docs: update AI Governance label and add v2.32 requirement (#24708)

## Summary

Replace the "Premium" label with "AI Governance Add-On" and add a
disclaimer that the AI Governance Add-On is required for AI Gateway and
Agent Firewall as of Coder v2.32, across all AI Governance doc pages and
their children.

## Changes

**Label and requirement updates (7 files):**
- `docs/ai-coder/ai-governance.md`: Removed "(Premium)" from title;
updated GA section to state add-on required as of v2.32.
- `docs/ai-coder/ai-gateway/setup.md`: "Premium license" → "AI
Governance Add-On license".
- `docs/ai-coder/ai-gateway/ai-gateway-proxy/setup.md`: "Premium
license" → "AI Governance Add-On".
- `docs/ai-coder/ai-gateway/clients/claude-code.md`: "(Premium feature)"
→ "(AI Governance Add-On)".
- `docs/manifest.json`: `"state": ["premium"]` → `"state": ["ai
governance add-on"]` for 4 nav entries.

**Disclaimer added to all child pages (26 files):**

AI Gateway pages (18):
`index.md`, `setup.md`, `audit.md`, `monitoring.md`, `mcp.md`,
`reference.md`, `ai-gateway-proxy/index.md`,
`ai-gateway-proxy/setup.md`, `clients/index.md`,
`clients/claude-code.md`, `clients/codex.md`, `clients/mux.md`,
`clients/opencode.md`, `clients/factory.md`, `clients/cline.md`,
`clients/kilo-code.md`, `clients/roo-code.md`, `clients/vscode.md`,
`clients/jetbrains.md`, `clients/zed.md`, `clients/copilot.md`

Agent Firewall pages (8):
`index.md`, `version.md`, `landjail.md`, `rules-engine.md`,
`nsjail/index.md`, `nsjail/docker.md`, `nsjail/k8s.md`, `nsjail/ecs.md`

Other: `security.md`

> [!NOTE]
> The `"ai governance add-on"` state value in `manifest.json` is new.
The docs site renderer may need to be updated to support this state
value.

> Generated by Coder Agents

.github/.linkspector.yml

@@ -29,5 +29,6 @@ ignorePatterns:
   - pattern: "developer.hashicorp.com/terraform/language"
   - pattern: "platform.openai.com"
   - pattern: "api.openai.com"
+  - pattern: "openai.com"
 aliveStatusCodes:
   - 200

docs/ai-coder/agent-firewall/index.md

@@ -7,6 +7,10 @@ autonomous programs, such as AI agents, can access and use.
 of Agent Firewall blocking a process.
 
 > [!NOTE]
+> Agent Firewall requires the [AI Governance Add-On](../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access Agent Firewall.
+>
 > Agent Firewall was previously known as "Agent Boundaries". Some
 > configuration options and internal references still use the old name
 > and will be updated in a future release.

docs/ai-coder/agent-firewall/landjail.md

@@ -1,5 +1,10 @@
 # landjail Jail Type
 
+> [!NOTE]
+> Agent Firewall requires the [AI Governance Add-On](../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access Agent Firewall.
+
 landjail is Agent Firewall's alternative jail type that uses Landlock V4 for
 network isolation.
 

docs/ai-coder/agent-firewall/nsjail/docker.md

@@ -1,5 +1,10 @@
 # nsjail on Docker
 
+> [!NOTE]
+> Agent Firewall requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access Agent Firewall.
+
 This page describes the runtime and permission requirements for running Agent
 Firewall with the **nsjail** jail type on **Docker**.
 

docs/ai-coder/agent-firewall/nsjail/ecs.md

@@ -1,5 +1,10 @@
 # nsjail on ECS
 
+> [!NOTE]
+> Agent Firewall requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access Agent Firewall.
+
 This page describes the runtime and permission requirements for running Agent
 Firewall with the **nsjail** jail type on **Amazon ECS**.
 

docs/ai-coder/agent-firewall/nsjail/index.md

@@ -1,5 +1,10 @@
 # nsjail Jail Type
 
+> [!NOTE]
+> Agent Firewall requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access Agent Firewall.
+
 nsjail is Agent Firewall's default jail type that uses Linux namespaces to
 provide process isolation. It creates unprivileged network namespaces to control
 and monitor network access for processes running under Boundary.

docs/ai-coder/agent-firewall/nsjail/k8s.md

@@ -1,5 +1,10 @@
 # nsjail on Kubernetes
 
+> [!NOTE]
+> Agent Firewall requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access Agent Firewall.
+
 This page describes the runtime and permission requirements for running Agent
 Firewall with the **nsjail** jail type on **Kubernetes**.
 

docs/ai-coder/agent-firewall/rules-engine.md

@@ -1,5 +1,10 @@
 # Rules Engine Documentation
 
+> [!NOTE]
+> Agent Firewall requires the [AI Governance Add-On](../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access Agent Firewall.
+
 ## Overview
 
 The `rulesengine` package provides a flexible rule-based filtering system for

docs/ai-coder/agent-firewall/version.md

@@ -1,5 +1,10 @@
 # Version Requirements
 
+> [!NOTE]
+> Agent Firewall requires the [AI Governance Add-On](../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access Agent Firewall.
+
 ## Recommended Versions
 
 It's recommended to use **Coder v2.30.0 or newer** and **Claude Code module

docs/ai-coder/ai-gateway/ai-gateway-proxy/index.md

@@ -1,5 +1,10 @@
 # AI Gateway Proxy
 
+> [!NOTE]
+> AI Gateway Proxy requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway Proxy.
+
 AI Gateway Proxy extends [AI Gateway](../index.md) to support clients that don't allow base URL overrides.
 While AI Gateway requires clients to support custom base URLs, many popular AI coding tools lack this capability.
 

docs/ai-coder/ai-gateway/ai-gateway-proxy/setup.md

@@ -5,7 +5,7 @@ Once enabled, `coderd` runs the `aibridgeproxyd` in-memory and intercepts traffi
 
 **Required:**
 
-1. AI Gateway must be enabled and configured (requires a **Premium** license with the [AI Governance Add-On](../../ai-governance.md)). See [AI Gateway Setup](../setup.md) for further information.
+1. AI Gateway must be enabled and configured (requires the [AI Governance Add-On](../../ai-governance.md)). See [AI Gateway Setup](../setup.md) for further information.
 1. AI Gateway Proxy must be [enabled](#proxy-configuration) using the server flag.
 1. A [CA certificate](#ca-certificate) must be configured for MITM interception.
 1. [Clients](#client-configuration) must be configured to use the proxy and trust the CA certificate.

docs/ai-coder/ai-gateway/audit.md

@@ -1,5 +1,10 @@
 # Auditing AI Sessions
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 AI Gateway groups intercepted requests into **sessions** and **threads** to show
 the causal relationships between human prompts and agent actions. This
 structure gives auditors clear provenance over who initiated what, and why.

docs/ai-coder/ai-gateway/clients/claude-code.md

@@ -1,5 +1,10 @@
 # Claude Code
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 Claude Code can be configured using environment variables. All modes require a **[Coder API token](../../../admin/users/sessions-tokens.md#generate-a-long-lived-api-token-on-behalf-of-yourself)** for authentication with AI Gateway.
 
 ## Centralized API Key
@@ -77,7 +82,7 @@ module "claude-code" {
   workdir        = "/path/to/project"  # Set to your project directory
   ai_prompt      = data.coder_task.me.prompt
 
-  # Route through AI Gateway (Premium feature)
+  # Route through AI Gateway (AI Governance Add-On)
   enable_aibridge = true
 }
 ```

docs/ai-coder/ai-gateway/clients/cline.md

@@ -1,5 +1,10 @@
 # Cline
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 Cline supports both OpenAI and Anthropic models and can be configured to use AI Gateway by setting providers.
 
 ## Configuration

docs/ai-coder/ai-gateway/clients/codex.md

@@ -1,5 +1,10 @@
 # Codex CLI
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 Codex CLI can be configured to use AI Gateway by setting up a custom model provider.
 
 ## Centralized API Key

docs/ai-coder/ai-gateway/clients/copilot.md

@@ -1,5 +1,10 @@
 # GitHub Copilot
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 [GitHub Copilot](https://github.com/features/copilot) is an AI coding assistant that doesn't support custom base URLs but does respect proxy configurations.
 This makes it compatible with [AI Gateway Proxy](../ai-gateway-proxy/index.md), which integrates with [AI Gateway](../index.md) for full access to auditing and governance features.
 To use Copilot with AI Gateway, make sure AI Gateway Proxy is properly configured, see [AI Gateway Proxy Setup](../ai-gateway-proxy/setup.md) for instructions.

docs/ai-coder/ai-gateway/clients/factory.md

@@ -1,5 +1,10 @@
 # Factory
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 Factort's Droid agent can be configured to use AI Gateway by setting up custom models for OpenAI and Anthropic.
 
 ## Centralized API Key

docs/ai-coder/ai-gateway/clients/index.md

@@ -1,5 +1,10 @@
 # Client Configuration
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 Once AI Gateway is setup on your deployment, the AI coding tools used by your users will need to be configured to route requests via AI Gateway.
 
 There are two ways to connect AI tools to AI Gateway:

docs/ai-coder/ai-gateway/clients/jetbrains.md

@@ -1,5 +1,10 @@
 # JetBrains IDEs
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 JetBrains IDE (IntelliJ IDEA, PyCharm, WebStorm, etc.) support AI Gateway via the [third-party model configuration](https://www.jetbrains.com/help/ai-assistant/use-custom-models.html#provide-your-own-api-key) feature.
 
 ## Prerequisites

docs/ai-coder/ai-gateway/clients/kilo-code.md

@@ -1,5 +1,10 @@
 # Kilo Code
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 Kilo Code allows you to configure providers via the UI and can be set up to use AI Gateway.
 
 ## Centralized API Key

docs/ai-coder/ai-gateway/clients/mux.md

@@ -1,5 +1,10 @@
 # Mux
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 Mux makes it easy to run parallel coding agents, each with its own isolated workspace, from your browser or desktop; it is open source and provider-agnostic.
 
 Mux can be configured to route OpenAI- and Anthropic-compatible traffic through AI Gateway by setting a custom provider base URL and using a Coder-issued token for authentication.

docs/ai-coder/ai-gateway/clients/opencode.md

@@ -1,5 +1,10 @@
 # OpenCode
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 OpenCode supports both OpenAI and Anthropic models and can be configured to use AI Gateway by setting custom base URLs for each provider.
 
 ## Centralized API Key

docs/ai-coder/ai-gateway/clients/roo-code.md

@@ -1,5 +1,10 @@
 # Roo Code
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 Roo Code allows you to configure providers via the UI and can be set up to use AI Gateway.
 
 ## Configuration

docs/ai-coder/ai-gateway/clients/vscode.md

@@ -1,5 +1,10 @@
 # VS Code
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 VS Code's native chat can be configured to use AI Gateway with the GitHub Copilot Chat extension's custom language model support.
 
 ## Centralized API Key

docs/ai-coder/ai-gateway/clients/zed.md

@@ -1,5 +1,10 @@
 # Zed
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 Zed IDE supports AI Gateway via its `language_models` configuration in `settings.json`.
 
 ## Centralized API Key

docs/ai-coder/ai-gateway/index.md

@@ -18,6 +18,10 @@ AI Gateway solves 3 key problems:
    use.
 
 > [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+>
 > AI Gateway was previously known as "AI Bridge". Some configuration
 > options, environment variables, and API paths still use the old name
 > and will be updated in a future release.

docs/ai-coder/ai-gateway/mcp.md

@@ -1,5 +1,12 @@
 # MCP
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
+<!-- -->
+
 > [!WARNING]
 > Injected MCP in AI Gateway is deprecated.
 > It remains functional and will not be removed until

docs/ai-coder/ai-gateway/monitoring.md

@@ -1,5 +1,10 @@
 # Monitoring
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 AI Gateway records the last `user` prompt, token usage, model reasoning, and every tool invocation for each intercepted request. Each capture is tied to a single "interception" that maps back to the authenticated Coder identity, making it easy to attribute spend and behaviour.
 
 ![User Prompt logging](../../images/aibridge/grafana_user_prompts_logging.png)

docs/ai-coder/ai-gateway/reference.md

@@ -1,5 +1,10 @@
 # Reference
 
+> [!NOTE]
+> AI Gateway requires the [AI Governance Add-On](../ai-governance.md).
+> As of Coder v2.32, deployments without the add-on will not be able to
+> access AI Gateway.
+
 ## Implementation Details
 
 `coderd` runs an in-memory instance of `aibridged`, whose logic is mostly contained in https://github.com/coder/coder/tree/main/aibridge. In future releases we will support running external instances for higher throughput and complete memory isolation from `coderd`.

docs/ai-coder/ai-gateway/setup.md

@@ -4,7 +4,7 @@ AI Gateway runs inside the Coder control plane (`coderd`), requiring no separate
 
 **Required**:
 
-1. A **Premium** license with the [AI Governance Add-On](../ai-governance.md).
+1. The [AI Governance Add-On](../ai-governance.md) license.
 1. Feature must be [enabled](#activation) using the server flag
 1. One or more [providers](#configure-providers) API key(s) must be configured
 

docs/ai-coder/ai-governance.md

@@ -1,4 +1,4 @@
-# AI Governance Add-On (Premium)
+# AI Governance Add-On
 
 Coder Workspaces already lets teams run AI tools like
 [Cursor](https://registry.coder.com/modules/coder/cursor) and
@@ -77,9 +77,9 @@ rates, and usage patterns to inform decisions about AI strategy.
 Starting with Coder v2.30 (February 2026), AI Gateway and Agent Firewall are
 generally available as part of the AI Governance Add-On.
 
-The AI Governance add-on is required to use AI Gateway and Agent Firewall.
+As of Coder v2.32, the AI Governance Add-On is required to use AI Gateway and
-If your deployment does not have the add-on, you'll see a notification banner
+Agent Firewall. Deployments without the add-on will not be able to access
-reminding you to enable it.
+these features.
 
 To learn more about enabling the AI Governance Add-On, pricing, or trial
 options, reach out to your

docs/ai-coder/security.md

@@ -1,3 +1,8 @@
+> [!NOTE]
+> Features mentioned on this page, such as AI Gateway and Agent Firewall,
+> require the [AI Governance Add-On](./ai-governance.md). As of Coder v2.32,
+> deployments without the add-on will not be able to access these features.
+
 As the AI landscape is evolving, we are working to ensure Coder remains a secure
 platform for running AI agents just as it is for other cloud development
 environments.

docs/manifest.json

@@ -1081,13 +1081,13 @@
 					"title": "AI Governance Add-On",
 					"description": "Features around managing agents at scale",
 					"path": "./ai-coder/ai-governance.md",
-					"state": ["premium"],
+					"state": ["ai governance add-on"],
 					"children": [
 						{
 							"title": "Agent Firewall",
 							"description": "Understanding Agent Firewall in Coder Tasks",
 							"path": "./ai-coder/agent-firewall/index.md",
-							"state": ["premium"],
+							"state": ["ai governance add-on"],
 							"children": [
 								{
 									"title": "NS Jail",
@@ -1133,7 +1133,7 @@
 							"description": "AI Gateway for Enterprise Governance \u0026 Observability",
 							"path": "./ai-coder/ai-gateway/index.md",
 							"icon_path": "./images/icons/api.svg",
-							"state": ["premium"],
+							"state": ["ai governance add-on"],
 							"children": [
 								{
 									"title": "Setup",
@@ -1222,7 +1222,7 @@
 									"title": "AI Gateway Proxy",
 									"description": "Proxy for AI coding tools without base URL override support",
 									"path": "./ai-coder/ai-gateway/ai-gateway-proxy/index.md",
-									"state": ["premium"],
+									"state": ["ai governance add-on"],
 									"children": [
 										{
 											"title": "Setup",