Secret and credential leak prevention with decision models

Example of using Jev as a webhook guardrail inside the agentgateway proxy to inspect model requests and responses.

Claude Code PreToolUse layer where Jev answers YAML-defined questions about each tool call, with 19 hard rules and calibration runs.

Advisor for coding agents: git and Stop hooks flag test tampering, secrets and skipped hooks, with optional Jev review findings.

Unix filters (grev, tagv, rank, sortv, cutv, uniqv and more) that select, label and rank lines by meaning with Jev.

Claude Code plugin forked from jev-router that asks Jev how much effort each typed prompt needs and applies it to the turn.

Commit-msg hook where one Jev request checks the message against the staged diff and flags filler, contradictions and secrets.

Splunk search command that asks Jev typed questions about events and adds probabilities, choices and scores as fields.

Safety gate plugin for Claude Code, Codex CLI and Antigravity: local sensitive-file checks, then Jev judges blast radius.

Claude Code mod that answers auto mode's tool-call permission question with eight Jev yes/no checks behind a shell-aware blocklist.

Ring Zero: kernel-level runtime security for AI agents, with Jev as an optional check that can only raise severity, never permit.

Claude Code hook that blocks known key formats locally and sends unknown high-entropy strings to Jev only in masked form.

Node quality gate that scores each diff, commit message and doc set with three Jev Score lenses and a security Noul.

Hosted guardrails API checking LLM inputs, outputs and retrieved documents for injection, jailbreaks and leaks in one Jev call.

Semantic lint rules as yes/no questions to Jev, for review issues like logged secrets or unbounded retries that ESLint cannot express.

GitHub Action that asks Jev yes/no questions about each diff chunk for secrets, vulnerabilities, complexity and prompt injection.

Claude Code hook where Jev reviews each tool call against risk, authorization and scope questions and a local policy returns allow or deny.

OpenClaw plugin that checks each outgoing agent message against its destination and blocks client names, credentials or internal hosts.

OpenCode 2 plugin that asks Jev six questions about every shell command (local or remote via FarHand) and prompts unless clearly safe.

Pi extension using Jev as a tool-call gate, a bash output judge and a jev_ask tool, in shadow mode by default and failing open.

Jev Sentinel: guard for Pi, Claude Code and Codex that checks tool calls, tool outputs and replies, failing closed.

Rule-engine layer for Pi where Jev answers closed questions (destructive? leaked key? done verified?) with packs and fail-open actions.

GitHub Action that compiles .jev.yml rules into Jev questions and fails, comments on or passes a PR based on the numbers.

Local software factory running YAML pipelines of coding agents and shell steps, with a typesafe step for typed Jev judgments.

Tool-call firewall for Claude Code hooks and MCP servers: Jev answers seven risk questions and code maps them to allow, ask or deny.

Document evaluation CLI and CI gate using Jev or OpenAI Decisions, with pre-registered validation and documented reliability limits.

CLI gate for X drafts: local hard secret checks, then Jev Noul questions with thresholds; exits non-zero to block posting.

Hermes Agent approvals provider where one Jev request answers six typed questions and code derives APPROVE, DENY or ESCALATE.

Self-hosted LLM gateway with semantic cache, privacy sandbox and a 'Jev classifier' tiering requests across cheap and frontier models.

OpenAI-compatible streaming proxy that holds tokens in a buffer and releases them only after a Jev check passes, cutting leaks pre-screen.

Pi guard plugin with timing-based rules, Jev risk checks on tool calls, output redaction and reminders for repeated failures.