Agent action approval with decision models

OMP plugin that sends unreviewed bash commands to Jev and turns UNSAFE or UNSURE verdicts into Run-or-Deny prompts.

Unix-pipeable CLI for Jev and other System One models: ask questions, gate shell commands via exit codes, calibrate thresholds.

Claude Code hook where Jev reviews each tool call against risk, authorization and scope questions and a local policy returns allow or deny.

OpenCode 2 plugin that asks Jev six questions about every shell command (local or remote via FarHand) and prompts unless clearly safe.

opencode plugin that routes the agent's small multiple-answer decisions to Jev and labels each answer auto or escalate by confidence.

Orca Lab plugin where Jev judges each agent command, passing routine ones, refusing dangerous ones and giving reasons for risky ones.

Local FastAPI server for the Phocinae 144M decision model implementing the System One /v1/systemone contract on 127.0.0.1.

Pi extension that turns what you say into structured runtime constraints and checks every side-effecting tool call against them.

Pi extension using Jev as a tool-call gate, a bash output judge and a jev_ask tool, in shadow mode by default and failing open.

Auto mode for Pi: deterministic policy first, then Jev judges escalated bash/write/edit calls, failing closed when undecidable.

Decision governor for Pi routing plan strategy, model tier, tool permissions and outcome (finish, retry, replan) through Jev.

Jev Sentinel: guard for Pi, Claude Code and Codex that checks tool calls, tool outputs and replies, failing closed.

Pi package that gates pi-subagents dispatches with one Jev call against configurable rule sets and adds a jev_ask tool.

Advisory Jev sidecar for Pi: four pre-flight hazard checks before bash/write/edit and four diff-quality checks after edits.

Pi extension that auto-approves routine Bash commands via a System One model and escalates flagged ones, including obfuscated, to a human.

Minimal Pi permission gate: deterministic rules first, then a classifier answers allow, ask or deny per gray-zone tool call; fails closed.

Pi-based coding agent where Jev gates every tool call, picks the model tier, checks 'done' claims and trims tool output.

Pre-execution hook for coding agents that lets shell commands run, asks a human, or blocks them, with optional Jev classification.

Rust CLI and Claude Code PreToolUse hook that scores one tool call as Auto, Review or Escalate using a typed decision backend.

Rust harness for desktop and browser automation where Jev answers small closed questions about the screen to pick each action.

Tool-call firewall for Claude Code hooks and MCP servers: Jev answers seven risk questions and code maps them to allow, ask or deny.

Prompt router for Claude Code, Codex and Antigravity that picks model, effort, skill and language per request via Jev.

Local MCP server that adds a jev_decide tool to OpenCode agents, with a conservative confidence-gated policy for a developer agent.

Bun-based MCP server wrapping Jev with compact answers and a code-computed act, review or abstain verdict.

Agent toolkit for Claude Code and Codex whose optional /d router uses Jev to pick agents, skills and workflows and gate dispatch on intent.

Example where Jev decides whether to act on an AlgoVault crypto-perp verdict now; code applies thresholds and logs act, hold or escalate.

Discontinued DeepSeek Harness decision layer whose policies let Jev only narrow permissions and fail closed; successor is jevcore.

Six-file DSPy coding agent where Jev answers closed questions (safety, tool fit, history, delegation) and Python owns policy.

Vercel Labs' tiny Zig coding agent, listed for a typesafe_permission_reviewer builtin that runs permission decisions through Jev.

Windows desktop assistant that reads UI Automation controls and has Jev choose each action, pausing for approval before irreversible steps.