Portkey routes and logs LLM traffic. Routing tells you a request went through — it doesn't tell you whether that specific action should have been allowed. RaksHex evaluates and enforces that decision.
| Feature | Portkey | RaksHex |
|---|---|---|
| LLM Gateway / Router | Advanced (fallbacks, retries, load balancing) | Not the primary focus |
| Action-Level Authorization | Rate limiting & fallback routing, not authorization | Every semantic action evaluated at call time |
| Delegated Authority | Not available | Parent-to-child attenuation, enforced in code |
| Credential Mediation | Gateway-level key management | Claim-before-spend, no-redirect broker; DENY blocks the credential |
| Tamper-Evident Ledger | Request logs, not a decision ledger | Hash-chained Action Ledger |
| Policy Engine | Not available | Priority-ordered rules evaluated per action |
| MCP Tool Governance | Not available | Adversarial-intent scanning on tool calls |
| Enforced Denial | Manual key revocation to actually stop a caller | DENY blocks the credential, not just the route |
| Prompt Versioning / Playground | Versioned prompt management | Not available |
| Self-hosted Option | Enterprise plan only | Available for self-hosted deployments |