User repository on GitHub
- Forks
- 0
- Last pushed
- Updated Oct 2026
Repo stats from the GitHub API, cached Oct 2026.
CommunityJev Practices & Patterns
Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Use (arXiv 2610.04985)
A systematic study of Jev's security and privacy implications using the official API and NanoJev, a local model with controllable training data. It adapts prompt injection, adversarial suffixes, and poisoned training data, runs inference attacks against typed outputs, and maps dual uses.
- Stars
- 0
- Language
- Python
- Format
- Article
- Published by
- Community
- Last verified
- Oct 2026
Highlights
- Uses the official Jev API and NanoJev, a local model with controllable training data and updates.
- Adapts prompt injection and adversarial suffixes to manipulate decisions that depend on application state and user input.
- Implants backdoors in NanoJev through training data poisoning to examine supply-chain risk in open distributions and updates.
- Recovers sensitive information with membership, private-attribute, and internal-knowledge inference attacks despite constrained outputs.
- Tests four detection tasks (prompt injection, jailbreak, harmful content, AI text) plus jailbreak and model-extraction misuse.
Watch out
arXiv preprint posted October 4, 2026 (cs.CR, cs.AI), 16 pages. The threat findings are the authors' empirical evaluation of the official API and NanoJev; the backdoor and supply-chain risk is demonstrated by poisoning a controllable local model, not the hosted service, and the abstract reports no defenses or fixes.
Questions about this entry
Short answers drawn from the linked project or page.
It uses the official Jev API and NanoJev, a local Jev model with controllable training data and updates, which lets the authors test poisoning and update risks directly.
Because its decisions depend on application state and can be influenced by user inputs, the authors adapt prompt injection and adversarial suffixes to shift Jev's decisions.
The authors adapt membership, private-attribute, and internal-knowledge inference attacks and recover sensitive information even though Jev returns constrained typed answers, according to the study.
Four detection tasks: prompt injection, jailbreak inputs, harmful content, and AI-generated text, where Jev's general-purpose decision capability supports beneficial use.
The dual-use evaluation covers misuse scenarios involving jailbreak and model extraction alongside the defensive detection tasks, showing the same decision capability can serve malicious workflows.
Yes. The paper's comment field states the source code is available at github.com/shihe98/Security_Privacy_Jev, covering the security, privacy, and dual-use experiments.
The empirical evaluation finds Jev remains vulnerable to the examined security and privacy threats, while its decision capability can support both beneficial and malicious uses.
Reactions & coverage
Posts, threads, and videos about this entry from around the web.
YouTube: Kubernetes admission control with a decision model, fail-closed.
Hacker News: SafeDep Gryph plus Jev checks for compromised coding-agent behavior.
2 pointsDetecting Compromised AI Coding Agents with Jev and GryphRead the thread on Hacker NewsHacker News: Show HN: Agent Chaperone screens tool calls and results with Jev before the agent sees them.
sepehrsafari5 pointsShow HN: Agent Chaperone – Screen AI agent tool calls and results with JevRead the thread on Hacker NewsX: Secret detection with Jev, tested
Related terms
Glossary definitions related to this entry.
More Jev resources like this
JevOut shows short background context additions can flip correct decisions in four systems including Jev across seven datasets. Within 64 accepted evaluations per decision, additions redirect 61.4%-73.2% of initially correct decisions toward a wrong option fixed in advance.
Jev Practices & PatternsArticle#community#research#arxiv
Community
xzx34/JevOutPython
xzx34/JevOutPythonA position and case-study paper on using System One decision models like Jev and the open-source Laya as decision layers in LLM-driven penetration-testing harnesses. It names four decision points, runs an exploratory 13-vulnerability NeuroSploit comparison, and proposes Rave, an unevaluated model.
Jev Practices & PatternsArticle#community#research#arxiv
Community
An evaluation of prompt injection against Jev's typed probabilistic decisions using 510 reconstructed InjecAgent cases. Malicious content shifts action probabilities but rarely flips Jev to the attacker's target; score-feedback attacks raise fresh-run success from 1.8% to 3.5%.
Jev Practices & PatternsArticle#community#research#arxiv
Community
2GitHub stars
An automated framework that traces adversarial context through Jev-backed program decisions to downstream effects. Across 228 real-world Jev applications and 2,273 test cases, 81.5% show decision flips, 98.6% with potential security impact, and Decision Flip Rate beats the strongest baseline by 50.4 points.
Jev Benchmarks & EvaluationsArticle#community#research#arxiv
Community
xiaoxiaohg8d/JevProbe-Python
xiaoxiaohg8d/JevProbe-PythonA report identifying an arithmetic-dependent rejection bottleneck in Jev: on paired arithmetic problems answer-present accuracy reaches 99% while correct rejection falls to 7%. A development-selected decision threshold lifts rejection from 7% to 79% while retaining 97% answer-present accuracy.
Jev Practices & PatternsArticle#community#research#arxiv
Community
A paired, self-audited evaluation of an open-weight (Laya) and a hosted (Jev) System-1 decision model on 11 agent decision points: 7,283 base cases plus 6,640 robustness variants. Jev is significantly more accurate on 9 of 11 decision points, by 10.8 to 46.0 points.
Jev Benchmarks & EvaluationsArticle#community#research#arxiv
Community
David-DL-Space/sys1-evalJavaScript
David-DL-Space/sys1-evalJavaScriptFrom the Jev guides
Original write-ups on what this entry is for.
More than eighty preprints now evaluate, attack, and reproduce the typed-decision class. The broadest board, the coherence gap, the rejection bottleneck, and the attacks that still work.
Jev Practices & Patterns#research#evaluation#calibration
Read article
A Choice can only pick from its options. How rejection options, candidate coverage, and escalation bands keep a narrow taxonomy honest under inputs it never anticipated.
Jev Practices & Patterns#rejection#confidence#patterns
Read article
Most Jev accuracy problems are state problems. What belongs in a state, what is a pre-made judgment to leave out, and why naming the slice you ask about matters more than the wording.
Jev Practices & Patterns#state#design#primitives
Read article
From the Jev community
Posts from builders shipping with Jev right now.