jev-bouncer
Add an independent Jev risk check before Claude Code tool calls.
What Jev decides
Action class and risks such as irreversible effects, external writes, or secret exposure.
A Claude Code hook asks Jev about shell commands, edits, and MCP calls, then applies local policy and keeps a replayable decision log.
- Jev role
- Provide an independent risk judgment on proposed coding-agent tool calls.
- Input
- The proposed shell command, edit, or MCP call with its execution context.
- Output
- Typed class probabilities and independent risk probabilities.
- Decision frequency
- Before eligible tool calls; deterministic allowlist checks skip the model.
- Fallback
- Local allowlists and tripwires handle known shapes; configured policy applies the model result.
How it works
Overview
jev-bouncer evaluates eligible Claude Code tool calls before execution. It asks Jev for a typed action class and independent risk probabilities for shell commands, file edits, and MCP calls. A local policy turns those answers into allow, warning, or deny outcomes and logs each verdict. Read-only command shapes and suspicious URLs have deterministic local checks.
This is an additional probabilistic gate, not a security boundary. The repository explicitly keeps sandboxes and deny rules as the boundary and notes that hostile content can fool a model judgment.
- Language
- Python
- License
- MIT
- Author
- alsoleg89
Sources
Related projects
Jev Review
A code-review pipeline assembled from small typed judgments instead of one long reviewer prompt.
What Jev decides
What is risky, which files and evidence matter, what could fail, how severe it is, and who should review it.
Distill
Route coding-agent work, reasoning effort, and context retention through bounded Jev decisions.
What Jev decides
Which configured model and effort should handle a call, what evidence deserves attention, whether another attempt is useful, and what context should be retained.
jev-model-router
Route Claude Code model tiers and reasoning effort with one parallel Jev classification.
What Jev decides
Which fast, balanced, or deep tier fits the work, how much reasoning it needs, and whether production risk requires escalation.