Agent guardrails with decision models

Gateway admission control that asks Jev what each incoming request is trying to do, filtering prompt injection and abuse.

Claude Code plugin that checks every reply and file edit against your CLAUDE.md rules with one Jev yes/no per rule.

PreToolUse firewall for Claude Code and Codex: shell-aware rules first, then Jev returns allow, ask or block, failing closed.

Claude Code plugin with nine Jev-judged gates for rules, scope, intent, completion and claims that escalate but never approve.

Safety gate plugin for Claude Code, Codex CLI and Antigravity: local sensitive-file checks, then Jev judges blast radius.

Security hook giving Codex, Copilot, Gemini, Cursor, pi, OpenCode and ACP an auto-mode-like guard via three Jev questions.

OpenBles Firewall 1: open prompt-injection detector for agent inputs, with a Claude Code hook and an optional Jev backend.

MCP server giving any agent Jev's classify, score, yes/no check and allow/confirm/block gating of risky tool calls.

Claude Code mod that answers auto mode's tool-call permission question with eight Jev yes/no checks behind a shell-aware blocklist.

Python library adding a Jev-based System 1 layer to agents for intent routing, tool safety checks and stuck-loop detection.

Claude Code plugin that scores a turn's redacted diff on eight Jev risk axes at Stop and asks Claude to reinvestigate once if high.

Async Python intent and tool router: Jev picks the handler, and a code-side confidence gate stops weak or invented decisions.

Ring Zero: kernel-level runtime security for AI agents, with Jev as an optional check that can only raise severity, never permit.

Claude Code hook that blocks known key formats locally and sends unknown high-entropy strings to Jev only in masked form.

Semantic MCP firewall that screens tool calls, results and descriptions with Jev, plus allowlists and session taint tracking.

Compiler that turns agent rules in CLAUDE.md and similar files into testable Jev programs: typed questions plus a coded verdict.

Risk gate for AI coding agents: Jev decides at five layers and Claude Code hooks enforce deny or ask deterministically.

TypeScript/Python policy engine where Jev only answers declared questions and code decides routes, gates and actions.

Project memory for Claude Code that asks Jev whether each chat statement is worth keeping and checks tool calls against saved rules.

Zero-dependency Python toolkit of nine agent skills whose typed decisions pass a code gate and are sealed in a hash-chained ledger.

Python pre-check layer that uses Jev Choice/Noul/Score to route agent requests to roles and gate side-effecting tool calls.

Coding-agent plugin that has Jev auto-approve shell permission requests it judges harmless and abstains on anything uncertain.

Jev decision layer for agents: seven MCP tools, an embeddable library and escalate-only Claude Code hooks at harness boundaries.

Stop hook for coding agents where Jev checks each attempted stop against plain-language rules and sends the agent back if one is violated.

Local gateway, MCP server and Claude Code hooks that let coding agents delegate explicit choices, classification and scoring to Jev.

OMP plugin that sends unreviewed bash commands to Jev and turns UNSAFE or UNSURE verdicts into Run-or-Deny prompts.

Claude Code hook where Jev reviews each tool call against risk, authorization and scope questions and a local policy returns allow or deny.

OpenClaw plugin that checks each outgoing agent message against its destination and blocks client names, credentials or internal hosts.

OpenCode 2 plugin that asks Jev six questions about every shell command (local or remote via FarHand) and prompts unless clearly safe.

Orca Lab plugin where Jev judges each agent command, passing routine ones, refusing dangerous ones and giving reasons for risky ones.