EVE CoreGuard API Reference

Authorization: Bearer eve_sk_your_api_key_here
Content-Type: application/json

Endpoint : POST https://api.eveaicore.com/v1/decisions/evaluate
Auth     : Authorization: Bearer eve_sk_...        (per-organization API key)
Body     : JSON — policy_set, request_id, user, proposed_action, context
Returns  : decision.status = ALLOWED | BLOCKED | MODIFIED
           + risk assessment, policy violations, ECDSA P-384-signed audit certificate
Engine   : deterministic rule kernel — no LLM in the decision path
Verify   : offline via pip install eve-coreguard + /.well-known/eve-pubkey

curl -X POST https://api.eveaicore.com/v1/decisions/evaluate \
  -H "Authorization: Bearer eve_sk_your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "policy_set": "lending_v1",
    "request_id": "req_789",
    "user": {"id": "user_123", "role": "loan_officer", "organization": "regional_bank"},
    "proposed_action": {"type": "loan_decision", "amount": 50000, "applicant_id": "app_456"},
    "model_output": {"decision": "approve", "confidence": 0.91},
    "context": {"credit_score": 720, "debt_to_income": 0.30, "employment_verified": true}
  }'

{
  "policy_set": "lending_v1",
  "user": {
    "id": "user_123",
    "role": "loan_officer",
    "organization": "regional_bank"
  },
  "request_id": "req_789",
  "proposed_action": {
    "type": "loan_decision",
    "amount": 50000,
    "applicant_id": "app_456"
  },
  "context": {
    "credit_score": 720,
    "debt_to_income": 0.30,
    "employment_verified": true
  }
}

{
  "request_id": "req_789",
  "decision": { "status": "ALLOWED", "action": "approve_loan_decision" },
  "risk": {
    "score": 0.1995,
    "level": "LOW",
    "factors": ["Credit score: 720", "Debt-to-income ratio: 0.30"]
  },
  "policy_violations": [],
  "regulatory_impact": [],
  "counterfactual": null,
  "liability_prevented": null,
  "modifications": null,
  "audit": {
    "audit_id": "audit_48f25d5cc700",
    "decision": "ALLOWED",
    "hash": "sha256-19e76099…",
    "signature": "kms-ecdsa-p384-3066…",
    "chain_sequence": 471,
    "policy_version": "sha256:7f95b82c…",
    "certificate": { /* signed eve.decision.cert.v8 body */ }
  },
  "authority_trace": {
    "policy_set": "lending_v1",
    "evaluator": "lending_v1_evaluator",
    "rule_ids_evaluated": [],
    "winning_rule_id": null
  },
  "schema_version": "1.0"
}

// Same request with credit_score 580 and debt_to_income 0.52
{
  "request_id": "req_790",
  "decision": { "status": "BLOCKED", "action": "deny_loan_decision" },
  "risk": {
    "score": 0.3784,
    "level": "MEDIUM",
    "factors": ["Credit score: 580", "Debt-to-income ratio: 0.52"]
  },
  "policy_violations": [
    { "policy_id": "CREDIT_SCORE_MIN", "description": "Credit score 580 is below the minimum threshold of 620" },
    { "policy_id": "DTI_LIMIT", "description": "Debt-to-income ratio 0.52 exceeds the maximum threshold of 0.45" }
  ],
  "regulatory_impact": [
    { "regulation": "ECOA", "risk": "Potential discriminatory lending decision based on credit criteria", "severity": "HIGH" },
    { "regulation": "ECOA", "risk": "Debt-to-income threshold may disproportionately affect protected classes", "severity": "HIGH" }
  ],
  "counterfactual": { "credit_score_required": 620, "max_dti_allowed": 0.45, "employment_required": true },
  "liability_prevented": {
    "estimated_exposure": "$25,000 - $50,000",
    "reason": "Loan approval violates 2 policy threshold(s): credit score min, dti limit"
  },
  "modifications": null,
  "audit": { /* signed decision record, as above */ },
  "authority_trace": {
    "policy_set": "lending_v1",
    "evaluator": "lending_v1_evaluator",
    "rule_ids_evaluated": ["CREDIT_SCORE_MIN", "DTI_LIMIT"],
    "winning_rule_id": "CREDIT_SCORE_MIN"
  },
  "consistency_result": "PASS",
  "explanation": "Request BLOCKED by rule 'CREDIT_SCORE_MIN'. Credit score 580 is below the minimum threshold of 620.",
  "schema_version": "1.0"
}

{
  "status": "healthy",
  "service": "coreguard",
  "policy_sets_loaded": 31
}

{
  "count": 31,
  "policies": [
    {
      "policy_id": "fair_lending_v1",
      "version": "1.0.0",
      "domain": "fair_lending",
      "jurisdiction": "US",
      "rule_count": 6,
      "notes": "ECOA (15 USC 1691), Regulation B (12 CFR 1002.9), FCRA, CFPB UDAAP.",
      "source": "python"
    }
  ]
}

pip install eve-coreguard

# Synchronous usage
from eve_coreguard import CoreGuardClient

client = CoreGuardClient(api_key="eve_sk_your_api_key_here")

result = client.evaluate(
    tenant_id="bank_001",
    user={"id": "user_123", "role": "loan_officer"},
    proposed_action={"type": "loan_decision", "amount": 50000},
    context={"credit_score": 720, "debt_to_income": 0.30, "employment_verified": True},
    policy_set="lending_v1",  # optional assertion; loan_decision is bound to lending_v1
)

print(result.verdict)                  # ALLOWED / BLOCKED / MODIFIED
print(result.risk.level)               # LOW / MEDIUM / HIGH
print(result.decision_id)              # id of the signed decision record

# Check for violations
for v in result.policy_violations:
    print(f"Rule {v.policy_id}: {v.description}")

# Ask the server to attach a signed governance evidence record.
result = client.evaluate(
    policy_set="lending_v1",
    user={"id": "user_123", "role": "loan_officer"},
    proposed_action={"type": "loan_decision", "amount": 50000},
    context={"credit_score": 720},
    include_evidence=True,          # populates result.signed_governance
)

# Production decision records are signed with ECDSA P-384. They are verifiable
# offline by anyone holding only the public key — no API call, no shared
# secret. This is the same proof shown at /agent-proof and /verify.
verdict = client.verify_evidence_offline(result.signed_governance)
print(verdict.algorithm)   # "ecdsa-p384" (asymmetric, public-key verifiable)
print(bool(verdict))       # True — recomputed hash + signature both valid

# Fully independent: fetch the public key once, verify anywhere later.
from eve_coreguard import verify_decision_record, fetch_public_key_pem

pubkey = fetch_public_key_pem("https://api.eveaicore.com")  # /.well-known/eve-pubkey
verdict = verify_decision_record(result.signed_governance, public_key_pem=pubkey)
print(verdict.valid)

result = client.evaluate(
    tenant_id="bank_001",
    user={"id": "user_123"},
    proposed_action={"type": "loan_decision", "amount": 250000},
    context={"credit_score": 720, "debt_to_income": 0.30, "employment_verified": True},
)

if result.verdict == "MODIFIED":
    for m in result.modifications or []:
        print(f"{m.field_name}: {m.original_value} -> {m.modified_value} ({m.reason})")
    # Apply changes and re-evaluate, or apply changes to the output
    # directly and attach the audit certificate to the record

X-RateLimit-Limit:      1000
X-RateLimit-Remaining:  987
X-RateLimit-Reset:      1746444660  # Unix timestamp of next window reset