# Eve provider and subprocessor review — 2026-09 Task 14.2 reviews 103 concrete or explicitly absent routes. The executable decision is **posture → capability/quality → price**. A key, login, model override, endpoint override, or cheaper global endpoint cannot admit an unreviewed route. The independently maintained production census at `docs/audits/eve-sota-provider-subprocessor-review/production-route-census.json` defines the route universe; generation cannot silently define its own completeness. ## Runtime decisions - The repository owner decided on 2026-09-19 (`docs/audits/eve-sota-provider-subprocessor-review/owner-attestations/2026-09-19-openrouter-global-route.json`) that OpenRouter in-region routing is optional. The turn, embedding, and vision routes use the global API host unless a deployment sets `OSHUN_ASSISTANT_OPENROUTER_REGIONAL_ROUTING_ATTESTED=true`, which selects the US or EU host; a value that is neither true nor false, or an unknown data region, resolves no route. On either host every request carries exact reviewed model/endpoint pins, data-collection denial, and ZDR. Vision also pins Google Vertex to the selected US or EU data region and disables fallback. Process-wide route overrides are ignored. No regional residency is claimed. - The escalation registry entry spans eight mutable FP8 downstreams and has no exact provider allowlist. Its runtime binding is therefore absent and the route is not dispatchable. - The repository owner attested hosted media on 2026-09-15 (`docs/audits/eve-sota-provider-subprocessor-review/owner-attestations/2026-09-15-isis-hosted-media.json`) for the Isis generation API only: operator tenant, operator-owned non-personal SFW inputs, vendor posture accepted as published with no ZDR, DPA, residency, or negotiated incident terms. The Isis Meshy lane is admitted through its source gate; the planned Isis OpenRouter media lane is attested but not dispatchable until a client is bound and re-reviewed. Oshun BFF OpenRouter media resolvers stay blocked. - Alternate assistant, Sophia, lecture, autonomy, accessibility, moderation, content-service, Ori, other hosted media, narration, Tara, Aphrodite age verification, artifact-rights transfer, Hathor services, Rail authorities, and signup-email provider composition is source-gated off. Native Anthropic, native OpenAI, Codex transports, OpenRouter audio, Whisper, Cartesia, ElevenLabs, and Telegram-compatible speech remain blocked where their posture is incomplete or their production target is not source-owned. - Assistant-library vision, web-search, and web-fetch tools are explicitly enumerated; they are not wired into the production BFF. The environment-only signup challenge placeholder was removed because a local identifier cannot prove remote challenge issuance or verification. - Deepgram STT sends `mip_opt_out=true` on every request. The lower-level ElevenLabs client sends `enable_logging=false`, but production selection stays blocked because ZRM alone does not establish its complete posture. - The only external human-video catalogue route is limited to public provider metadata with no member payload and cannot promote a render route. Local media subprocesses are identified separately; external render providers remain blocked. Reranking is explicitly absent. Computer-use planning is configured-unwired and its cheaper Bedrock global route is not region-admitted. ## Route ledger | Route | Family | Provider | Runtime | Admission | Price routing | | --------------------------------------------------- | --------------------- | ------------------------------------------------------------------------------ | -------------------------------------- | ----------------------------- | ------------------------------------- | | `text-anthropic-native` | text | Anthropic | implemented | blocked-unattested | none | | `text-openai-native` | text | OpenAI | implemented | blocked-unattested | none | | `text-openrouter-turn` | text | OpenRouter | active | admitted-when-attested | price-within-admitted-endpoints | | `text-openrouter-escalation` | text | OpenRouter | configured-blocked | not-dispatchable | none | | `text-openrouter-judge` | text | OpenRouter | configured-unwired | not-dispatchable | none | | `text-codex-cli` | text | Codex CLI transport | implemented-explicit | blocked-unattested | none | | `text-codex-subscription` | text | ChatGPT/Codex subscription transport | implemented-explicit | blocked-unattested | none | | `embedding-openrouter` | embedding | OpenRouter | active | admitted-when-attested | price-within-single-admitted-endpoint | | `reranker-none` | reranker | none | not-present | not-dispatchable | none | | `vision-openrouter` | vision | OpenRouter/Google | active-conditional | admitted-when-attested | price-after-zdr-filter | | `computer-use-openrouter-bedrock-global` | computer-use-planning | OpenRouter/AWS Bedrock/Anthropic | configured-unwired | not-dispatchable | none | | `text-assistant-legacy-openai-compatible` | text | operator-selected OpenAI-compatible service | implemented-production-blocked | blocked-unattested | none | | `text-assistant-provider-factory-library` | text | operator-selected Anthropic, OpenAI-compatible, Google, xAI, or Ollama service | library-only-production-caller-blocked | not-dispatchable | none | | `text-sophia-openai-compatible` | text | OpenRouter or operator-selected OpenAI-compatible service | implemented-production-blocked | blocked-unattested | none | | `text-openrouter-lecture` | text | OpenRouter | implemented-production-blocked | blocked-unattested | none | | `text-openrouter-autonomy-workbench` | text | OpenRouter | implemented-production-blocked | blocked-unattested | none | | `vision-openrouter-autonomy-critic` | vision | OpenRouter | implemented-production-blocked | blocked-unattested | none | | `subprocessor-autonomy-artifact-rights` | subprocessor-service | operator-selected artifact-rights authority | implemented-production-blocked | blocked-unattested | none | | `text-ori-configurable-provider` | text | operator-selected assistant provider | implemented-production-blocked | blocked-unattested | none | | `text-openrouter-content-service` | text | OpenRouter | implemented-production-blocked | blocked-unattested | none | | `subprocessor-aphrodite-age-verification` | subprocessor-service | operator-selected Aphrodite age assertion authority | implemented-production-blocked | blocked-unattested | none | | `tool-hathor-world-api` | tool-service | operator-selected Hathor world API | implemented-production-blocked | blocked-unattested | none | | `subprocessor-hathor-ideation-capture` | subprocessor-service | operator-selected Hathor ideation API | implemented-production-blocked | blocked-unattested | none | | `subprocessor-rail-mobile-authorities` | subprocessor-service | operator-selected Rail mobile drip and ticker authorities | implemented-production-blocked | blocked-unattested | none | | `subprocessor-rail-thread-authority` | subprocessor-service | operator-selected Rail Thread authority | implemented-production-blocked | blocked-unattested | none | | `subprocessor-rail-tv-program-authority` | subprocessor-service | operator-selected Rail TV program authority | implemented-production-blocked | blocked-unattested | none | | `subprocessor-calendar-google` | subprocessor-service | Google Calendar and OAuth | implemented-production-blocked | blocked-unattested | none | | `subprocessor-calendar-outlook-oauth` | subprocessor-service | Microsoft identity platform and Outlook Calendar | implemented-production-blocked | blocked-unattested | none | | `subprocessor-asset-object-storage` | artifact-custody | Amazon S3 or operator-selected MinIO-compatible storage | implemented-production-blocked | blocked-unattested | none | | `subprocessor-generated-artifact-object-storage` | artifact-custody | Amazon S3 or operator-selected MinIO-compatible storage registry | implemented-production-blocked | blocked-unattested | none | | `subprocessor-human-video-object-storage` | artifact-custody | Amazon S3 or operator-selected MinIO-compatible human-video storage | implemented-production-blocked | blocked-unattested | none | | `subprocessor-recovery-deletion-object-storage` | artifact-custody | Amazon S3 or operator-selected S3-compatible recovery-deletion journal | implemented-production-blocked | blocked-unattested | none | | `embedding-personalization-qdrant` | embedding | Qdrant Cloud or an operator-selected Qdrant-compatible endpoint | implemented-production-blocked | blocked-unattested | none | | `identity-oidc-sso` | identity | operator-selected OIDC identity provider | implemented-production-blocked | blocked-unattested | none | | `identity-tenant-sso-probe` | identity | operator-selected tenant OIDC or SAML identity provider | implemented-production-blocked | blocked-unattested | none | | `identity-lms-lti` | identity | operator-selected LMS or LTI platform | implemented-production-blocked | blocked-unattested | none | | `subprocessor-stripe-billing` | subprocessor-service | Stripe Billing and Payments | implemented-production-blocked | blocked-unattested | none | | `first-party-domain-tara` | first-party-service | separately deployed first-party tara service | implemented-production-blocked | blocked-unattested | none | | `first-party-domain-veritas` | first-party-service | separately deployed first-party veritas service | implemented-production-blocked | blocked-unattested | none | | `first-party-domain-nyx` | first-party-service | separately deployed first-party nyx service | implemented-production-blocked | blocked-unattested | none | | `first-party-domain-arete` | first-party-service | separately deployed first-party arete service | implemented-production-blocked | blocked-unattested | none | | `first-party-domain-nisaba` | first-party-service | separately deployed first-party nisaba service | implemented-production-blocked | blocked-unattested | none | | `first-party-domain-metis` | first-party-service | separately deployed first-party metis service | implemented-production-blocked | blocked-unattested | none | | `tool-signup-challenge-placeholder` | abuse-challenge | unimplemented operator-named challenge provider | placeholder-removed-from-production | not-dispatchable | none | | `vision-assistant-provider-library` | vision | injected assistant vision provider | library-only-no-production-caller | not-dispatchable | none | | `tool-web-search-assistant-library` | tool-service | DuckDuckGo, Google, Bing, Brave, or operator-selected search service | library-only-no-production-caller | not-dispatchable | none | | `tool-web-fetch-assistant-library` | tool-service | recipient-selected HTTP service | library-only-no-production-caller | not-dispatchable | none | | `vision-accessibility-openai-compatible` | vision | operator-selected OpenAI-compatible service | implemented-production-blocked | blocked-unattested | none | | `stt-accessibility-openai-compatible` | voice-stt | operator-selected OpenAI-compatible service | implemented-production-blocked | blocked-unattested | none | | `stt-openrouter-human-video-library` | voice-stt | operator-selected OpenRouter audio model | library-only-no-production-caller | not-dispatchable | none | | `moderation-openai-compatible` | moderation | operator-selected OpenAI-compatible service | implemented-production-blocked | blocked-unattested | none | | `media-image-runpod-comfy` | media-image | operator-selected RunPod ComfyUI | implemented-production-blocked | blocked-unattested | none | | `media-image-openrouter` | media-image | OpenRouter | implemented-production-blocked | blocked-unattested | none | | `media-image-openrouter-hero` | media-image | OpenRouter hero tier | implemented-production-blocked | blocked-unattested | none | | `media-image-stability` | media-image | Stability AI | implemented-production-blocked | blocked-unattested | none | | `media-video-runpod-comfy` | media-video | operator-selected RunPod ComfyUI | implemented-production-blocked | blocked-unattested | none | | `media-video-openrouter` | media-video | OpenRouter | implemented-production-blocked | blocked-unattested | none | | `media-video-openrouter-hero` | media-video | OpenRouter hero tier | implemented-production-blocked | blocked-unattested | none | | `media-video-fal` | media-video | fal.ai LTX | implemented-production-blocked | blocked-unattested | none | | `media-music-runpod-comfy` | media-music | operator-selected RunPod ComfyUI | implemented-production-blocked | blocked-unattested | none | | `media-3d-trellis` | media-3d | operator-selected TRELLIS service | implemented-production-blocked | blocked-unattested | none | | `media-3d-meshy-isis-operator` | media-3d | Meshy | active-operator-only-owner-attested | admitted-when-attested | none | | `media-isis-openrouter-operator-planned` | media-image-video | OpenRouter | client-bound-not-dispatchable | not-dispatchable | none | | `media-caption-dub-elevenlabs` | media-dubbing | ElevenLabs Dubbing | implemented-production-blocked | blocked-unattested | none | | `media-human-video-openrouter-catalogue` | media-video-metadata | OpenRouter | active-public-metadata-only | admitted-public-metadata-only | none | | `media-human-video-openrouter-render` | media-video | OpenRouter | implemented-production-blocked | blocked-unattested | none | | `media-realtime-music-local` | media-music | local Magenta Realtime runtime | active-when-locally-configured | admitted-local-only | none | | `media-human-video-kokoro-local` | voice-tts | local Kokoro runtime | active-when-locally-configured | admitted-local-only | none | | `media-human-video-face-geometry-local` | media-analysis | local YuNet process | active-when-locally-configured | admitted-local-only | none | | `media-human-video-audio-alignment-local` | media-analysis | local ffmpeg/wav2vec2 process | active-when-locally-configured | admitted-local-only | none | | `tts-openai-assistant-library` | voice-tts | OpenAI | library-only | not-dispatchable | none | | `media-isis-image-assistant-library` | media-image | injected Isis generation executor | library-only | not-dispatchable | none | | `subprocessor-ori-coarse-presence` | subprocessor-service | operator-selected Ori coarse-presence authority | implemented-production-blocked | blocked-unattested | none | | `subprocessor-ori-continuity` | subprocessor-service | operator-selected Ori continuity authority | implemented-production-blocked | blocked-unattested | none | | `subprocessor-ori-memorial` | subprocessor-service | operator-selected memorial authority | implemented-production-blocked | blocked-unattested | none | | `subprocessor-openrouter-account-readiness-library` | subprocessor-service | OpenRouter account metadata endpoints | library-only-no-production-caller | not-dispatchable | none | | `stt-openrouter` | voice-stt | OpenRouter | implemented | blocked-unattested | none | | `stt-deepgram` | voice-stt | Deepgram | active-conditional | admitted | none | | `stt-openai-whisper` | voice-stt | OpenAI Whisper | implemented | blocked-unattested | none | | `stt-telegram-openai-compatible` | voice-stt | operator-selected OpenAI-compatible STT | configured-blocked | not-dispatchable | none | | `tts-openrouter` | voice-tts | OpenRouter | implemented | blocked-unattested | none | | `tts-elevenlabs` | voice-tts | ElevenLabs | implemented-blocked | blocked-unattested | none | | `tts-elevenlabs-narration` | voice-tts | ElevenLabs narration client | implemented-production-blocked | blocked-unattested | none | | `tts-runpod-comfy-narration` | voice-tts | operator-selected RunPod/Comfy narration endpoint | implemented-production-blocked | blocked-unattested | none | | `tts-elevenlabs-tara-guidance` | voice-tts | ElevenLabs Tara guidance client | implemented-production-blocked | blocked-unattested | none | | `tts-elevenlabs-ori-presence` | voice-tts | ElevenLabs Ori presence client | implemented-production-blocked | blocked-unattested | none | | `tts-cartesia` | voice-tts | Cartesia | implemented | blocked-unattested | none | | `tts-telegram-openai-compatible` | voice-tts | operator-selected OpenAI-compatible TTS | configured-blocked | not-dispatchable | none | | `channel-sendgrid-email` | channel | Twilio SendGrid | active-when-configured | admitted-when-configured | none | | `channel-signup-email-http` | channel | operator-selected signup email HTTP delivery endpoint | configured-blocked | not-dispatchable | none | | `channel-smtp-email` | channel | operator-selected SMTP relay | configured-blocked | not-dispatchable | none | | `channel-twilio-sms` | channel | Twilio Programmable Messaging | active-when-configured | admitted-when-configured | none | | `channel-fcm-push` | channel | Google Firebase Cloud Messaging | active-when-configured | admitted-when-configured | none | | `channel-apns-push` | channel | Apple Push Notification service | active-when-configured | admitted-when-configured | none | | `channel-expo-push` | channel | Expo Push Service | active-when-configured | admitted-when-configured | none | | `channel-web-push` | channel | recipient browser push service | active-when-configured | admitted-recipient-controlled | none | | `channel-whatsapp-meta` | channel | Meta WhatsApp Cloud API | configured-blocked | not-dispatchable | none | | `channel-slack` | channel | Slack | active-when-configured | admitted-when-configured | none | | `channel-discord` | channel | Discord | active-when-configured | admitted-when-configured | none | | `channel-telegram` | channel | Telegram Bot API | active-when-configured | admitted-when-configured | none | | `channel-imap-smtp-assistant` | channel | operator-selected IMAP and SMTP services | library-only | not-dispatchable | none | | `channel-signal-cli` | channel | Signal via local signal-cli daemon | library-only | not-dispatchable | none | | `channel-twilio-voice` | channel | Twilio Programmable Voice | library-only | not-dispatchable | none | ## Channel boundary Channel delivery is not ZDR model inference. Task 14.2 does not claim that payload minimization is complete; Task 14.3 owns that enforcement. No channel has automatic price failover. The production environment composition rejects arbitrary signup email, dynamic SMTP, WhatsApp, and Telegram speech even when credentials or self-declared review ids are present; source-owned reviewed-target registries are required before those routes can dispatch. IMAP/SMTP assistant and Twilio voice are library-only, and recipient-selected Web Push is separately classified. Fixed delivery endpoints retain explicit public-material and deployment-dependent findings rather than being mislabeled as ZDR model routes. ## Upstream reconciliation Task 14.1 remains an immutable historical snapshot. This review maps every one of its provider targets and implementation legs, supersedes its now-stale active escalation disposition, and adds the alternate text, accessibility, moderation, media, signup delivery, Ori authority, Telegram speech, and Twilio voice surfaces that snapshot omitted. ## Evidence boundary A reconstructed operator record says a prior synthetic request received HTTP 403 at the US regional host. Because the receipt was reconstructed later and retained no contemporaneous response body or timing, it is an unverified historical observation. On 2026-09-19 the same request was measured contemporaneously: the US regional host answered HTTP 403 "Regional routing not enabled for this account" and the global host answered HTTP 200 on the same key and model, and one completion through the real Eve binding was served inside the response-provider allowlist. That measurement is retained in the owner attestation of that date. ## Sources and limitations The machine-readable record at `docs/audits/eve-sota-provider-subprocessor-review/2026-09-15.json` contains all eight independent posture dimensions, explicit per-source dimension applicability, official primary-source URLs, byte-bound implementation sources, controls, decisions, reconciliation, and limitations. This is an engineering review, not legal advice. Public terms cannot prove deployment-specific enterprise settings.