A Kubernetes admission webhook that asks Jev to allow, flag, or deny a manifest change for intent-shaped policies a Rego rule cannot express, keeping hard rules in Rego and failing closed by default.
The fine-tuned Laya checkpoint for four typed-decision workflows: 0.766 accuracy on 2,000 held-out decisions, above Jev 1.13.0's published 0.727 and the teacher self-agreement ceiling it trained past.
Superagent's security triage model: a continual fine-tune of AutoJev-27B that returns calibrated probabilities for prompt-injection and content checks, with a release policy at 0.70 unsafe.
The official Laya playground: eight tabs that show choice, score, and noul decisions on ticket triage, phishing, guardrails, RAG filtering, moderation, routing, and multilingual text.
Real-time geopolitical intelligence dashboard that uses TypeSafe Jev questions to score news headline severity into five threat levels and categorize events across 14 conflict, cyber and infrastructure domains, alongside news aggregation and a Country Instability Index.
OpenClaw plugin that checks every outgoing agent message against its destination channel tier, running local key-format and term rules and then five Jev Noul questions in one call through OpenClaw's decisionModel, which can point at hosted Jev or a local Kev.
A DeepSeek Harness plugin where Jev Choice and Noul checks gate every non-read-only tool call - deny confident high-risk calls, escalate ambiguous ones, auto-approve clearly granted reversible ones - and optionally score session messages so valuable context survives instead of being dropped oldest-first.
Kernel-enforced runtime security for AI agents with eBPF/LSM: policy decides file, exec, package-install and MCP operations at the syscall, while Jev can run as an optional checks provider whose verdict can only raise severity. The Jev checks layer is off by default.
Scanner pipeline that fingerprints each target with 30+ signal types, then asks Jev to score every Nuclei template 0-4 for relevance so high-value checks run first while all templates still run. A tag-based prefilter keeps about 8.6% of 13,764 templates with 100% recall on score >= 3, saving ~91% of scoring tokens.
x402 risk-check provider that scores agent counterparties before payment: OFAC, phishing and drainer feeds, transaction simulation, drainer-kit fingerprints and a Jev model reading context for injected instructions, issuing an ES256-signed attestation per verdict.
Chinese-language research project for multimodal social-risk moderation: a local Qwen3-VL-32B with language-side LoRA emits structured evidence JSON, and a fixed Jev policy turns that evidence into risk bands, with frozen test leaderboards and pure-Jev ablations.
Supervisor for unattended coding agents: it tracks cross-turn state and asks one batched Jev Choice whether a trajectory should continue, pause or escalate, while deterministic code owns dangerous-command blocking, budget caps and Ed25519-signed receipts.
A Claude Code PreToolUse hook that blocks known key formats locally and sends only masked unknown high-entropy strings to Jev for a Noul judgment, blocking at 0.80 and asking the human from 0.30 or whenever Jev is unavailable.
Permission gate extension for the pi coding agent: deterministic allow/deny rules and protected paths settle clear cases first, then gray-zone tool calls get one structured classify() verdict; Jev is an optional native classifier via TypeSafe direct, OpenRouter, or other gateways, failing closed on error.
Go linter whose rules are plain-English questions: AST matchers select nodes and Jev answers one Noul per fragment above the rule's threshold. It runs standalone, under go vet, and as a golangci-lint plugin, with cached answers so runs only ask about changed code.
Agent governance integration where Jev judges two Noul checks per tool call (beyond scope, destructive), an admission policy decides which judgments may become evidence, and admitted evidence degrades Trust, Delegation and Authorization in persistent R2R relation state.
OpenAI-compatible /v1/chat/completions proxy that answers an agent host's approval-guardian call with APPROVE, DENY or ESCALATE. Jev answers one Choice question with a calibrated distribution; missing keys, timeouts and malformed answers all fail closed to ESCALATE.
Cisco's security scanner for agent skills added a System One analyzer: it sends the full skill text to POST /v1/systemone as one advisory Noul question and records the probability, while being deliberately unable to emit a finding or change a severity.
An MCP proxy and hooks adapter that screens an agent's tool calls before they run and the tool results before the agent reads them, with thresholds in a policy file.
A black-box pass over ten public datasets with jev-1.13.0: injection detection, reranking, intent, tool routing, and three tasks the author says do not work.
Published evaluations of four automation workflows, security incidents, agent trace observability, invoice processing, and customer service, comparing Jev and frontier LLMs as structured workflows versus single prompts.
A pre-commit hook that answers five Jev questions about the commit message and staged diff together, warning on mismatches and blocking only on a credential-shaped line.
Pi extension that supervises a coding agent with Jev judgments: it holds risky tool calls, checks writes against project Markdown rules, and feeds most issues back to the agent as a steer instead of interrupting you. The conscience is beta and off by default.
Agent-ergonomic CLI following the AXI conventions that gives coding agents Jev judgments for blocking risky tool calls, screening fetched content for prompt injection, triaging logs, flagging risky diffs, and ranking many items. Routine commands are decided locally at no cost.
A Node CLI that sends source, configuration, build, and CI files to Jev and reports suspicious files and lines with probabilities, as a second opinion before running unfamiliar code.
A security hook for coding agents that asks Jev three typed questions before every tool call and scans tool results for prompt injection, with adapters for Claude Code, Codex, Copilot CLI, Gemini CLI, Cursor, pi, OpenCode and ACP.
Blind security benchmarks for Jev on public corpora: 662 prompt-injection messages and 200 matched vulnerable-code pairs, with raw per-sample results and a TUI dashboard.
A local-first MCP server that gives Claude Code, Codex, Cursor, and OpenCode structured quality scores from Jev across correctness, complexity, tests, security, and other dimensions while the agent writes code.
A CLI that turns Jev into Unix pipeline primitives: is, choose, score, filter, and guard commands return typed verdicts, stable exit codes, and versioned JSON without prompt or parsing glue.
A public benchmark comparing Jev with Claude Haiku 4.5 on whether an email agent should click a link, over 2,000 PhishNChips emails, with calibration, latency, cost, and five signal questions.
A measurement harness that sends each file snippet to Jev as one Noul question asking whether the content contains a usable secret credential, then scores the returned probability against the expected label.
A Rust CLI that classifies Git commit diffs and messages with Jev into bug fixes, security fixes with CWEs, and change types, then writes HTML or CSV reports from saved scans.
Published evaluations of four automation workflows, security incidents, agent trace observability, invoice processing, and customer service, comparing Jev and frontier LLMs as structured workflows versus single prompts.
Replacing a rule with a model in one step is how thresholds get tuned on the wrong data. The three stages, what each one learns, and the one-flag rollback that makes a canary safe.
TypeSafe serves Jev from one API. A second tier of independent sites wraps it with their own keys, credits, and playgrounds. How to read the disclaimers before you paste a key.