Agent guardrails with decision models

Execution-control layer for MCP agents: deterministic policy, Jev decisions, human approval and one-use execution permits.

Pi guard plugin with timing-based rules, Jev risk checks on tool calls, output redaction and reminders for repeated failures.

Buildathon entry adding failproofai policies plus Jev intent checks so an IT service-desk agent stops harmful actions.

Small one-file Pydantic AI examples where Jev guards prompts, gates shell commands, judges evals and plays Flappy Bird.

Rust governance layer that treats Jev's per-tool-call scope and destructiveness checks as evidence feeding persistent trust state.

Public Neon Function gateway that has Jev judge request bodies for prompt injection or unsafe replies before optionally forwarding them.

Hackathon arena where 200 people attack a support agent and a Jev allow/block/escalate gate on every tool call is hardened each round.

Proof-of-concept Claude Code plugin where Jev checks every pending tool call against the session plan, then allows, asks or blocks.

Reference Telltale analyzer extension that asks Jev typed questions from configurable guard packs about coding-agent actions.

CI gate that asks Jev to classify database migration DDL as SAFE or DANGER and blocks destructive changes before they reach Supabase.

UiPath bring-your-own-guardrail connector that runs AI Trust Layer llm_as_judge checks as Jev noul questions.

Portuguese workshop: a LangGraph sales agent where each decision step can be made by Jev or a frontier LLM and measured side by side.

Benchmark testing whether Jev or open Kev can replace an LLM judge in agent guardrail callbacks on 7,925 public examples.

HKUST policy-tree guard with a 2B open classifier that routes each agent request or action to a leaf and classifies safety.

Same support agent and 25 rules guarded twice, by an LLM judge and by Jev, compared on accuracy, latency, cost and coverage.

Portuguese study using Jev as a real-time guardrail and as a pre-evaluator for LLM-as-judge on customer-service agents.

Research system that uses a safety-tuned Jev-style predictor to forecast constraint violations of a robot VLA policy and gate actions.

Preliminary SHADE-Arena study of Jev as a monitor and per-action gate for covert agent sabotage, compared with Gemini 2.5.

Stop hook for Claude Code and Codex that refuses 'done' until a check passes after the last edit; Jev advises but never causes a block.

TypeScript guardrail library plus DeepSeek Harness plugin screening prompts, tool calls, results, responses and claims with Jev.

PRAXEON runtime supervisor for autonomous agents: actions are checked by policy, a LAYA or TypeSafe semantic judge, signed and sandboxed.

Text review gateway between clients and AI services that classifies each user input with Jev and blocks or logs per configured scenarios.

.NET SDK for System One with typed QuestionSet handles and a Microsoft.Extensions.AI package for guardrail and routing middleware.

Python policy-as-code SDK that runs Noul, Choice and Score rules defined in YAML through Jev, with audit mode and fail-closed options.

AI SDK middleware and OpenAI-compatible proxy that runs seven Jev checks on every LLM response, gated by confidence.

Go reverse proxy between nginx and an LLM backend that extracts each request's user input, asks Jev if it is harmful, and blocks or passes.

Small web demo that takes a planned agent tool call and context and returns allow, ask_human or deny with Jev risk scores.

Measurement-first lab deciding which classifier technique, Jev, rules or other models, earns a place in a coding-agent fleet.

Small one-pass classifier that labels shell commands as read-only, reversible or destructive before an agent runs them.

122M multilingual local decision model answering Choice, Noul and Score in milliseconds on CPU behind a /v1/systemone server.