AI Governance SDK

EVE ships a Python client and a TypeScript client with one obvious entry point per language. Both govern actions through the same composition root and produce evidence you can verify offline.

Package facts

• Python: eve-coreguard 0.2.2 — from eve_coreguard import EVE. Python >= 3.9 (validated on 3.12), zero required dependencies.
• TypeScript: @eve/coreguard 0.1.0-rc1 — import { EVE } from "@eve/coreguard". ESM, Node >= 18, zero dependencies, browser-safe verifier.

Packages are distributed privately for pilots. The release-candidate clients are distributed privately for pilots — install the pilot artifact, not a public pip/npm install (see readiness for public-registry status).

Python quickstart

from eve_coreguard import EVE, verify_decision_record

eve = EVE()  # hosted mode

result = eve.govern_tool_call(
    tool="charge_card",
    arguments={"amount": 999, "currency": "USD"},
    context={"tenant_id": "org_abc", "principal_id": "billing_svc", "session_id": "sess_7"},
)
print(result["action"])  # ALLOW / BLOCK / MODIFY

report = verify_decision_record(result["certificate"], public_key_pem=pubkey)
assert report.valid is True

TypeScript quickstart

import { EVE, verifyEvidence } from "@eve/coreguard";

const eve = new EVE();  // hosted/sidecar mode
const result = await eve.governToolCall({
  tool: "charge_card",
  arguments: { amount: 999, currency: "USD" },
  context: { tenantId: "org_abc", principalId: "billing_svc", sessionId: "sess_7" },
});

const report = verifyEvidence(result.certificate, { publicKeyPem: pubkey });
// report.valid === true, signature 'ed25519-valid'

Links

• Runtime enforcement: /seo/landing/ai-governance-runtime.md
• Offline verification: /seo/landing/cryptographic-ai-audit-logs.md
• Platform overview: /seo/landing/ai-governance-platform.md

Readiness

The Python client (eve-coreguard 0.2.2) and TypeScript client (@eve/coreguard 0.1.0-rc1) are release-candidate core clients. The wheel is byte-reproducible and installs cleanly outside the repo (site-packages); the npm tarball installs cleanly (node_modules). Evidence verification (Python and TypeScript) is SUPPORTED, including cross-language ed25519-valid. The SDK core is a RELEASE CANDIDATE WITH EXCLUSIONS.

Limitations

• The pip client governs via hosted mode (requires an endpoint); embedded in-process governance is the EVE service, not the client wheel.
• The TypeScript SDK never signs and holds no secrets; embedded mode is Python/service-only in TS and raises SDK_TS_EMBEDDED_UNSUPPORTED.
• Framework adapters other than the generic adapter are experimental and not yet validated against pinned live framework versions.
• The eve CLI ships with the service/repo, not the pip client.

Next step

Request pilot access to the client artifacts and run the quickstart against a pilot endpoint.