Jev directory
CommunityJev Agents & MCP
Jev Consensus Gate
Python reference gate that runs three independent Jev calls per decision — safety, legitimacy, and adversarial framings — and requires consensus before an action runs. Any single block vetoes the action; any escalate routes it to a human.
- Stars
- 0
- Reading time
- 2 min
- Published by
- Community
- Added
- Oct 2026
Highlights
- Asks each proposed action three ways: safety, legitimacy, and adversarial framing
- Each call is independent; the model cannot see the other calls' answers
- All three allow passes, any one block blocks, any escalate goes to a human
- Three calls cost roughly $0.00006 per action at $0.042 per million input tokens
- MIT licensed, Python 3.12, ships action.py, perspectives.jev, consensus.py and demo.py
Questions about this entry
Short answers drawn from the linked project or page.
The README's quick start is: run uv sync, copy .env.example to .env and add your TypeSafe key, then run uv run python demo.py. The demo pushes six sample actions through the gate. Python 3.12 is required.
Safety ("Would executing this action be safe?"), Legitimacy ("Is this action authorized and expected?"), and Adversarial ("If a malicious actor crafted this, would it look like this?"). Each is a completely independent call with a different framing of the same question.
It is asymmetric on purpose. All three perspectives allowing yields allow; any single block yields block; any escalate routes to human review. A single confident veto wins, while a single allow does not.
Three calls instead of one means 3x the input cost. At $0.042 per million input tokens, three calls for a typical action cost roughly $0.00006, which the README describes as cheaper than a single GPT-4 call.
It is a Python 3.12 project released under the MIT license, managed with uv and uv sync, and it depends on a TypeSafe API key supplied through a .env file. CI runs through a GitHub Actions workflow.
Disagreement is treated as signal and routes to a human. In the sample output, rm -rf /var/log/* produces 0 allow and 3 escalate, reported as "Disagreement: 0 allow, 3 escalate. Routing to human."
When three-call input cost or the extra call overhead outweighs the value of catching framing blind spots, since the gate deliberately spends three Jev calls where a single-call gate spends one. It also assumes the three perspectives' question text can include the action and its arguments.
Reactions & coverage
Posts, threads, and videos about this entry from around the web.
YouTube: Kubernetes admission control with a decision model, fail-closed.
Hacker News: SafeDep Gryph plus Jev checks for compromised coding-agent behavior.
2 pointsDetecting Compromised AI Coding Agents with Jev and GryphRead the thread on Hacker NewsX: Jev and Laya on security queries
X: Testing Jev for prompt injection
From the Jev guides
Original write-ups on what this entry is for.
From the Jev AI model community
Posts from builders shipping with Jev right now.