One front door + provider protocol in front of every LLM provider.
exact versions are immutable; binary and bundle artifacts are digest-pinned.