Audit headers
Every response is auditable.
The routing decision is echoed back on each 200, so you can record exactly what served the request and what it cost.
response headers
x-phi-routed: infomaniak-nemotron-nano-30b/CH/phi # model / region / data class
x-phi-provider: infomaniak # verified sub-processor that answered
x-phi-tier: phi # phi | non_phi
x-phi-attempts: 1 # routes tried before success
x-phi-usage: verified # verified | missing | suspect
x-phi-cost-micro: 4200 # metered cost, micro-USD
x-request-id: 9f1c… # quote in support
x-phi-provider names the verified upstream sub-processor that answered, and x-phi-usage grades how far the billed amount can be trusted — verified (a sane upstream count), missing (none reported, billed $0), or suspect (malformed, clamped). x-phi-usage and x-phi-cost-micro are absent on streamed responses, where usage lands after the headers are sent.
A 403 phi_blocked means you asked for PHI in a region/modality with no verified host — the gateway refuses rather than crossing a border. Pin a region that has one (e.g. CH or EU).