Nomyo Router Plugin: Full Discovery Support

The Nomyo Router plugin now supports API key authentication, health monitoring, blacklist controls, and payload deduplication.

Overview

The Nomyo Router integration has matured from a basic discovery endpoint to a full-featured compliance agent. This release adds production-grade features including API key authentication, health monitoring, blacklist management, and automatic payload deduplication.

New Features

API Key Authentication

Each tenant receives a dedicated AISSURANCE_KEY for the discovery channel. This key is separate from Nomyo Router’s own authentication, providing defense-in-depth. Keys can be revoked independently, and all discovery payloads are verified with HMAC-SHA256 signatures.

Health Monitoring

Two levels of health checks are now available:

Global health (GET /discovery/health): Shows total connected instances, success rate, and last sync time across all tenants
Per-tenant health (GET /discovery/health/tenant/{id}): Shows instance-specific metrics for troubleshooting

Blacklist Controls

Admin users can now block specific IPs or tenant keys via the admin API. This is useful for:

Suspected abuse or unauthorized data submissions
Revoked tenant access that hasn’t been cleaned up client-side
Temporary blocking during security investigations

Payload Deduplication

Identical discovery payloads received within the polling window are automatically deduplicated. This prevents duplicate AI system records and ensures the inventory stays clean even when Nomyo Router retries failed submissions.

How It Works

The integration flow:

Nomyo Router collects model inventory, endpoint registry, and telemetry data
Data is packaged into a structured JSON payload with HMAC signature
Nomyo Router POSTs to aissurance’s discovery endpoint
aissurance verifies the HMAC signature and tenant API key
Payload is deduplicated against recent submissions
AI system records are created or updated
Classification engine runs on newly discovered systems
Available evidence is auto-filled into the Evidence Canvas

Configuration

compliance:
  enabled: true
  server_url: "https://app.aissurance.eu/api/discovery"
  api_key: "${AISSURANCE_KEY}"
  polling_interval: 300
  batch_size: 50

Fallbacks

For environments without Nomyo Router, aissurance continues to support:

Manual CSV Import: Upload model inventory spreadsheets
Docker API Scan: Detect AI containers via the Docker API

What’s Next

The next phase adds config reporting — Nomyo Router will report its configuration state to aissurance, enabling drift detection and compliance auditing of the router itself.