People sign in to the app; runtime actors call the API. An actor is a registered
non-human identity — a service, a job, an agent — that holds an egw_live_… credential
and is bound to the projects it may spend from.
Why actors, not personal keys#
- A deploy never depends on a person's account surviving re-orgs.
- Usage is attributed to the actor and its project, so drill-downs stay honest.
- Credentials rotate on the actor without touching team membership.
Rotation with a 7-day overlap#
Rotating issues a new credential while the old one keeps working for a 7-day overlap window. Roll your fleet at leisure, then revoke early if you're done sooner.
# after rotation, both keys authenticate until the window closes
curl https://api.aigridapp.com/v1/models -H "Authorization: Bearer $OLD_KEY" # still 200
curl https://api.aigridapp.com/v1/models -H "Authorization: Bearer $NEW_KEY" # 200