The keys an image run hands the runner as APIKeys: at most one per driver class, resolved as
ResolveImageGenerationAPIKey does. A key reaches only the candidates of its own driver
class, so a run's own key survives failover to another vendor only if that vendor's class has
one here.
sources should be in the order the runner tries its candidates. When two sources share a driver
class, the first whose key resolves wins, so the key a class carries is the one for the vendor the
runner reaches first. A class with no key anywhere is left out: the runner may still resolve a
credential binding for it, and otherwise skips it.
Under a 'RuntimeOnly'scope only the run's own keys are collected, and the runner (given the
same scope) skips every class without one rather than resolving a platform credential for it.
The keys an image run hands the runner as
APIKeys: at most one per driver class, resolved as ResolveImageGenerationAPIKey does. A key reaches only the candidates of its own driver class, so a run's own key survives failover to another vendor only if that vendor's class has one here.sourcesshould be in the order the runner tries its candidates. When two sources share a driver class, the first whose key resolves wins, so the key a class carries is the one for the vendor the runner reaches first. A class with no key anywhere is left out: the runner may still resolve a credential binding for it, and otherwise skips it.Under a
'RuntimeOnly'scopeonly the run's own keys are collected, and the runner (given the same scope) skips every class without one rather than resolving a platform credential for it.