EVE + Vercel AI SDK (Server-Only)

Compatibility: Experimental integration — structurally implemented but not included in the supported release-candidate adapter matrix.

The Vercel AI SDK adapter governs tool calls on the server so CoreGuard makes a deterministic ALLOW / BLOCK / MODIFY decision before a tool executes. This adapter is classified as server-only / gateway-enforced: governance runs in your server-side runtime, not in the browser. The adapter is structurally implemented, but the Vercel AI SDK was not installed during release-candidate validation, so it was not validated against a pinned live version and is marked UNTESTED / experimental. Only the generic adapter is SUPPORTED.

How governance works here

Tool execution happens server-side and is submitted to EVE before it runs. No LLM is in the decision path. Govern in your server route/handler, not in client code:

import { EVE } from "@eve/coreguard";

const eve = new EVE({ /* hosted endpoint config */ });

// Inside a server-side route handler, before executing a tool the model requested:
const decision = await eve.governToolCall({
  tool: "create_order",
  arguments: { sku: "SKU-4410", qty: 2 },
  context: {
    tenantId: "tenant_demo",
    principalId: "assistant_web",
    sessionId: "sess_3ce2",
  },
});

if (decision.action === "BLOCK") {
  // do not execute the tool; return the reason to the client
} else {
  await createOrder({ sku: "SKU-4410", qty: 2 });
}

@eve/coreguard (0.1.0-rc1, ESM, Node >= 18) is distributed privately during a pilot and is not on a public registry. Entry point: import { EVE } from "@eve/coreguard";. The TypeScript client never signs and holds no secrets; embedded mode is unsupported in TypeScript (SDK_TS_EMBEDDED_UNSUPPORTED).

Hardened alternative

Keep tool execution and governance strictly server-side. Do not attempt to govern in the browser — the browser can only run the offline evidence verifier, never signing or the authoritative decision. For a boundary a direct call cannot route around:

Put tools behind a restricted server-side tool registry so tools are only reachable through the governed server path.
Proxy tool execution through a sidecar so governance runs out-of-process.
Apply network enforcement so tool endpoints are only reachable via the governed path.

Readiness

This adapter: experimental (server-only; UNTESTED against a pinned live Vercel AI SDK version).
Generic TypeScript client: SUPPORTED for its client surface (govern via hosted mode, offline verify).
EVE SDK core: RELEASE CANDIDATE WITH EXCLUSIONS.

Limitations

Server-only: governance and any signing run in your server runtime, never in the browser. The browser can run only the offline verifier.
Not validated against a pinned live framework version.
ESM only; Node >= 18. Hosted mode requires a reachable endpoint.
Evidence verification proves authenticity and integrity, not decision correctness; independent verification needs the Ed25519 public key.