EVE CoreGuard API Reference

Authorization: Bearer eve_sk_your_api_key_here
Content-Type: application/json

Endpoint : POST https://api.eveaicore.com/v1/decisions/evaluate
Auth     : Authorization: Bearer eve_sk_...        (per-organization API key)
Body     : JSON — policy_set, request_id, user, proposed_action, context
Returns  : decision.status = ALLOWED | BLOCKED | MODIFIED
           + risk assessment, policy violations, Ed25519-signed audit certificate
Engine   : deterministic rule kernel — no LLM in the decision path
Verify   : offline via pip install eve-coreguard + /.well-known/eve-pubkey

curl -X POST https://api.eveaicore.com/v1/decisions/evaluate \
  -H "Authorization: Bearer eve_sk_your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "policy_set": "lending_v1",
    "request_id": "req_789",
    "user": {"id": "user_123", "role": "loan_officer", "organization": "regional_bank"},
    "proposed_action": {"type": "loan_decision", "amount": 50000, "applicant_id": "app_456"},
    "model_output": {"decision": "approve", "confidence": 0.91},
    "context": {"credit_score": 720, "debt_to_income": 0.30, "employment_verified": true}
  }'

{
  "policy_set": "lending_v1",
  "user": {
    "id": "user_123",
    "role": "loan_officer",
    "organization": "regional_bank"
  },
  "request_id": "req_789",
  "proposed_action": {
    "type": "loan_decision",
    "amount": 50000,
    "applicant_id": "app_456"
  },
  "context": {
    "credit_score": 720,
    "income": 85000,
    "ltv_ratio": 0.78
  }
}

{
  "decision": {
    "status": "ALLOWED",
    "confidence": 0.97,
    "decision_id": "dec_abc123",
    "policy_version": "lending_v1@2026-04-01"
  },
  "risk_assessment": {
    "risk_level": "LOW",
    "risk_score": 0.12,
    "risk_factors": [],
    "mitigations_applied": []
  },
  "policy_violations": [],
  "modifications": null,
  "audit_record": {
    "record_id": "aud_def456",
    "timestamp": "2026-05-05T10:30:00.000Z",
    "request_hash": "sha256:abc...",
    "decision_hash": "sha256:def...",
    "signature": "ed25519-v1:base64sig...",
    "signature_algorithm": "Ed25519",
    "policy_set": "lending_v1",
    "evaluator_version": "1.3.0"
  },
  "latency_ms": 0.4
}

{
  "decision": {
    "status": "BLOCKED",
    "confidence": 1.0,
    "decision_id": "dec_blk789",
    "policy_version": "lending_v1@2026-04-01"
  },
  "risk_assessment": {
    "risk_level": "HIGH",
    "risk_score": 0.91,
    "risk_factors": ["protected_class_inference", "ecoa_proxy_variable"],
    "mitigations_applied": []
  },
  "policy_violations": [
    {
      "rule_id": "lending.ecoa.015",
      "rule_description": "Action references zip_code as primary factor — known proxy for race under Reg B",
      "severity": "CRITICAL",
      "field": "action.context.zip_code"
    }
  ],
  "modifications": null,
  "audit_record": { /* ... signed record ... */ },
  "latency_ms": 0.3
}

{
  "status": "healthy",
  "service": "coreguard",
  "policy_sets_loaded": 27
}

{
  "count": 27,
  "policies": [
    {
      "policy_id": "fair_lending_v1",
      "version": "1.0.0",
      "domain": "fair_lending",
      "jurisdiction": "US",
      "rule_count": 6,
      "notes": "ECOA (15 USC 1691), Regulation B (12 CFR 1002.9), FCRA, CFPB UDAAP.",
      "source": "python"
    }
  ]
}

pip install eve-coreguard

# Synchronous usage
from eve_coreguard import CoreGuardClient

client = CoreGuardClient(api_key="eve_sk_your_api_key_here")

result = client.evaluate(
    policy_set="lending_v1",
    user={"id": "user_123", "role": "loan_officer"},
    action={"type": "loan_decision", "amount": 50000},
    context={"credit_score": 720, "income": 85000}
)

print(result.decision.status)          # ALLOWED / BLOCKED / MODIFIED
print(result.risk_assessment.risk_level)  # LOW / MEDIUM / HIGH
print(result.latency_ms)               # Sub-millisecond evaluation latency

# Check for violations
if result.policy_violations:
    for v in result.policy_violations:
        print(f"Rule {v.rule_id}: {v.rule_description}")

# Ask the server to attach a signed governance evidence record.
result = client.evaluate(
    policy_set="lending_v1",
    user={"id": "user_123", "role": "loan_officer"},
    proposed_action={"type": "loan_decision", "amount": 50000},
    context={"credit_score": 720},
    include_evidence=True,          # populates result.signed_governance
)

# Production decision records are signed with Ed25519. They are verifiable
# offline by anyone holding only the public key — no API call, no shared
# secret. This is the same proof shown at /agent-proof and /verify.
verdict = client.verify_evidence_offline(result.signed_governance)
print(verdict.algorithm)   # "ed25519" (asymmetric, public-key verifiable)
print(bool(verdict))       # True — recomputed hash + signature both valid

# Fully independent: fetch the public key once, verify anywhere later.
from eve_coreguard import verify_decision_record, fetch_public_key_pem

pubkey = fetch_public_key_pem("https://api.eveaicore.com")  # /.well-known/eve-pubkey
verdict = verify_decision_record(result.signed_governance, public_key_pem=pubkey)
print(verdict.valid)

result = client.evaluate(
    policy_set="lending_v1",
    user={"id": "user_123"},
    action={"type": "loan_decision", "amount": 250000}
)

if result.decision.status == "MODIFIED":
    mods = result.modifications
    print(f"Required modifications: {mods.required_changes}")
    # Apply changes and re-evaluate, or apply changes to the output
    # directly and attach the audit certificate to the record

X-RateLimit-Limit:      1000
X-RateLimit-Remaining:  987
X-RateLimit-Reset:      1746444660  # Unix timestamp of next window reset