An API key is no longer required if base_url is pointed to a non-default endpoint

tests/test_new_config.py

@@ -220,6 +220,16 @@ def test_validation_llm_api_key_env_is_read():
     assert config.validation_llm_api_key == "validation-key"
 
 
+def test_blank_validation_llm_api_key_override_disables_primary_fallback():
+    config = AuditaConfig.from_sources(
+        env={"AUDITA_LLM_API_KEY": "primary-key"},
+        overrides=ConfigOverrides(validation_llm_api_key="   "),
+    )
+
+    assert config.validation_llm_api_key == ""
+    assert config.validation_llm_config().api_key == ""
+
+
 def test_effective_validation_fields_fall_back_to_primary_settings():
     config = AuditaConfig.from_sources(
         env={