Adoption is one line
Point your existing SDK at the gateway and pass a Planverity key. Nothing about your request or response handling changes. That constraint shaped the whole surface: an integration that requires a rewrite does not get adopted, and a gateway nobody adopts governs nothing.
Failover that cannot cheat
Only retryable failures walk the fallback chain — a rate limit or a 5xx. A malformed request or a rejected credential does not, because retrying those on another model reproduces the same error more expensively. Policy is revalidated immediately before each attempt, so a fallback can never reach somewhere the primary was refused.
Streaming that fails honestly
Failover is only possible before the first byte. Once a delta reaches your client, switching models would splice two models' output into one answer — a silently corrupted response, worse than an error. A mid-stream failure therefore ends the stream with an explicit error event rather than quietly recovering.