Agent guardrails with decision models

Large catalog of Claude Code agents, commands, hooks and MCPs, listed with community Jev mods for guardrails and subagent models.

Cline's official curated plugin collection, which includes jev-browser, jev-guard and jev-playground plugins.

Python/TypeScript/Go chatbot safety library checking user input and bot replies with Jev and returning one actionable verdict per message.

MIT plugin and local MCP server that hands an agent's closed questions to Jev or local Laya, with policy gates and receipts.

Auditable Zig terminal agent pairing Codex for coding with Jev typed preflight and postflight checks under deterministic policy gates.

One-file Mastra input processor that asks Jev whether a message must be blocked, failing open behind a deadline and circuit breaker.

Collection of production-shaped Python harnesses implementing most of TypeSafe's listed Jev decisions with confidence-gated logic.

Local open alternative to Jev using a 1.58-bit ternary 8B model to answer booleans, choices, scores and Pydantic extraction in ~25 ms.

Coding-agent hook that asks Jev one yes/no per project rule on every edit or turn and makes the agent fix any violation.

Gateway that checks agent tool calls with policy plus Jev evidence, then binds approval to a single-use permit for that exact action.

MCP proxy and hooks that screen agent tool calls before they run and their results before the agent reads them, using Jev judgments.

Xano backend template where Jev judges each agent tool call as safe, needs review or dangerous, and uncertain calls wait for a human.

OpenAI-compatible endpoint that answers an agent's command-approval call with APPROVE, DENY or ESCALATE from a Jev Choice, failing closed.

Cognitive control layer for OpenCode that uses Jev to compute GO, DELIBERATE, VERIFY or BLOCK for agent actions, observing by default.

Claude Code plugin adding Jev judgments to Bash, Write and Edit calls and their outputs; a semantic guardrail, not a sandbox.

Effect-based safety gate for coding-agent shell commands: fast rules first, then Jev decides allow/deny plus eleven risk checks.

Plugin suite adding Jev judgments to DeepSeek Harness: tool pruning, dead-loop blocking, a safety guard and skill routing.

DeepSeek Harness plugin registering a jev_decide tool so the agent can ask Noul, Choice or Score questions and gate on probabilities.

DeepSeek Harness plugin where Jev classifies risk, irreversibility, task fit and injection for every tool call before it runs.

DeepSeek Harness Web GUI plugin giving the agent a jev_ask tool, usage tracking and an optional command guard with explicit caveats.

Supervisor for unattended coding agents: one batched Jev Choice over the trajectory decides continue, pause or escalate.

Self-hosted software factory running coding agents in microVMs with verification gates; offers optional DSPy/Jev task intake advice.

Local guard layer for coding agents that blocks dangerous tool calls by deterministic rules, with optional Jev judgments.

Open-source agent guardrails that use Jev or LAYA to check prompts, retrieved content, tool calls and outputs for injection and risk.

Typed judgment layer for Claude Code, Codex and Hermes Agent: deterministic facts in code, language judgments in Jev, with receipts.

jevkit: zero-dependency CLI and eleven MCP tools giving agents typed Jev decisions for routing, triage, guarding, grep, rank and compaction.

Claude Code PreToolUse hook that auto-approves shell commands Jev is confident are read-only, and otherwise shows the normal prompt.

Open-source Jev skills for Claude Code, Codex, Cursor and Grok: one client to gate, route, guard, verify, triage, review and act.

Agent-ergonomic Jev CLI and PreToolUse hook that scores shell commands for hazards and screens fetched text for injection.

Claude Code plugin adding typed Jev decisions to hooks: task kind, command risk, failure class, completion; never grants permissions.