404 request refusals

When no eligible provider serves a model in the required jurisdiction, the router refuses the request.

Sending a request to a location forbidden by policy is a cross-border transfer, even if the request succeeds.

Fail-closed routing requires coverage records per model and region. Capacity must be planned inside the boundary because spillover is unavailable. On-call teams need a refusal runbook; escalation to a global endpoint is not available.

A refusal records that the boundary held and a capability is missing.