I had added z-ai in allow list explicitly and verified that it's the one being used.