ARCHITECTURE DIAGRAM
CODEX / CLAUDE CODEOFFICIAL TYPESAFE SKILLWORKFLOW CODE + DOCS
Overview & Result
The project evaluates Jev as a pre-execution risk classifier for agent tool calls, including destructive commands, credential leaks, and unauthorized database operations.
How Jev fits in the loop
- The agent proposes a tool call and its parameters.
- Jev classifies the risk against a bounded policy question.
- Application code allows, blocks, or escalates the action and records the result.
How to reproduce
- Open the repository and inspect the scenario labels, ground truth, and scoring script.
- Run a small subset containing read-only, destructive, privileged, and exfiltration-like actions.
- Report interception, false blocks, false allows, and confidence separately.
Why this build matters
It gives the site a concrete guardrail evaluation source while preserving the distinction between probabilistic judgment and real authorization.
Limitations
- The reviewed post does not expose enough methodology to validate the headline result.
- A benchmark score is not an authorization policy; deterministic permissions must remain in code.
- Risk labels and attack examples need to be refreshed as agent tools change.