Jev Security

A Kubernetes admission webhook that asks Jev to allow, flag, or deny a manifest change for intent-shaped policies a Rego rule cannot express, keeping hard rules in Rego and failing closed by default.

A Claude Code plugin that replaces the built-in auto-mode permission classifier with Jev, deciding tool calls in about half the time while agreeing with the original on the calls it handles.

Superagent's security triage model: a continual fine-tune of AutoJev-27B that returns calibrated probabilities for prompt-injection and content checks, with a release policy at 0.70 unsafe.

OpenClaw plugin that checks every outgoing agent message against its destination channel tier, running local key-format and term rules and then five Jev Noul questions in one call through OpenClaw's decisionModel, which can point at hosted Jev or a local Kev.

Kernel-enforced runtime security for AI agents with eBPF/LSM: policy decides file, exec, package-install and MCP operations at the syscall, while Jev can run as an optional checks provider whose verdict can only raise severity. The Jev checks layer is off by default.

Scanner pipeline that fingerprints each target with 30+ signal types, then asks Jev to score every Nuclei template 0-4 for relevance so high-value checks run first while all templates still run. A tag-based prefilter keeps about 8.6% of 13,764 templates with 100% recall on score >= 3, saving ~91% of scoring tokens.

x402 risk-check provider that scores agent counterparties before payment: OFAC, phishing and drainer feeds, transaction simulation, drainer-kit fingerprints and a Jev model reading context for injected instructions, issuing an ES256-signed attestation per verdict.

A Claude Code PreToolUse hook that blocks known key formats locally and sends only masked unknown high-entropy strings to Jev for a Noul judgment, blocking at 0.80 and asking the human from 0.30 or whenever Jev is unavailable.

Cisco's security scanner for agent skills added a System One analyzer: it sends the full skill text to POST /v1/systemone as one advisory Noul question and records the probability, while being deliberately unable to emit a finding or change a severity.

Hacker News link to SafeDep's write-up on Gryph telemetry plus narrow Jev yes/no checks against developer policy.

A Java gateway that asks Jev four questions about a deposit or withdrawal, then applies a direction-aware routing matrix in code.

An MCP proxy and hooks adapter that screens an agent's tool calls before they run and the tool results before the agent reads them, with thresholds in a policy file.

Kunal Singh records coding-agent actions with Gryph and asks Jev yes-or-no questions against a short profile of how that developer usually works.

A pre-commit hook that answers five Jev questions about the commit message and staged diff together, warning on mismatches and blocking only on a credential-shaped line.

Pi extension that supervises a coding agent with Jev judgments: it holds risky tool calls, checks writes against project Markdown rules, and feeds most issues back to the agent as a steer instead of interrupting you. The conscience is beta and off by default.

Agent-ergonomic CLI following the AXI conventions that gives coding agents Jev judgments for blocking risky tool calls, screening fetched content for prompt injection, triaging logs, flagging risky diffs, and ranking many items. Routine commands are decided locally at no cost.

A Node CLI that sends source, configuration, build, and CI files to Jev and reports suspicious files and lines with probabilities, as a second opinion before running unfamiliar code.

A security hook for coding agents that asks Jev three typed questions before every tool call and scans tool results for prompt injection, with adapters for Claude Code, Codex, Copilot CLI, Gemini CLI, Cursor, pi, OpenCode and ACP.

Blind security benchmarks for Jev on public corpora: 662 prompt-injection messages and 200 matched vulnerable-code pairs, with raw per-sample results and a TUI dashboard.

A CLI that turns Jev into Unix pipeline primitives: is, choose, score, filter, and guard commands return typed verdicts, stable exit codes, and versioned JSON without prompt or parsing glue.

A public benchmark comparing Jev with Claude Haiku 4.5 on whether an email agent should click a link, over 2,000 PhishNChips emails, with calibration, latency, cost, and five signal questions.

A measurement harness that sends each file snippet to Jev as one Noul question asking whether the content contains a usable secret credential, then scores the returned probability against the expected label.

A Rust CLI that classifies Git commit diffs and messages with Jev into bug fixes, security fixes with CWEs, and change types, then writes HTML or CSV reports from saved scans.

A single-binary Rust gate that screens staged git diffs for unredacted secrets, prompt-injection attacks, and destructive commands with calibrated Jev probabilities in about 80 ms, invoked as git jev.

A tool-call gate for Claude Code, Codex, Cursor, and other harnesses backed by Jev: deterministic rules and a read-only allowlist run first, then one request answers allow, ask, or deny in about 400 ms.

Neon Function proxy and showcase site that puts request bodies to Jev: the judgment is the URL path, and bodies that pass can be forwarded unchanged to a caller-chosen HTTPS target.

A Hermes Agent plugin that replaces the auxiliary approval reviewer with TypeSafe's Jev decision model: one request asks six typed questions and deterministic code returns APPROVE, DENY, or ESCALATE.

A Next.js app that fetches a public GitHub pull request's dossier and runs one Jev systemOne judgment, returning risk scores, noul probabilities, review depth, and an approve, request-changes, or block verdict.

A test report that puts Jev in front of each agent action before it runs: most attacks were caught, with almost no false positives on legitimate tool calls.

An argument that security work is full of bounded engineering decisions that belong to Jev rather than a chat model, with examples of the calls that fit.