Exact, transient authority-materialization boundary for managed Gemini calls.
Standalone GeminiEx calls may still use explicit per-request or configured credentials. Governed calls accept credentials only through a frozen-contract shaped materialization request plus separately typed secret material. The request binds account generation, quota scope, lease, authority, operation, endpoint, target, effect, and expiry before any lower HTTP effect occurs.
Summary
Types
@type t() :: %Gemini.GovernedAuthority{ base_url: String.t(), credential_handle_ref: String.t(), credential_query_params: query_params(), headers: header_map(), materialization_request: Gemini.GovernedAuthority.MaterializationRequest.t(), model_account_ref: String.t(), operation_policy_ref: String.t(), provider_ref: String.t(), redaction_ref: String.t() | nil, secret_material: Gemini.GovernedAuthority.SecretMaterial.t(), websocket_path: String.t() | nil }