Remove Havre-side content filtering from BYOK requests #272

Merged
teahubxyz merged 2 commits from havre/byok-unfiltered-20261024 into gh-pages 2026-10-25 00:30:56 +00:00
Owner

Havre was applying its own content policy before sending BYOK requests to Venice: narrowing the character catalog, adding restrictive prompt instructions, changing image safety settings based on labels and reference origin, and blocking actions behind local checks. The owner wants Venice and the selected model to handle moderation.

Changes

  • Remove adult-label catalog/lookup exclusions and age-confirmation gates. Adult labels remain portable metadata and optional model preferences; old saved filtering preferences and filtered catalog caches no longer restrict results.
  • Remove injected content rules, keyword screening, and uploaded-reference/provenance permission checks. All five app image generation/edit paths send safe_mode: false.
  • Keep compatible media models selectable, retain provider-returned images, and show provider failures without silently retrying another model.
  • Make remix similarity advisory so it does not block saving.
  • Update the interface, schema, owner charter, agent documentation, and regression tests to preserve this BYOK boundary.

Validation

  • Full unit suite: 100/100 passed, 0 failures or skips (node --test tests/*.test.mjs).
  • Full Chrome/Playwright smoke: passed, exit 0, smoke ok. Uses mocked Venice endpoints and covers old saved settings/cache, mixed catalogs, neutral prompts, imported photo/video references, provider blur/errors, no automatic refusal fallback, actual remix saving, spending, exports, reloads, and mobile.
  • Independent source and smoke review: PASS. Review retained key isolation, CSP/URL/file validation, quote confirmation, allowance exhaustion/refunds, and provenance checks.
  • git diff --check and JavaScript syntax checks passed.
  • All 17 source files were SHA-256 verified against the published source commit. The final smoke synchronization commit reports the tested hash 145e06f3c5f127cee312850a2768ee7cb43ac2639a6381918ef6ac0449b03f17.

Evidence: unit receipt mac-543b946f80d44dbf83313337b11e1f83; browser receipt mac-214ee6e8db18476d843f4c5e311d5676; source-byte verification mac-1df32bce19424f25b33759a17b1926c9. Tested/published head: 4cb2dd43eb05e2f8d20a483fceec7da9b2f05172. No paid inference was used.

Existing API-key handling, CSP, structural/file/URL validation, spending confirmations, card metadata, and lineage remain in place.

Havre was applying its own content policy before sending BYOK requests to Venice: narrowing the character catalog, adding restrictive prompt instructions, changing image safety settings based on labels and reference origin, and blocking actions behind local checks. The owner wants Venice and the selected model to handle moderation. ## Changes - Remove adult-label catalog/lookup exclusions and age-confirmation gates. Adult labels remain portable metadata and optional model preferences; old saved filtering preferences and filtered catalog caches no longer restrict results. - Remove injected content rules, keyword screening, and uploaded-reference/provenance permission checks. All five app image generation/edit paths send `safe_mode: false`. - Keep compatible media models selectable, retain provider-returned images, and show provider failures without silently retrying another model. - Make remix similarity advisory so it does not block saving. - Update the interface, schema, owner charter, agent documentation, and regression tests to preserve this BYOK boundary. ## Validation - Full unit suite: **100/100 passed**, 0 failures or skips (`node --test tests/*.test.mjs`). - Full Chrome/Playwright smoke: **passed**, exit 0, `smoke ok`. Uses mocked Venice endpoints and covers old saved settings/cache, mixed catalogs, neutral prompts, imported photo/video references, provider blur/errors, no automatic refusal fallback, actual remix saving, spending, exports, reloads, and mobile. - Independent source and smoke review: **PASS**. Review retained key isolation, CSP/URL/file validation, quote confirmation, allowance exhaustion/refunds, and provenance checks. - `git diff --check` and JavaScript syntax checks passed. - All 17 source files were SHA-256 verified against the published source commit. The final smoke synchronization commit reports the tested hash `145e06f3c5f127cee312850a2768ee7cb43ac2639a6381918ef6ac0449b03f17`. Evidence: unit receipt `mac-543b946f80d44dbf83313337b11e1f83`; browser receipt `mac-214ee6e8db18476d843f4c5e311d5676`; source-byte verification `mac-1df32bce19424f25b33759a17b1926c9`. Tested/published head: `4cb2dd43eb05e2f8d20a483fceec7da9b2f05172`. No paid inference was used. Existing API-key handling, CSP, structural/file/URL validation, spending confirmations, card metadata, and lineage remain in place.
teahubxyz added 2 commits 2026-10-25 00:28:20 +00:00
teahubxyz merged commit d6f6873e57 into gh-pages 2026-10-25 00:30:56 +00:00
Sign in to join this conversation.