Agent action approval with decision models

Starter kit that gates every MCP tool call with Kinde identity checks plus Jev risk signals, then allows, holds for approval or stops it.

Claude Code PreToolUse hook that auto-approves shell commands Jev is confident are read-only, and otherwise shows the normal prompt.

GitHub Action that asks Jev three yes/no questions about a pull request and approves it only when all clear a confidence threshold.

Agent-ergonomic Jev CLI and PreToolUse hook that scores shell commands for hazards and screens fetched text for injection.

Claude Code plugin adding typed Jev decisions to hooks: task kind, command risk, failure class, completion; never grants permissions.

Hermes plugin that asks Jev to review risky plans, check claims against sources, and judge whether a task is really finished.

Coding-agent tools on Jev with public benchmarks: a strict command gate, a code-review router Action, and use cases.

PreToolUse firewall for Claude Code and Codex: shell-aware rules first, then Jev returns allow, ask or block, failing closed.

Safety gate plugin for Claude Code, Codex CLI and Antigravity: local sensitive-file checks, then Jev judges blast radius.

Security hook giving Codex, Copilot, Gemini, Cursor, pi, OpenCode and ACP an auto-mode-like guard via three Jev questions.

Claude Code plugin that moves CLAUDE.md rules into hooks, denying rule-breaking edits and unasked deploys via Jev probabilities.

Home Assistant integration that asks Jev, Clef or local Laya about device actions, then applies policy and verifies state separately.

Claude Code job-application tool that finds roles, fills forms in Chrome, reads every answer back and sends only those you approve.

Claude Code kit wiring Jev into a tool-call guard, sub-agent sizing, file search, a browser agent, review, belay and compaction.

Local Laya decision layer for DeepSeek Harness: routes prompts, gates risky tool calls and swaps models, all offline at no token cost.

Unofficial, read-only MCP server exposing Jev as four advisory tools: decide, route, risk score and yes/no gate.

MCP server giving any agent Jev's classify, score, yes/no check and allow/confirm/block gating of risky tool calls.

Claude Code mod that adds $.jev so other mods can ask typed Choice, Score and Noul questions, for example to deny destructive commands.

Claude Code mod that answers auto mode's tool-call permission question with eight Jev yes/no checks behind a shell-aware blocklist.

Ring Zero: kernel-level runtime security for AI agents, with Jev as an optional check that can only raise severity, never permit.

Claude Code hook that blocks known key formats locally and sends unknown high-entropy strings to Jev only in masked form.

Compiler that turns agent rules in CLAUDE.md and similar files into testable Jev programs: typed questions plus a coded verdict.

Jev decision layer for DeepSeek Harness, MCP hosts and plain Node, offline by default with disclosed egress and opt-in gates.

Risk gate for AI coding agents: Jev decides at five layers and Claude Code hooks enforce deny or ask deterministically.

Zero-dependency Python MCP server where Jev gates shell commands, audits patches and resolves decisions, with SQLite caching.

Python pre-check layer that uses Jev Choice/Noul/Score to route agent requests to roles and gate side-effecting tool calls.

Coding-agent plugin that has Jev auto-approve shell permission requests it judges harmless and abstains on anything uncertain.

Voice assistant daemon for Hyprland Linux desktops that acts through tool modules, with Jev gating which requests and actions proceed.

Accessibility-first macOS computer-use MCP server and CLI, with optional Jev guards on targets and inputs before irreversible actions.

Asynchronous System-1 supervisory plugin for Hermes Agent with typed Jev decisions, ranking, verification and an opt-in tool gate.