OpenAI SDK for Ruby 0.83.0

Apply the Ruby 4.0 baseline first. Target the official openai gem at 0.83.0. This SDK requires Ruby 3.3.0 or later and supports maintained CRuby 3.3, 3.4, and 4.0. Apply the following controls to its HTTP clients, Responses and Chat Completions, tools, files, webhooks, and Realtime connections.

Credentials, routing, and request overrides

• Construct OpenAI::Client on the server with credentials scoped to the intended project and workload. Keep organization administration on a separate client; use admin_api_key: nil to suppress OPENAI_ADMIN_KEY inheritance in ordinary application clients. Generic client.request can use an admin key when it is the only configured credential.
• Own base_url, data_residency, organization, project, provider selection, and proxy configuration in deployment code. Audit OPENAI_BASE_URL, OPENAI_ORG_ID, OPENAI_PROJECT_ID, and OPENAI_CUSTOM_HEADERS; use approved HTTPS endpoints and verify that regional routing matches the project's provisioned residency.
• Build request_options from an allowlist owned by the application. extra_body and extra_query override generated parameters, and extra_headers can replace or remove headers with nil; never merge caller input into these paths where it can change credentials, project, instructions, tools, storage, or budgets.
• Restrict client.request paths, methods, headers, bodies, and security to reviewed operations. Preserve the SDK's configured-origin checks and redirect protections; do not bypass them with a transport that follows redirects or rewrites authenticated