Imagine a direct‑model request with a ZDR‑marked BYOK key, team‑wide enforcement off, and no request flag. The guide says attestation alone does not enforce ZDR. Use team‑wide ZDR or zeroDataRetention: true to require it; request‑level false cannot cancel team enforcement.
With enforcement on, if marked keys fail, eligible system credentials can take over. No compliant route means failure. But provider‑executed tools may fall outside provider policies without Gateway rejecting the call. That general caveat is not a finding about a particular Kimi route. Check the tool path before treating enabledZeroDataRetention: true as whole‑agent non‑retention evidence. The guide separates eligibility failures (403) from unavailable compliant routes (400). Its update label is September 22; eligibility differs by enforcement mode. This is documented analysis, not a retention test.
Archive portrait of Vercel founder Guillermo Rauch, not a Kimi session or retention test. Photo: Oynickj / Wikimedia Commons, CC BY‑SA 4.0. Cropped and downscaled; adaptation retains the licence.