Jev Kubernetes

A Rust CLI that streams Kubernetes logs, triages them with local offline rules or typed Jev questions online, and presents an interactive terminal UI plus JSON reports. Collection is read-only and every judgment is advisory.

A Kubernetes admission webhook that asks Jev to allow, flag, or deny a manifest change for intent-shaped policies a Rego rule cannot express, keeping hard rules in Rego and failing closed by default.

SREGym benchmarks a Jev-only diagnosis pipeline with no LLM in the loop: it programmatically collects Kubernetes evidence, then Jev picks the root-cause component and supporting observations. Across 105 diagnoses on 21 faults it passed 80 (76.2%) at a 14.6 s median time and an estimated $0.15 total cost.