[Integration]: Governance headers in Helicone LLM proxy

[nagasatish007]

Summary

Helicone proxies LLM calls for observability. TealTiger governance metadata (decision, risk_score, reason_codes) should flow as custom headers through Helicone, making governance visible in their dashboard without additional integration work.

Deliverables

• Custom header injection: X-TealTiger-Action, X-TealTiger-Risk-Score
• Helicone dashboard shows governance status per request
• Example: governed OpenAI calls proxied through Helicone

[arian-gogani]

the custom-header injection through Helicone is a clean composition point, and worth flagging the symmetric design for the receipt side so the Helicone dashboard can surface both halves of the audit picture at once.

TealTiger emits the decision (X-TealTiger-Action, X-TealTiger-Risk-Score, X-TealTiger-Reason-Codes) at the gate. for compliance buyers, the audit also needs a verifiable record of that decision, signed with a key the operator does not control, so a third party can recompute the decision offline.

if Helicone is going to carry governance metadata through proxy headers, adding a parallel X-Receipt-Ref header that contains a content-derived identifier over the canonical decision payload (something like SHA-256(JCS({agent_id, action_type, scope, policy_version, timestamp_ms}))) lets the dashboard show:

1. what the gate decided (TealTiger fields).
2. the receipt reference the decision was bound to.
3. on click, the receipt itself, verifiable against the agent's published Ed25519 key.

this is the same pattern that has converged across vaara, the x402 settlement-receipt extension, AgentTrust, agent-guard, and nobulex over the past 90 days, and it composes cleanly with the gate decision rather than competing with it. the receipt-ref header would also work as the join key from a Helicone log entry back to whatever external evidence store an enterprise uses (BigQuery, Datadog, or a dedicated audit pipeline).

for the EU AI Act Article 12 enforcement window starting August 2, 2026, this is the seam where Helicone's existing observability surface starts producing evidence regulators can actually verify.