EVE + Claude Agent SDK

Compatibility: Experimental integration — structurally implemented but not included in the supported release-candidate adapter matrix.

The Claude Agent SDK adapter routes an agent's tool calls through EVE's governance composition root so CoreGuard can make a deterministic ALLOW / BLOCK / MODIFY decision before a tool executes. The adapter is structurally implemented, but the Claude Agent SDK was not installed during release-candidate validation, so it was not validated against a pinned live version and is marked UNTESTED / experimental. Only the generic adapter is SUPPORTED.

How governance works here

Each requested tool call is submitted to EVE before execution. No LLM is in the decision path.

from eve_coreguard import CoreGuardClient

client = CoreGuardClient(api_key="eve_sk_...")  # hosted CoreGuard API

result = client.evaluate(
    request_id="req-001",
    tenant_id="tenant_demo",
    proposed_action={"type": "write_file", "path": "/workspace/report.txt", "contents": "..."},
    model_output={"decision": "write", "confidence": 0.9},
    context={"principal_id": "agent_writer", "session_id": "sess_a17c"},
    policy_set="lending_v1",
)
# ALLOWED -> execute; BLOCKED -> do not call the tool; MODIFIED -> use modified arguments.

eve-coreguard (0.2.7) is published on PyPI. Entry point: from eve_coreguard import CoreGuardClient.

Hardened alternative

This adapter is wrapper-enforced: a code path that calls the underlying tool directly is not intercepted. For a boundary a direct call cannot route around:

• Put tools behind a restricted server-side tool registry so the agent reaches them only through the governed path.
• Proxy tool execution through a sidecar so governance runs out-of-process.
• Apply network enforcement so tool endpoints are only reachable via the governed path.
• For MCP tools, route through the MCP gateway, which binds the approved request to the executed request (see mcp.md).

Readiness

• This adapter: experimental (UNTESTED against a pinned live Claude Agent SDK version; wrapper-enforced).
• Generic Python adapter: SUPPORTED.
• EVE SDK core: RELEASE CANDIDATE WITH EXCLUSIONS.

Limitations

• Not validated against a pinned live framework version.
• Wrapper-enforced: bypassable by a direct underlying-tool call. Hard enforcement requires a gateway/sidecar or restricted server-side tool registry.
• If you are integrating via Claude Code hooks specifically, note that those hooks are cooperative and are not an enforcement boundary — see claude-code.md.
• Hosted mode requires a reachable endpoint; embedded governance is the EVE service.
• Evidence verification proves authenticity and integrity, not decision correctness; independent verification needs the ECDSA P-384 public key.