Skip to content

Prompt-injection detection with decision models

Flagging instructions smuggled into fetched pages, tool output or user input before an agent acts on them. Usually a yes/no probability with a block threshold.

68 public projects · page 2 of 3

  • GitHub Action that asks Jev yes/no questions about each diff chunk for secrets, vulnerabilities, complexity and prompt injection.

    ProjectbetaPython
  • MCP server giving agents typed Jev decisions (ask, choice, score, noul, batch) with calibrated probabilities via the OpenJEV API.

    MCP serverbetaTypeScript
  • Jev Sentinel: guard for Pi, Claude Code and Codex that checks tool calls, tool outputs and replies, failing closed.

    PluginbetaTypeScript
  • Local-first MCP server that returns only Jev-checked passages from big PDFs, Word files and spreadsheets, with exact row calculations.

    MCP serverbetaTypeScript
  • Pre-execution hook for coding agents that lets shell commands run, asks a human, or blocks them, with optional Jev classification.

    ProjectbetaJavaScript
  • Thirty worked Jev uses in ten levels, from a smart if statement to a pi coding agent that writes its own Jev questions.

    ProjectbetaTypeScript
  • Zero-dependency HTTP traffic and bot defense gate that can escalate requests to Jev for five typed risk questions.

    ProjectbetaTypeScript, Python
  • Buildathon entry adding failproofai policies plus Jev intent checks so an IT service-desk agent stops harmful actions.

    ProjectprototypeTypeScript
  • Pilot that puts Jev into LangGraph routing and Deep Agents guardrails and claim verification, with executed notebooks and caveats.

    ProjectprototypePython
  • Public Neon Function gateway that has Jev judge request bodies for prompt injection or unsafe replies before optionally forwarding them.

    ProxyprototypeTypeScript
  • Paper code where Jev screens agent tool output for relevance and prompt injection before the agent reads it.

    ProjectresearchPython
  • Portuguese study using Jev as a real-time guardrail and as a pre-evaluator for LLM-as-judge on customer-service agents.

    ProjectresearchPython
  • Research code showing that short, natural-looking context additions can flip decision models like Jev to a chosen wrong answer.

    ProjectresearchPython
  • OpenPoke fork sending yes/no decisions to Jev instead of Claude Sonnet, with an A/B on cost and latency and an injection-gate attack study.

    ProjectresearchPython
  • Stdlib-Python guardrail and model router for LLM gateways on Jev, with an independent accuracy, calibration and latency evaluation.

    ServiceresearchPython
  • Self-hostable calibrated decision model for images and text (Qwen3-VL-4B + LoRA) scoring 82.7 percent on public JevBench.

    ProjectresearchPython
  • Precision-first RAG service where Jev routes queries, triages each retrieved chunk and verifies every claim before an answer is released.

    ServicebetaPython
  • Unofficial Go client for Jev with YesNo, OneOf and Levels constructors and typed answer accessors.

    LibrarybetaGo
  • TypeScript guardrail library plus DeepSeek Harness plugin screening prompts, tool calls, results, responses and claims with Jev.

    LibrarybetaTypeScript
  • Node MCP server with a dozen fail-closed Jev judgment tools: verify, screen, find, rerank, classify, extract, review and gate.

    MCP serverbetaTypeScript
  • LangChain and LangGraph middleware that screens tool outputs for prompt injection and gates risky tool calls with Jev.

    LibrarybetaPython
  • Text review gateway between clients and AI services that classifies each user input with Jev and blocks or logs per configured scenarios.

    LibrarybetaGo
  • mu★ 504

    Pi-based coding agent where a small judge (Jev by default) answers yes/no, choice and score questions at 38 decision points per turn.

    CLIprototypeTypeScript
  • Go reverse proxy between nginx and an LLM backend that extracts each request's user input, asks Jev if it is harmful, and blocks or passes.

    ProxybetaGo
  • Agent context compactor where Jev scores transcript segments to keep verbatim or move behind a recoverable pointer.

    ServiceprototypePython
  • Video demo code comparing Jev with Laya, Strands Decider and Claude on grading, fetching and prompt-injection resistance.

    AppresearchPython
  • nev-lite: 11.8M-parameter static-embedding decision head that scores fixed option sets with no transformer pass at inference.

    ModelresearchPython
  • Openlayer library packing agent evals and guardrails (tool choice, grounding, injection, PHI) into one decision-model request.

    BenchmarkbetaPython
  • Benchmark of Jev versus Claude Haiku 4.5 as input safety classifiers on jailbreak, evasion and benign pseudo-harmful prompts.

    BenchmarkresearchPython
  • Blind security benchmarks for Jev on public corpora: prompt-injection detection (96.5% with context) and vulnerable-code detection.

    BenchmarkresearchGo