awesome-jev-tools

awesome-jev-tools

A curated awesome list of public projects and practices built on Jev, TypeSafe AI's System One model for typed decisions.

This README is the homepage aggregate of the current category files, so the latest accepted entries are visible here without drilling into subpages.

A curated list of public projects and developer patterns built on Jev, TypeSafe AI's System One model for typed decisions.

What is Jev? Jev is not a chat model. It does not write text or hold conversations.

Instead, it takes unstructured state alongside a typed question and returns a typed decision—such as a choice, a score, or a boolean—accompanied by a confidence rating.By eliminating token-by token decoding, Jev acts as a fast, low-latency decision layer directly inside software.

Developers use it to handle classification, infrastructure routing, rubric scoring, verification gates, and autonomous agent guardrails.Goal of this ListMost discussions about Jev are scattered across launch threads, social media, and one-off prototypes.

This repository centralizes those pieces to answer two practical questions for developers:

• Production Validation: Where is Jev actively making real decisions in live production workflows?
• Transferable Patterns: Which decision architectures can be cleanly copied and applied across different industries?

Goal of this list

Most Jev discussion is scattered across launch threads, model-gateway listings, and one-off prototypes. This list answers two practical questions quickly:

• Where is Jev already making real decisions in production workflows?
• Which decision patterns transfer across industries?

Inclusion criteria

We do not include:

• Generic classifiers, routers, or research agents that merely resemble the pattern without using Jev.
• Pure theory or opinion without a concrete practice.
• Launch-hype commentary with no working artifact or reproducible result.
• Long write-ups inside the list itself.
• Sources that are private, inaccessible, or too vague to classify.

Curation is not endorsement

Inclusion means one thing: the entry satisfies the inclusion rules above. It is not a quality review, a security audit, or a recommendation. We do not verify that a project compiles, that its tests pass, that its published numbers reproduce, or that its license permits your use.

This matters most for projects that arrive in bulk. When one author releases several repositories on the same day, they commonly share a single scaffold — the same AGENTS.md, CLAUDE.md, STATE.md, and CHANGELOG.md — land in one or two commits each, and may ship considerably more prose than code. Such projects can be entirely legitimate; they are simply unproven. Treat them as leads, not as validated tools.

Before adopting an entry, check it yourself:

Check	Why it matters
Does the code actually call the Jev API?	An entry can read well on a README alone. Look for a real request carrying typed questions, and a parsed answer coming back.
Is there a runnable check?	A test, an example with expected output, or a public demo. No check means no evidence that it works.
Do the numbers have a source?	Any accuracy, latency, cost, or volume figure should be traceable to the linked page. We strip claims we cannot verify, but the project page itself may still carry them.
How much of the repository is code?	Some projects are mostly prompt documents. That can be legitimate — just know which one you are getting.
Is there a license?	A few entries have none, which limits reuse and redistribution.

Found something wrong? Open an issue or a pull request — removal is as valid a contribution as addition. Rules for AI-assisted work, project depth, and submission rate live in CONTRIBUTING.md.

Current coverage

Each entry lives in exactly one category. When a project could fit multiple categories, we choose the one closest to its direct application domain. You can browse the list by category below.

• Classification & Routing — 109 entries
• Adaptive & Realtime UI — 3 entries
• Verification & Guardrails — 98 entries
• Scoring & Ranking — 29 entries
• Agent Decisions — 80 entries
• Data Labeling & Curation — 4 entries
• Evaluation & Benchmarking — 60 entries
• Calibration & Research — 49 entries
• Infra / SDKs / Integrations — 250 entries
• Game & Simulation — 71 entries
• Robotics & Physical — 4 entries
• Finance & Trading — 6 entries
• Compliance & Legal — 2 entries
• Content Moderation — 7 entries
• Browser & OS Action — 48 entries
• CLI & Pipelines — 80 entries
• Code Navigation — 14 entries
• Context GC — 36 entries
• Creative Tools — 24 entries
• Data & Search — 44 entries
• Domain Tools — 79 entries
• Voice & Conversation — 4 entries
• Related Practices / Discussions — 97 entries

Open categories still being seeded

• Scientific Pipelines — 0 entries

Full list

Classification & Routing

Source file: categories/classification-routing.md

• JEV Book Tags - Library cataloguing: a calibre plugin asks Jev Noul questions about book genres and subjects, applies configurable per-tag probability thresholds, and preserves existing tags while leaving uncertain results for review.

• Notra - Marketing analytics: production GEO platform whose NOTRA_JEV_CLASSIFIERS flag routes brand-visibility classifiers off an LLM and onto Jev Boolean decisions at a 0.5 threshold, targeting 300 ms p50.

• jev-router - Developer tooling: routes Claude Code tasks to the cheapest capable model by asking Jev to choose among candidates.

• Codex Jev Router - Coding agents: asks Jev Choice and Noul questions to select Codex subagent model and reasoning tiers, with confidence gates and a Sol fallback.

• jev-router (prismhq) - LLM infrastructure: open-source LiteLLM-based router where a Jev decision picks which model serves each request.

• pi-jev-router - Coding agents: adds automatic per-request model routing to the Pi coding agent through Jev decisions on Vercel AI Gateway.

• jcm-router - Coding agents: local proxy that picks the Claude model and reasoning effort per message with a Jev decision while leaving the cached main chat untouched.

• Switchboard - Developer tooling: assesses a new Claude Code or Codex conversation with Jev, then local confidence policy selects and pins its model and reasoning effort through follow-ups, tool calls, and resume to avoid unnecessary prompt-cache disruption.

• jev-agent-skill-router - Agent infrastructure: routes agent skill selection through typed, confidence-aware Jev decisions so weak matches are declined instead of guessed.

• typesafe-jev CV screener - Recruiting: screens a folder of CVs with Jev typed judgments against an editable policy, re-scoring candidates for free when the policy changes.

• Jev email intent workflow - Back-office automation: async LangGraph workflow gets a typed Jev Choice (invoice or general) and routes each inbound email to the matching handler.

• unclutter - Browser tooling: WXT extension where Jev decides per page element whether it is clutter, removing it under reusable template rules.

• typesafe-adblock - Browser tooling: Chrome extension that asks Jev whether each DOM element is an ad, turning ad blocking into a stream of per-element typed questions.

• DiffJury - Code review: routes each pull request by risk with Jev before a human reviewer is assigned, doubling as a review coach.

• HA-Jev - Smart home: Home Assistant integration that answers questions about the house as a probability, a choice, or a score.

• secondlayer - Fault triage: self-hosted Stacks data service whose Slack gate and fault-triage paths both run on Jev decisions.

• new-api-typesafe-plugin - LLM gateway: adds a native /v1/systemone endpoint to new-api so typed decisions sit behind the same gateway as chat models.

• duet-agent - Agent harness: keeps a Jev-backed routing table for deciding which model should serve a request.

• json-render - Generative UI: Vercel Labs' UI framework uses Jev in its compose path to pick which components and actions a rendered interface should contain.

• omo-jevlike-router - Skill routing: shrinks the skill catalog in a system prompt with one forward pass over a frozen Qwen, routing each request Jev-style.

• jev-cookbook - Developer education: 15 runnable Node recipes that route support tickets, file documents, categorize bank transactions and label Gmail with Jev Choice and Noul questions, sending low-confidence answers to human review.

• flue-jev-demo - Agent routing: routes a Flue agent's work with Jev through Cloudflare AI Gateway.

• sift - Content labelling: Chrome extension that labels every post in an X timeline - substance, humour, chit-chat, promo, junk, or AI-written - with Jev decisions.

• jev-tree - Classification: A hierarchical selector that asks Jev to traverse branches when a catalog has too many options for one question.

• litellm - Model Routing: LiteLLM can use Jev to classify requests for its complexity-based model router.

• oh-my-pi - Model Routing: Oh My Pi includes an optional TypeSafe judgment provider for bounded decisions in coding-agent workflows.

• jev-model-router - Model Routing: A community Claude Code Templates mod that uses Jev to suggest subagent models and reasoning levels.

• openchamber - Model Routing: OpenChamber’s optional automatic model router uses Jev to classify a message before selecting a configured model and reasoning level.

• firstmate - Model Routing: Firstmate can optionally use Jev to match task briefs to dispatch rules before local policy chooses an Agent configuration.

• hermes-jev-skills - Model Routing: Jev-powered model routing, memory, compaction, skill selection, computer and browser use for Hermes agents (also Claude Code and Codex)

• vexjoy-agent - Model Routing: An optional Jev routing path that matches VexJoy requests to specialist Agents, skills and workflows.

• WrongStack - Model Routing: An optional Jev dispatch classifier for choosing among WrongStack specialist Agents.

• jev-codex-router - Model Routing: Uses Jev to classify each Codex turn, then applies local rules to choose the model, reasoning effort, and speed mode.

• JevRouter - Model Routing: Routes among models, subagents, skills, MCP tools and CLIs using a shared candidate set.

• grok-bot-jev - Model Routing: Connect TypeSafe Jev to Grok Bot as a cheap decision layer - usage gates, skill template, examples

• loki - Model Routing: Loki optionally adds Jev typed-judgment tools and routes a new session to a model within the selected gateway.

• JevLoop - Model Routing: The agent loop where decisions don't cost a large language model call. Zero deps, runs offline, no API key needed.

• muse-jev-playbook - Model Routing: Jev decision layer for Muse: a fast, cheap TypeSafe AI gate before expensive agent work — confidence policy, recipes, reference router, honest measurement.

• sabi - Model Routing: Adaptive inference scheduling for AI agents — per-round model, effort and provider routing for coding harnesses: a Command Code mod or a local OpenAI-compatible proxy.

• typesafe-skill-router - Model Routing: An opt-in Hermes Agent plugin that asks Jev to suggest one relevant skill before a model call.

• dejevu - Model Routing: Jev? Déjà vu. Browser agents that run on instinct, no Jev needed. One look at the page, one call to any open model, one action. Faster than the Jev demo on Google Flights.

• jev-router - Model Routing: Cost-aware LLM router that picks the cheapest model capable of handling a query, using TypeSafe's Jev for fast classification instead of an LLM call.

• laya-jev-lab - Model Routing: Independent measurements of typed-decision models: Jev (TypeSafe API) vs Laya (open weights), and a local-first cascade that matches Jev's accuracy at 1.8x the speed

• Jev-Auto-Router - Model Routing: Jev Auto Router (Jev Router): experimental per-call GPT model routing for Codex via TypeSafe Jev and a local Responses proxy, with independent task verification.

• tool-prune - Model Routing: Calibrated tool selection and schema pruning for AI agents. Dual-engine: zero-dependency offline TurboQuant or TypeSafe System One (Jev). Prunes candidate MCP tools and schemas down to the relevant set before calling LLMs to eliminate hallucinations and save tokens.

• jev-for-all - Model Routing: Jev for every agentic development workflow — the System One decision model wired into whatever harness an agent codes in: OpenCode today, Claude Code and Hermes adapters next.

• Jev-Model-Router-Claude-Code - Model Routing: Begleitmaterial zum Video „Jev + Claude Code: 3 Use Cases".

• jev-opus - Model Routing: Claude Opus 5.5 with the effort level re-decided every step by the TypeSafe Jev reflex — without breaking the prompt cache. CLI + Claude Code plugin.

• jev-pilot - Model Routing: Let Jev steer Claude Code: the right reasoning effort, subagent model and skill for every prompt. A Claude Code plugin powered by TypeSafe's Jev (OpenRouter / TypeSafe).

• jev-claw - Model Routing: Typed model routing for OpenClaw agents, powered by TypeSafe Jev

• jev-model-router - Model Routing: Model router for Claude Code using Jev

• jev-router - Model Routing: Pass-through model router for Claude Code and Codex CLI that picks a model tier per human turn with Jev, TypeSafe AI's decision model

• jev-smart-router - Model Routing: JEV Smart Router — a Databricks App that uses TypeSafe JEV to pick which model answers each message, then runs inference on the chosen Databricks Foundation Model API endpoint.

• opencode-jev-orchestrator - Model Routing: An OpenCode orchestrator that keeps a cheap sticky parent model and, when Jev flags a hard turn, escalates through a child subagent.

• tiershift - Model Routing: Policy-driven model routing framework routing every LLM call to the cheapest capable tier in ~180 ms via TypeSafe Jev.

• todo-jev - Model Routing: A task-routing experiment combining skill conditions and environment checks to suggest rules, skills or a large model.

• chat2jev - Model Routing: Convert OpenAI-compatible Chat Completions requests into TypeSafe System One (Jev) **State / Questions**, compare generated text with structured judgments, and publish reusable question sets as proxy routes.

• Janus - Model Routing: Framework for measuring when to employ Jev versus generative LLMs on proprietary datasets, routing queries based on measured benchmarks.

• jev-codex-model-and-effort-router - Model Routing: Copy and paste this into your coding agent:

• jev-codex-pilot - Model Routing: A Codex overlay incorporating JEV to make the best decisions regarding model selection and depth of reasoning. All while automating the process via an automated Kanban system.

• jev-route - Model Routing: **Run it. Log it. Distill it. Own it.**

• jev-routing-experiment - Model Routing: Benchmarking TypeSafe's Jev decision model as a cost-efficient LLM router on RouterArena

• codex-jev-native-router - Model Routing: Experimental native Codex Desktop and CLI model routing with Jev and a configurable allowlist

• hermes-jev - Model Routing: Jev decision sidekick for Hermes Agent — TypeSafe and Cloudflare, explicit tools and official skill

• jev-agent-hooks - Model Routing: TypeSafe Jev hooks for Claude Code, Codex and pi: per-turn skill suggestion and subagent model routing

• jev-claude-router - Model Routing: Model router for Claude Code using Jev

• jev-model-router - Model Routing: Cost-optimized OpenRouter model router using TypeSafe's Jev, with a live full-catalog scorer instead of a hardcoded model list

• jev-router-playground - Model Routing: A model-routing playground where Jev picks a candidate and users compare the resulting answers.

• jevbus - Model Routing: A streaming event bus whose routing, subscription and consumption are decided by a probabilistic judge. The reference judge is TypeSafe AI's Jev (System One) model: send it a payload and a set of typed questions, get back calibrated probabilities instead of prose.

• openclaw-jev-plugin - Model Routing: A silenced message never reaches the language model, so it costs one Jev call and no model tokens. Direct messages always get an answer unless you choose to gate them too.

• stuntdouble - Model Routing: Drop-in /v1/systemone proxy that shadows Jev with local decision models (Kev, Laya) and reports whether you can swap

• hermes-jev-router - Model Routing: Hermes Agent plugin: TypeSafe Jev model routing + trim-then-compress

• jev-lab - Model Routing: Open lab: Jev (TypeSafe System One) routing in front of Claude Code - measured bugs, patch, and a hard fallback with alerts

• jev-research - Model Routing: A Jev and Herdr integration guide with a prototype for routing tasks to different Agents.

• JudgeJev - Model Routing: The public site replays **17 real, recorded Jev evaluations** of fictional support cases. It starts with a false shipping guarantee that scored **15.1%**, alongside a correct control that scored **95.5%**. You can inspect raw requests and responses, adjust decision rules, and see why a five-pair candidate fails a release gate.

• omp-plugin-jev-router - Model Routing: Route Oh My Pi prompts between simple and advanced models with TypeSafe AI's Jev classifier.

• jev-cc-codex-router - Model Routing: Per-turn model routing proxy for Codex: asks Jev which tier each task needs, rewrites the model, retries flaky upstream errors.

• jev-decision-gateway - Model Routing: A gateway that asks Jev continue / tool / verify questions and invokes a generative LLM only when policy says generation is needed.

• jev-demo - Model Routing: A customer-service routing demo that batches Jev questions before following the resulting route.

• jev-gateway - Model Routing: Session-aware OpenAI-compatible model-routing gateway powered by JEV

• Diffusion Jev - Visual classification: independent Jev-style DiffusionGemma/SGLang server that selects doodle and flower labels from image pixels with typed Choice questions and displays candidate scores in a drawing playground, with public evaluation artifacts and uncalibrated probabilities.

• jev-logtriage - On-call operations: batches collapsed Loki logs into one Jev call of Noul, Score, and Choice questions, then maps answers in code to suppress, watch, review, notify, or page, with low confidence going to review and nothing executed.

• DocJev - Document pipelines: LlamaIndex's open-source library that classifies a document against natural-language category rules or finds the boundaries between sub-documents, with swappable OCR backends (liteparse or LlamaParse) and a benchmark harness whose 40-document pilot classified 40/40 originals correctly at about 182 ms Jev decision p50.

• jev-fit - Developer tooling: hosted fit checker that sends a pasted software idea and a fixed typed rubric to Jev in one call, where a Choice picks plain code, Jev or a reasoning LLM behind a Noul gate for non-tasks, code vetoes Jev when the idea needs images, and low confidence returns "not sure"; closed source, free page and API.

• Jev-Mail - Email productivity: runs a 24/7 Gmail classifier on user-owned Google Apps Script where Jev scores urgency, importance, and category, routing uncertain or suspicious mail to Review without a local daemon.

• AI-decision-maker - Data cleaning: asks Jev Choice questions to classify CSV columns into a 13-code type vocabulary and each dataset into one of six scenes, then executes every write locally; measured Jev at 6.6–12.7× an LLM's token cost on this task because the output is already one character while per-question criteria repeat.

• hearth-jev-rental-search - Housing search: autonomous multi-source rental search where Jev decides which listings match the criteria.

• pi-jev-skill-picker - Coding agents: ranks the Pi agent's installed skills against the current task with Jev before any of them run.

• Feed Lens - Social media: uses Jev Noul judgments against per-platform, user-defined topic and expression labels to annotate Weibo, Threads and X posts directly in a Chrome extension.

• jev-table-import-mapper - Data import: maps an uploaded CSV's columns onto a destination table with a strict deterministic name-equality pass, then one Jev Noul per remaining (source, destination) pair plus a guard Noul per incoming column, mapping 10 of 10 columns of a 23-column export at 253 questions in one call, 915 ms, $0.0012, unmapped fields left visible above a 0.75 threshold rather than guessed.

• Jevidence - Developer education: Python sandbox asks Jev Choice and Noul questions about issue category and reproduction steps in opt-in live mode, then applies confidence and reproduction gates to propose a queue or review fallback without assigning the issue, with synthetic offline fixtures and policy tests.

• langchain-skill-router - Agent infrastructure: per-turn skill routing for LangChain deepagents, where Jev ranks the SKILL.md catalog against the request and the recent conversation and verifies the top candidates, so only the picked skill's instructions reach the prompt; the judge is a protocol that a self-hosted model or static rules can implement instead.

• jev-rental - Consumer rental: sorts every claim in a rental listing into verify-on-site / demand-evidence / high-risk-pitch buckets to build a pre-viewing checklist with code-templated questions; 50-sample calibration reports 0.910 gated accuracy and 0/10 injection flips.

• jev-resume-disqualifier - Recruiting: knocks a resume out of a pipeline in under 25 ms by asking Jev the disqualifying question first, so only survivors reach a full evaluation.

• Jev-IOT - Smart Utilities & Telecommunications: Ultra-low-cost, non-autoregressive AI telemetry classifier enabling sub-150ms anomaly triage and autonomic remediation across 10M+ smart meters for under $35/month.

• AgentScope - Multi-agent platforms: multi-agent platform by Alibaba implementing native TypeSafe Jev classification models for binary, choice, and score routing across agent pipelines.

• inbox-zero - Email productivity: open-source AI email assistant that uses TypeSafe Jev System One decision models to classify incoming email intent and triage action items.

• SiYuan - Knowledge management: privacy-first personal knowledge management system featuring native Jev decision model integration for high-speed document classification, flashcard intent categorization, and automated tag routing.

• Paca - Project management: self-hosted open-source Jira alternative that auto-assigns tasks with a Jev Choice over member descriptions, fills blank task fields with Choice and Score questions, and routes automation workflows on a Choice/Score/Noul condition node, applying answers only at 0.6 confidence or above and otherwise leaving the task unassigned or taking the Else branch.

• Qualm - Digital wellbeing: macOS menu bar app that reads the screen as text through the Accessibility API and asks Jev (or Kev, its local open-source counterpart) one Choice per user rule plus a Noul on whether the page is a payment, login or banking screen, stepping in with a pop-up only when a rule's probability clears its threshold and never on sensitive pages; on 119 trial pages with Kev, the short-video, feed, livestream and video rules had precision 1.00.

• Auto-optimizing Jev: half the errors, 1/7 the cost - Text classification: asks Jev a Choice over the readings of a Chinese polyphonic character while the model stays fixed and only the harness around it is optimised, ending at half the errors for a seventh of the cost.

• spending-effort-with-jev - Coding agents: Claude Code plugin whose UserPromptSubmit hook asks Jev a Choice over /effort levels (low / medium / high / max / unclear) plus a Noul on whether a hands-off request has a fuzzy spec, showing a switch tip before Claude starts only at 0.7 confidence or above, with 95% of tips pointing to the right level on a three-rater held-out set.

• tab-jev - Tabular prediction: asks Jev a Noul on the target plus Score rubrics about each row's text, turns every option's probability into a column next to the row's numeric fields, and lets a tabular foundation model such as TabPFN learn from the labeled rows in context, reaching 0.745 AUC at 256 labels on Kickstarter funding against 0.682 for Jev alone with calibration.

• tinystruct-typesafe-sdk - SDK: TypeSafe Jev integration library for building type-safe classification and routing decisions with structured outputs.

• sortwell - Personal inbox: MCP server and Claude Code plugin that files each captured note, link or meeting line with one Jev request of Choice questions for kind, project and next action plus a Noul for duplicates, routing to a project only at 0.45 or above and marking a duplicate only at 0.70 with a specific matching item, while the text itself is stored verbatim in append-only local files.

• IntentSQL - Natural-language SQL: turns a question about a SQLite database into a sequence of small Jev decisions instead of one generated query, released as an experiment alongside its decision lab.

• TypeSafe Conversation - Home automation: a Home Assistant voice agent built on Jev.

• Jevvie - Web companions: a page offers its actions as WebMCP tools and one Jev Choice picks the action a visitor's request means, with a Choice per argument asked alongside, asking back when the top two options are close and gating unprompted tips with a Noul (source).

• Gut Check - Smart home: Home Assistant integration whose eight install checks ask Jev a Score on each pending update's release notes and a Choice per item elsewhere, such as whether an unavailable entity is expected, worth fixing or safe to remove; answers below 0.5 confidence change nothing, and the rest that need action become Repairs cards the user must confirm.

• Trio-Spark Ticket Rush - Support triage: sends each of 1,000 support tickets to the System One-compatible Trio-Spark API as one choice over eight team queues and routes any ticket whose top probability is below 0.6 to human review instead.

Adaptive & Realtime UI

• DWIM - Desktop productivity: a macOS command palette that reads the frontmost app's menu tree through the accessibility API, asks Jev one Noul per menu item against the user's plain-language request, and presses the top match when it clears a probability threshold, falling back to a ranked list otherwise and never auto-running destructive items.

• shapeshift - Input: one text box that morphs into the right UI as you type, asking Jev which control the sentence calls for, and running offline.

• Jevcast - Desktop productivity: native macOS launcher and window manager that uses Jev to match natural-language window and action commands to known application workflows with local response caching.

Verification & Guardrails

Source file: categories/verification-guardrails.md

• Subcento - Agent payments: pay-per-call x402 pre-flight verifier gating transactions BEFORE an AI agent signs — GoPlus address risk + OFAC SDN screening + official TypeSafe Jev 3-in-1 fan-out (drainer Noul, risk Choice, intent-match Choice, jev-1.14.0 pinned) + deterministic calldata checks, returning an Ed25519-signed SAFE/CAUTION/BLOCK verdict; fail-closed (unreachable trust layer ⇒ BLOCK), edge paywall in Caddy, live on Base at 0.002 USDC/call.

• GeekLink Jev Subtitle Translator - Media localization: reviews source–translation SRT pairs with one Jev Noul decision per cue and flags suspected omissions or meaning changes for human review.

• is-malicious - Software supply-chain security: asks Jev Noul checks about source and build files, escalates suspicious chunks for a second pass, and returns implicated files and lines before execution.

• jev-review - Software engineering: staged code-review workflow and local dashboard where Jev gates each review stage before a change advances.

• pi-jev - Agent safety: adds a measured tool-call gate to the Pi coding agent so risky calls are checked by Jev before execution.

• OpenWork - Engineering workflow: wires Jev into its eval testkit as a verification judge so agent-produced work is gated by typed verdicts rather than a text model.

• jev-guard - Agent security: prompt-injection and dangerous-action guard for Claude Code, Codex, Pi, and ACP agents, with Jev deciding what to block.

• Foreman - Software factory: sits above Codex workers and has Jev independently judge whether an implementation is complete, its tests sufficient, or a human is needed.

• stanley-code - Coding agents: bounded Jev workflows that keep agent judgments typed instead of free-form.

• opencompany - Agent workspace: runs its approval review through Jev so workspace actions are gated by a typed decision.

• jev-git - Developer tooling: sub-second Git pre-commit & pre-push reflex gate that screens staged diffs for secrets and destructive commands using Jev.

• pi-heed - Runtime constraints: checks every side-effecting tool call from the Pi agent against what the user actually asked for.

• Hunch - Code review: plain-English rules that Jev checks code against, locally or on every pull request, with Jev picking one label per finding.

• Abide - Agent supervision: reads every edit a coding agent makes and has Jev flag rule violations, with the project reporting that an independent reviewer confirmed 10 of the 39 flagged edits and 11 of the 15 flagged turns.

• fx - Coding agent: ships a typesafe_permission_reviewer builtin so the agent's permission decisions run through Jev rather than an LLM call.

• Sniff Test - Writing: prose linter that asks Jev ten Boolean questions per paragraph (stacked hedges, restating closers, not-X-but-Y turns, naked cost figures) at a 0.7 threshold; CLI, pre-commit hook, GitHub Action and Claude Code skill; measured 182 ms median and 1 of 54 clean paragraphs flagged against 37 for Haiku 4.5.

• jev-pref - Code review: turns the preferences in a project's AGENTS.md into jev-pref.json rules that Jev checks against each diff hunk, staged file set, or pull request, returning fix_now or advisory findings to the coding agent and a nonzero exit code on blocking ones.

• jev-axi - Agent safety: PreToolUse gate for Claude Code and Codex that has Jev score each shell command for destructiveness, exfiltration, remote code execution, and security weakening, deciding routine commands locally so nothing is sent for them, and scoring 44/44 on the 44 labeled tool calls in its repository.

• pi-verdict - Agent safety: Pi permission gate where Jev answers one Choice (allow/ask/deny) per gray-zone tool call — deterministic rules settle clear cases first, deny blocks, ask escalates to a human confirm, and errors or timeouts deny; Jev is an optional backend, OpenRouter-only and experimental.

• jev-commit - Developer tooling: pre-commit hook where one Jev call judges whether the commit message matches the staged diff, flags debug leftovers and unmentioned work, and blocks only on a detected credential.

• strayguard - Developer tooling: pre-commit hook that asks one Jev Choice per newly added file (belongs, scratch, output dump, build output, local only) and flags likely strays at a 0.70 threshold in code; 0 of 60 false alarms and 40 of 40 strays caught on a 100-file eval.

• Blink - Code review: CLI that coding agents run after every change, with Jev checking the diff near-instantly in place of an LLM reviewer.

• hermes-jev-approvals - Agent approvals: proof of concept that puts Jev in front of Hermes Agent's command approvals, reporting 8.7x faster decisions and 4.4x fewer prompts to the user.

• jev-engineering - Agent safety: gates coding-agent tool calls with deterministic rules first and one typed Jev call second, then publishes a rerunnable 300-call injection test showing what the gate catches and what walks past it.

• Cribrix - Retrieval / RAG: filters retrieved chunks with a Jev Score plus Noul checks for answer evidence and prompt injection, then withholds any draft whose claims fail a batched per-claim Noul or cite numbers absent from the sources; on its replayed 62-question golden set it answered 0 of 22 unanswerable questions, against 4 of 22 for naive top-5 RAG.

• agentgateway - Security & Guardrails: A Jev guardrail example in Agentgateway using a webhook to inspect model requests and responses.

• Agent - Security & Guardrails: An optional Jev command-risk advisor inside a native macOS Agent, with a TypeSafeKit client.

• interlinked-cli - Security & Guardrails: Interlinked adds optional Jev judgments and evidence checks to local coding-agent checks.

• pi-warden - Security & Guardrails: Adds checks for project rules, out-of-scope actions, repeated failures, and completion claims to Pi Agents.

• building-with-typesafe-jev - Security & Guardrails: Unofficial skill that teaches coding agents to build with TypeSafe AI's Jev: typed decisions, calibrated confidence, and prior art from 150+ community projects.

• jevals - Security & Guardrails: Agent evals and guardrails as Jev decisions: one request per trace, a fraction of a cent, fast enough for the agent loop. Runs locally with Kev or Laya.

• captaincore - Security & Guardrails: Jev commands in the WordPress toolkit CaptainCore answer structured questions and prioritize malware scanner findings for review.

• jev-kit - Security & Guardrails: Everything you need to run TypeSafe's Jev with Claude Code: a tool-call guard, tier guard, file search, browser agent, review, belay, compaction and installers.

• jev-edge - Security & Guardrails: Typed-judgment admission control at the traffic edge: three-layer prompt-injection and abuse filter for nginx/OpenResty, powered by TypeSafe Jev. Fail-open, cached, hot-reloadable.

• pi-jev-auto-mode - Security & Guardrails: Adds rule checks to Pi commands and file operations, then uses Jev to assess cases that need further judgment.

• jevvy - Security & Guardrails: Jev-powered plugins for coding agents

• jev-safety-gateway - Security & Guardrails: This project integrates Jev to provide structured decisions for its workflow. See the repository for implementation details.

• jev-security-scan - Security & Guardrails: Reviews Agent Skills and MCP configurations and source code with local static checks and TypeSafe Jev before installation or execution, reporting file and line evidence, risk categories, model probabilities, and coverage gaps.

• jev-enforce - Security & Guardrails: 📏 Claude Code plugin that makes Claude follow your CLAUDE.md: every reply and edit checked by TypeSafe Jev ✅

• jev-engineering - Security & Guardrails: Jev Engineering: Typed Decision Systems for Reliable Agent Workflows. Paper, diagrams, and companion examples by Av1dlive.

• JevPR - Security & Guardrails: PR Risk review, automated by Jev

• pi-jev-sentinel - Security & Guardrails: Open-source Pi coding-agent extension that uses Jev to check tool calls before they run, scan files for prompt injection, flag risky replies, and keep secrets out of what it sends.

• dsh-jev - Security & Guardrails: Jev (System One decision model) plugin suite for DeepSeek Harness (dsh)

• jev-auto-approve - Security & Guardrails: Jev is a decision model: it answers a typed question with a calibrated probability rather than prose. This action asks it one yes/no question per thing worth being sure about — answered in parallel in a single call — and approves only when every one of them clears your threshold:

• jev-block-android-ad - Security & Guardrails: An Android notification and SMS filter that applies local OTP rules before asking Jev whether a message is advertising noise.

• jev-guard - Security & Guardrails: Probability-scored guardrails for Claude Code: deny rule-breaking edits and unasked-for deploys, route your docs into each prompt, and check the final answer against the turn's own evidence.

• jev-phishing-bench - Security & Guardrails: The signal result above was challenged on three points: no non-AI baseline, selection and evaluation on the same emails, and no equivalent decomposition for the LLM. Three controls were added (`bench/heuristics.py`, `bench/protocol.py`, `run_llm_signals.py`); nothing above was changed. Full tables in `results/report.md`, chart in `results/controls.png`.

• jev-tool-permissions - Security & Guardrails: Adds tool-call approval and tool-list pruning to the Vercel AI SDK.

• pi-jev-guard - Security & Guardrails: Check Pi code edits against repository Markdown rules with TypeSafe Jev

• agi-jev-containment - Security & Guardrails: **Open-source AI agent monitoring, malicious-agent detection, and escalate-only containment** for sandboxed LLM agents. Local HackSpain 2026 stack (AngryRobot dashboard): FastAPI, React/Vite, Neo4j. Classifies a *chain of actions*, not a single tool call. A model never pulls the plug.

• jev-baselines-eval - Security & Guardrails: Every latency number here is **wall-clock duration of one API call** measured in the client: a timestamp before the request, another after the full response body is read ([`code/run_b1.py:32`](https://github.com/v-modal/awesome-jev-tools/blob/HEAD/code/run\_b1.py), [`code/common.py:50`](https://github.com/v-modal/awesome-jev-tools/blob/HEAD/code/common.py)). Non-streaming on both sides, so these are completion times, not time-to-first-token.

• jev-model-tokengate - Security & Guardrails: An OpenAI-compatible proxy that sits between your LLM and your users. It evaluates each sliding window of tokens **while the response is still streaming** and cuts the stream **before** a violating token can reach the screen.

• open-jev-approvals - Security & Guardrails: Binary approval gate for Codex and Claude Code — every intercepted tool call is reviewed by TypeSafe JEV and composed through a versioned local policy, with scoped authorization.

• reflex - Security & Guardrails: A coding agent and personal assistant built on the Pi coding agent. Jev checks every tool call, turn and voice transcript, and code decides what happens next: allow, ask or block an action, which model tier to use, and whether a "done" was actually verified.

• ego-jev-ultrafast - Security & Guardrails: Jev drives your Ego Lite browser: one typed-choice request per step. Single-file, zero-dependency port of browser-use/jev-ultrafast with multi-model benchmarks and extra guardrails. Unofficial.

• jev-decisions - Security & Guardrails: Jev Decisions Plugin for Hermes (and other AI Agents): tool risk reviews, human approval recommendations, evidence checks, and a local decision journal.

• jev-guard - Security & Guardrails: High-speed, cross-agent safety gate plugin for **Claude Code**, **Codex CLI**, and **Antigravity**.

• jev-secret-detection - Security & Guardrails: Benchmark and tool evaluating how well TypeSafe Jev identifies real secret credentials in file snippets.

• jevshield - Security & Guardrails: Sub-100ms security gate for AI agent tool calls, powered by TypeSafe's Jev (System-1) decision model. Single-request Choice/Noul/Score evaluation, dual-factor blocking matrix, calibrated-confidence routing, fail-closed parsing, zero-config local fallback. LangChain-ready.

• oc-plugins - Security & Guardrails: The oc-auto-perms plugin in an OpenCode plugin collection uses Jev to check tool intent against natural-language rules.

• actiongate-jev - Security & Guardrails: Open-source Jev tool-calling authorization gateway for AI agents: deterministic policy, exact-action single-use permits, MCP and HTTP enforcement.

• antivirus - Security & Guardrails: A file scanner that sends extracted features to Jev for a verdict, a 0–4 severity score, and Noul indicators, then applies local quarantine or review rules.

• claude-jev-plugin - Security & Guardrails: TypeSafe Jev semantic guardrails for Claude Code

• dsh-jev-verify - Security & Guardrails: Jev (TypeSafe System One) decision tools + live verification benchmark for DeepSeek Harness: jev_decision (choice/score/noul) and jev_verify, honest by design.

• grok-jev-guard - Security & Guardrails: `grok-jev-guard` sits immediately before a meaningful Grok Bot tool sequence. It receives a compact description of the pending operation and returns one explicit action:

• jev-cvss - Security & Guardrails: Scripts that use Jev to select CVSS metrics from vulnerability descriptions, then compute v3.0, v3.1 or v4.0 scores in Python.

• jev-pii-checker - Security & Guardrails: A CLI that sends text to TypeSafe Jev for PII category Nouls and a sensitivity Score, then locates spans with regex and segmentation.

• jev-risk-check-provider - Security & Guardrails: x402check — LIVE payer-intent risk checks for x402 agent commerce: typed decisions (TypeSafe Jev), ES256-signed attestations, mainnet USDC settlement. did:web:x402check.xyz

• opencode-jev-guard - Security & Guardrails: When FarHand is active, the agent's commands run on a remote host through the `farhand_remote_shell` MCP tool instead of `shell`. OpenCode's permission request for an MCP tool carries no arguments, so the plugin takes the command (and its `cwd`) from the `execute.before` hook, which OpenCode runs first.

• claude-jev-warden - Security & Guardrails: Real-time quality gate and Art Director Warden for Claude Code powered by TypeSafe Jev 1.13 non-autoregressive decision model

• guardrail-chatbot-jev - Security & Guardrails: It is a library, not a service. You call it, you get a verdict, and your code decides what to do. It runs in **Python and TypeScript**, both reading the same policy file, so the two sides of your stack cannot drift apart. Neither package has a third-party dependency.

• jev-chrome-extension - Security & Guardrails: 1. Open any website. 2. Click the Jev icon. The side panel opens on **Drive**. 3. Type a goal, e.g. *Search Wikipedia for "espresso" and open the article*, and press **Run**.

• jev-preflight - Security & Guardrails: A bounded Jev risk check for Claude Code: eight risk axes, one request, one optional reinspection.

• jev-reasoning-navigator - Security & Guardrails: En lugar de depender de heurísticas matemáticas frágiles o distancias vectoriales locales de coseno, `JEV-Reasoning-Navigator` utiliza **TypeSafe AI (`typesafe-sdk`)** como motor único y autoritativo de decisión cognitiva:

• jev-test - Security & Guardrails: Prototype: AI-assisted NZQA marking from rubric criteria alone, using TypeSafe Jev for guardrails, criterion scores and confidence-based triage. NOT ENDORSED BY NZQA - CONCEPT ONLY

• momus-review - Security & Guardrails: Code review on rust and javascript (+languages soon) applications. Following lenses correctness, security, reliability, compatibility and testGap.

• pkg-gate - Security & Guardrails: Pre-install security gate for npm lifecycle scripts using TypeSafe System One. Evaluates preinstall, install, and postinstall hooks across intent, threat severity, secret access, and remote execution to intercept supply-chain attacks before execution.

• traffic-guard - Security & Guardrails: High-throughput traffic and attack defense gate for incoming HTTP traffic with zero required dependencies, wire-order header validation, and TypeSafe System One acceleration for bot mitigation, exploit detection, and risk scoring.

• laya-browser-guard - Security & Guardrails: A passive, privacy-first Chrome security copilot that combines deterministic browser-visible checks with local Laya and official Jev typed decisions. It evaluates redacted evidence from scripts, resources, forms, headers, and DOM signals, then explains investigation priority without attacking the target.

• Edward - Agent operations: one batched Jev Choice over the cross-turn coding-agent trajectory decides continue, pause, or escalate, with low-confidence verdicts routed to a human while deterministic code keeps dangerous-command blocking, budget caps, and an Ed25519-signed receipt chain.

• taste-lint - Writing / UI: CLI that uses Jev probabilities on semantic taste checks to catch AI slop in UI, copy, and agent instructions before ship; measurable rules stay local and active findings can fail a run.

• jev-harness - Developer tooling: System 1.5 quality gate and token optimizer for AI coding agents that triages test failures in < 500 µs to resolve missing dependencies without frontier LLMs, aborts circular doom loops, and modulates reasoning effort across Python, TypeScript, and Rust.

• TryJevAI - Scheduling: public Jev playground uses a typed Choice with an explicit Unresolved option to distinguish a mentioned arrival time from an agreed meeting time, showing the returned probabilities and prompting for missing agreement before treating a time as settled.

• Agent Chaperone - Agent safety: MCP proxy plus hooks that screen a tool call before it runs and a tool result before the agent reads it, with 45 test files behind it.

• jev-proof - Creator sponsorship: verifies each sponsored ad segment in video subtitles against acceptance rules with one Jev Noul+Choice call per fact while deterministic code keeps the confidence gate; 90-sample calibration reports 0.922 gated accuracy and 0/15 injection flips.

• jev-fidelity - Editorial QA: asks Jev per fact unit whether an edit preserved the original (preserved / equivalent / drift / lost) behind a 0.70 confidence gate in code, degrading to human review rather than pass; 55-sample calibration on real Wikipedia revision diffs reports 91/92 gated judgments correct and 0/20 injection flips.

• approval-judge-bridge - Agent safety: OpenAI-compatible /v1/chat/completions proxy that gates an agent's shell commands through a calibrated Jev Choice decision with fail-closed semantics.

• Dub - Link safety: calls typesafe-ai/jev in malicious-link-check.ts before a short link is created, so the URL is gated by a typed verdict rather than a blocklist.

• JevGate - Code review: CI and coding-agent gate that parses code locally and asks Jev Noul, Choice and Score questions about one function, file outline, candidate copy pair or test at a time, turns answers at 0.80 into review or consider findings with file and line, fails the build on review, and keeps undecided files as uncertain instead of clearing them.

• dsh-jev-interceptor - Coding agents: DeepSeek Harness plugin where a Jev Choice risk class plus Noul irreversibility, task-match, and injection checks gate every non-read-only tool call (deny confident high-risk, ask ambiguous, delegate the rest), Noul scope and reversibility questions auto-approve clearly-granted calls behind argument-evidence gating, and a per-message Score re-ranks what a referenced session keeps instead of oldest-first dropping — fail-closed to stock behavior, shadow mode with a /jev-stats command, 64 tests.

• jevci - Quality gate: asks four typed questions about each change — three Score lenses and one Noul — and blocks a diff, commit message or doc set that falls below the resulting quality score, from the terminal, a pre-commit hook or a GitHub Action.

• pi-subagent-jev - Agent governance: when the Pi main agent dispatches a subagent, evaluates the task text against configurable rule sets in one typed Jev call (per-rule probability questions with below/above thresholds), blocks the dispatch with per-rule reasons on any hit, and fails open to allow on errors.

• jev-lint - Software engineering: uses Jev Noul judgments and local thresholds to flag team-rule violations as Claude Code and Codex edit, helping agents fix them before code review with configurable rule packs and repository-specific rules.

• jev-secret-guard - Agent security: Claude Code PreToolUse hook that blocks known key formats locally and sends unknown high-entropy strings to Jev only in masked form for a Noul on whether they are real credentials, blocking at 0.80 and asking the human from 0.30 or whenever Jev is unavailable; 6 of 6 secrets an