Repo · Safety & guardrails

OpenCode Security Guard

Linux OpenCode shell permission guard: local command check plus TypeSafe Jev read-only score ≥ 0.90 for auto-allow (ask otherwise; deny stays final).

Open github.com ↗

From the repository

Linux-only OpenCode shell permission guard using Jev; auto-approves simple reads and limited /tmp writes.

ai-safetyjevopencodeopencode-pluginpermissionssecurityshelltypescript

The decision Jev makes

Allow, flag or escalate a message, tool call or action.

Where it fits

Screening messages, tool calls and outputs before they cause trouble. Jev gives a fast, calibrated verdict that can sit in front of every request or agent action. All 229 safety & guardrails projects →

Related projects

Safety & guardrailssnapifRust crate and CLI that scores one agent tool call against a shipped policy and returns Auto, Review or Escalate, using TypeSafe Jev…GitHub · ★ 2 · snapif

Safety & guardrailsjev-sec.github.ioJev IDS website: one flow.GitHub · ★ 2 · jev-sec

Safety & guardrailsclaudetiquetteClaude Code plugin that rewrites a hostile prompt into a plain request.GitHub · ★ 2 · zahlekhan

Safety & guardrailsdsh-backdoor-guardGuard for DeepSeek Harness: every model-requested tool call is judged by a decision model, hosted TypeSafe Jev or a self-hosted LiquidAI d1, before…GitHub · miketako3

Safety & guardrailsopencode-auto-classifierOpenCode plugin that sends each shell command, file read, and edit to TypeSafe Jev for typed classifications, then folds those answers into…GitHub · schemaitat

Safety & guardrailspi-thunder-guardSafety guard for Pi: before each bash call (and writes outside the repo) TypeSafe Jev must be at least 85% sure the call keeps to a short restriction…GitHub · Mandalorian007