Repo · Safety & guardrails
jev-runtime-security
Ring Zero Security: runtime security for AI agents, enforced at the kernel layer.
Open github.com ↗From the repository
Ring Zero Security: runtime security for AI agents, enforced at the kernel layer. Decide what each agent can read, run, install and connect to, and keep a record of every refusal.
agent-securityai-agentsai-securitykernel-securitymcpruntime-securitysecuritysecurity-researchsecurity-tools
How builders describe it
Ring Zero Security: runtime security for AI agents, enforced at the kernel layer. Decide what each agent can read, run, install and connect to, and keep a record of every refusal.
Kernel-enforced runtime security for AI agents with eBPF/LSM: policy decides file, exec, package-install and MCP operations at the syscall, while Jev can run as an optional checks provider whose verdict can only raise severity. The Jev checks layer is off by default.
The decision Jev makes
Allow, flag or escalate a message, tool call or action.
Where it fits
Screening messages, tool calls and outputs before they cause trouble. Jev gives a fast, calibrated verdict that can sit in front of every request or agent action. All 229 safety & guardrails projects →
Related projects
Safety & guardrailssnapifRust crate and CLI that scores one agent tool call against a shipped policy and returns Auto, Review or Escalate, using TypeSafe Jev…GitHub · ★ 2 · snapif
Safety & guardrailsjev-sec.github.ioJev IDS website: one flow.GitHub · ★ 2 · jev-sec
Safety & guardrailsclaudetiquetteClaude Code plugin that rewrites a hostile prompt into a plain request.GitHub · ★ 2 · zahlekhan
Safety & guardrailsdsh-backdoor-guardGuard for DeepSeek Harness: every model-requested tool call is judged by a decision model, hosted TypeSafe Jev or a self-hosted LiquidAI d1, before…GitHub · miketako3
Safety & guardrailsopencode-auto-classifierOpenCode plugin that sends each shell command, file read, and edit to TypeSafe Jev for typed classifications, then folds those answers into…GitHub · schemaitat
Safety & guardrailspi-thunder-guardSafety guard for Pi: before each bash call (and writes outside the repo) TypeSafe Jev must be at least 85% sure the call keeps to a short restriction…GitHub · Mandalorian007