The governance layer LLM proxies promised as a TypeScript library you can read. Every call runs through one governed pipeline: rate limit → spend caps (per-user + global circuit breaker) → cache → schema-validated provider failover → usage log → LLM-judge No sidecar proxy to deploy.