Why does this allow calls when Jev is down?

Fail-open by design: without positive evidence of danger the call is allowed. A deny needs a confirmed violation, malicious instruction, persistent weakening or unauthorized egress at or above threshold.

Where does the API key live so a repo cannot steal it?

The key lives in a user-level env file resolved via override, XDG config or home-directory paths. Project .env files are never read, so a checked-out repo cannot redirect the endpoint or steal the key.

What does install actually change in my project?

Per project, writing only UserPromptSubmit and PreToolUse handlers and leaving other handlers alone; running install twice is safe. Authorization comes from prompts in the same install, harness, session and agent scope.

What turns a risky Jev answer into a deny?

High-risk work also needs at least medium user authorization and narrow scope, credential probing and destructive effects raise effective risk, and each deny applies to one call without tainting later calls.

Build with go build -o bin/jev-approve ./cmd/jev-approve, then bin/jev-approve install --harness claude-code --project /path/to/repo --binary "$(pwd)/bin/jev-approve". It writes only its own UserPromptSubmit and PreToolUse handlers and leaves other handlers alone.

What is the license and platform support?

MIT. The first release targets macOS and Linux, and it does not change the harness's model, provider, sandbox, or bypass mode.

How are decisions stored and inspected?

Decisions are stored in SQLite at a state directory (JEV_APPROVALS_STATE_DIR, then XDG_STATE_HOME, then ~/.local/state/jev-approvals/state.db), with prompts and tool payloads redacted. jev-approve inspect prints one recorded decision.

CommunityJev Agents & MCP

Open Jev Approvals

Approval gate for Claude Code where hooks send each tool call to Jev and a local policy returns allow or deny without changing the harness model, provider or sandbox.

See highlights

Open github.com

Stars: 3
Language: Go
License: MIT
Published by: Community
Author: alexj11324
Last verified: Oct 2026

alexj11324/open-jev-approvals

User repository on GitHub

View on GitHub

Binary approval gate for Codex and Claude Code — every intercepted tool call is reviewed by TypeSafe JEV and composed through a versioned local policy, with scoped authorization.

Forks: 0
Last pushed: Updated Sep 2026

Repo stats from the GitHub API, cached Oct 2026.

About this project

When the agent is about to run a tool, a hook intercepts the call, TypeSafe Jev reviews it, and a local policy returns allow or deny. Third-party API setups usually cannot use the harness's own approval flow; this gate is the auto mode for that case. Jev is the reviewer. The local policy is the verdict. If Jev cannot produce one, the call is allowed — a deny needs positive evidence that the action is dangerous.

Quoted from the project's README. Read the full README.

Tagscommunity jevbest catalog-import

Works forJev for Classification Jev for Tool calling

Used inJev for Software & DevTools

Languages: Go

Highlights

PreToolUse review combines user messages, redacted tool input and verified facts.
User-level env lookup and redaction keep keys and payloads out of repos and disk.
Decisions persist in SQLite with inspect, probe, status and doctor commands.
First release targets macOS and Linux with per-project hook wiring.

Watch out

A deny needs positive evidence at 0.70 or higher; Jev outages, timeouts, bad responses, missing keys or a broken audit database allow the call and record it incomplete. The threshold is uncalibrated. Copy reviewed against the repository README on 2026-10-04, not from running it.

Questions about this entry

Short answers drawn from the linked project or page.

More Jev resources like this

jev-mcp

Go MCP server exposing Jev through OpenRouter or TypeSafe as five tools: decide, classify, verify, rerank and list_models. Each tool call is one paid inference request, answers are validated against the question asked, and the unchanged provider response is returned with its usage cost.