabs/unhardcoded-use`
- Raw SKILL.md: https://api.skillmd.com/api/skills/genlayerlabs/unhardcoded-use/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: genlayerlabs (https://skillmd.com/u/genlayerlabs)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/genlayerlabs/unhardcoded-use

---


# Using a running unhardcoded router

The router is an **OpenAI-compatible endpoint**. You do not pick a model name —
you send a **policy** (data) and the host filters/ranks/picks a `(provider,
model)` over the *operator's* keys, falling back on provider errors. When a
policy is present the request's `model` field is ignored for selection.

There are two roles: **caller** (hits `/v1/*` with a bearer key) and **operator**
(the dashboard + the internal `/x/*` endpoints). This skill orients both; the
detail lives in `docs/` (linked inline).

## As a caller

**Auth.** Bearer key, prefix `llmr_…`. Mint one from the dashboard (Consumers)
or `POST /dashboard/api/keys`. Send it as `Authorization: Bearer llmr_…`.

**Send a call.** `POST /v1/chat/completions` (also `POST /v1/responses`), body =
standard OpenAI + one of:
- `policy_ir`: a Σ_pol term — decides which model serves this one call.
- `flow_ir`: a Σ_flow term (`["flow", nodes]`) — a DAG of calls, each node
  carrying its own policy.
- no policy → the host's `default` policy runs. Or steer via the `model` string:
  `profile:<name>`, `family:<f>`, `pin:<provider>/<family>`. You can also
  path-address a profile: `POST /{profile}/v1/chat/completions`.

**Session pinning.** Set `X-Unhardcoded-Session: <conversation-id>` (or a
`session` body field — body wins). The router keeps the conversation on its
cache-hot peer (warm prompt-cache across turns) and meters spend per session.

**Streaming.** `stream: true`. Errors *before the first token* return a normal
JSON error (no partial SSE commit), so client-side fallback still works.

**Other caller endpoints.** `GET /v1/models` (families served), `POST /v1/compact`
(stateless context sealing — hand it your turns, get a sealed summary back).

**Dry-run before you spend** (these cost nothing):
- `POST /x/policy/normalize` — admit a `policy_ir` + get its `fingerprint`/version.
- `POST /x/rank` — the ordered candidates this host *would* try for a term.
- `POST /x/policy/build` — elaborate a declarative spec → a `policy_ir`.
- `POST /x/flow/normalize` — admit + identify a `flow_ir`.
- `GET /x/fields` — the live field schema a policy may reference.

**Authoring the policy itself is a separate skill.** The root `SKILL.md`
(`sigma-policy-author`) is the canonical authoring guide: it embeds this host's
**live** model/provider catalog and field vocabulary and is test-gated so it can
only teach ops the core actually admits. Load it to write terms; the normative
grammar is `core/docs/SIGMA-POL.md`.

## As an operator

The `/x/*` endpoints are **operator-only** — the ingress proxy hides them from
consumers. The **dashboard** (Analytics · Debugger · Activity · Catalog · SKILL.md · Config · Settings)
wraps most of them:
- **Keys:** mint/list consumer keys.
- **Providers:** hot-add or re-key a provider at runtime — `POST /x/providers`,
  `POST /x/provider-key` (persisted as overlays; no redeploy).
- **Observe:** `GET /x/runtime` (breakers, EMA metrics, source freshness),
  `GET /x/market` (full price book per family), `GET /x/calls` (recent ledger),
  `GET /x/session/{sid}` and `GET /x/sessions` (per-session meters).
- **Reload:** `POST /x/config/reload`, `POST /x/codex/reload`.
- **AntSeed wallet:** `POST /x/wallet/deposit|withdraw|refresh` (funds the
  marketplace buyer escrow — see the `antseed-prod-deposit` runbook for prod).

## Gotchas

- **`model` is ignored when a policy is present** — the policy drives selection.
- **The host envelope only narrows.** `config.policy_envelope` is `∧`-composed
  onto every caller policy: a caller can tighten the host's invariants, never
  widen them. A term that passes your local check can still be narrowed by the host.
- **Seed prices are a placeholder.** `metrics.live.lua` is intentionally fake
  (see `docs/METRICS.md`); real EMA prices/latency accrue from live calls. Don't
  trust the seed numbers for cost reasoning on a fresh host.
- **Codex ranks near-free by design** (subscription = sunk cost, seeded ≈ $0), so
  a cheapest-first policy prefers it when available — deliberate, not a bug.

## Where to read more

- Root `SKILL.md` — author Σ_pol/Σ_flow against this host's live catalog (the authoring canon).
- `docs/DEPLOY.md` — the client contract (OpenAI SDK base_url), deploy + provider modes.
- `docs/USAGE_ENDPOINTS.md` — per-key usage stats API + the consumer self-service model.
- `docs/PROVIDERS.md` — per-provider auth (bearer/oauth/none), the AntSeed node + wallet.
- `docs/OPENAI-CODEX.md` — the ChatGPT-subscription (Codex) provider, its wire shape and setup.
- `docs/METRICS.md` — the metrics seed format and why it's fake.