EVE + OpenAI Agents SDK

Compatibility: Experimental integration — structurally implemented but not included in the supported release-candidate adapter matrix.

The OpenAI Agents SDK adapter routes an agent's tool calls through EVE's governance composition root so CoreGuard can make a deterministic ALLOW / BLOCK / MODIFY decision before a tool executes. The adapter is structurally implemented, but the OpenAI Agents SDK was not installed during release-candidate validation, so this adapter was not validated against a pinned live version and is marked UNTESTED / experimental. Only the generic adapter is SUPPORTED.

How governance works here

The adapter wraps tool execution so each requested tool call is submitted to EVE before it runs. The decision path contains no LLM.

from eve_coreguard import EVE

eve = EVE()  # hosted endpoint

decision = eve.govern_tool_call(
    tool="transfer_funds",
    arguments={"from": "acct_1", "to": "acct_2", "amount_cents": 25000},
    context={
        "tenant_id": "tenant_demo",
        "principal_id": "agent_ops",
        "session_id": "sess_5b0d",
    },
)
# ALLOW -> execute; BLOCK -> do not call the tool; MODIFY -> use modified arguments.

eve-coreguard (0.2.2) is distributed privately during a pilot and is not on a public index. Entry point: from eve_coreguard import EVE.

Hardened alternative

This adapter is wrapper-enforced: an agent (or code) that reaches the underlying tool directly is not intercepted by the wrapper. For a boundary a direct call cannot route around:

Put tools behind a restricted server-side tool registry so the agent can only reach them through the governed path.
Proxy tool execution through a sidecar so governance runs out-of-process.
Apply network enforcement so tool endpoints are only reachable via the governed path.
If the agent's tools are MCP tools, route them through the MCP gateway, which binds the approved request to the executed request (see mcp.md).

Readiness

This adapter: experimental (UNTESTED against a pinned live OpenAI Agents SDK version; wrapper-enforced).
Generic Python adapter: SUPPORTED.
EVE SDK core: RELEASE CANDIDATE WITH EXCLUSIONS.

Limitations

Not validated against a pinned live framework version; interception behavior on a specific Agents SDK release is not warranted here.
Wrapper-enforced: bypassable by a direct underlying-tool call. Hard enforcement requires a gateway/sidecar or restricted server-side tool registry.
Hosted mode requires a reachable endpoint; embedded governance is the EVE service.
Evidence verification proves authenticity and integrity, not decision correctness; independent verification needs the Ed25519 public key.