jes
Project / 项目 · In the catalogue / 在目录中查看
What Jev decides here · Jev 在这里做什么决定
Safety gating (安全闸门), Output validation (输出校验)
noul, choice: read in the code by a model, not yet by a person 由模型在代码里读到，尚无人复核
a model read the call site; no person yet 模型读过调用点，尚无人复核 · · Cited file / 引用的文件: src/jes/backend.py
Summary · 摘要
Open-source guardrails for AI agents: policies ask a decision model whether a prompt, retrieved page, skill, subagent, tool call, tool result or response carries prompt injection, a jailbreak, a data leak or a risky action, and block at your own threshold. Secrets and PII are redacted locally first.written by a model
面向 AI 智能体的开源护栏：由策略向决策模型询问提示、检索到的网页、技能、子智能体、工具调用、工具结果或回复中是否含有提示注入、越狱、数据泄露或高风险操作，并按你自己设定的阈值拦截。密钥和个人信息会先在本地脱敏。模型撰写机翻
Notes · 备注
On PyPI as jes. Jev is reached through LangChain's TypeSafeClassifier; Laya, which is not Jev, also works. Thresholds have no defaults: the examples' 0.72 for Jev is the authors' pick. Row drafted from the discovery queue (issue #14) by an AI assistant that read the README and the cited file on 2026-11-02; a maintainer has not yet read the call site.
以 jes 发布在 PyPI 上。通过 LangChain 的 TypeSafeClassifier 调用 Jev；也可使用不是 Jev 的 Laya。阈值没有默认值：示例中 Jev 用的 0.72 是作者自己的选择。本条目由 AI 助手根据发现队列（issue #14）起草，于 2026-11-02 阅读了 README 和所引文件；维护者尚未亲自阅读调用点。
Launches · 发布记录
Not launched yet. 还没有发布过。 Launch it / 发布它 ↗ · How a product launches / 怎样发布一个产品
Makers · Maker
Made this? Confirm or correct its entry / 这是你做的？确认或更正条目 ↗
The same form takes the product's one line and a demo link, in its maker's own words. 同一个表单也可以补上产品的一句话和演示链接，用 Maker 自己的话。
Badge for its README · README 徽章
[](https://kydlikebtc.github.io/awesome-jev/products/jes.html)One line for the product's README, linked to this page. The picture says that it is listed; while it is on the launch board, that it is launching; after a week in the top three, its place. It is rebuilt with the site, so the line never needs changing. 放进产品 README 的一行，链接到本页。图片显示已收录；在发布榜上时显示正在发布；进过某周前三后显示名次。它随网站一起重建，这一行不用再改。
Also under this pattern · 同一模式的其他产品
sub2api: Jev as a moderation endpoint
Drops in as a moderation API by asking many parallel Noul questions in one request, one per hazard category, with an anti-injection prefix on every instruction.
claude-code-templates: three Jev plugins
Three independently installable Claude Code plugins — guardrails, model router and skill suggestion — each with its own hooks and tests.
@langchain/typesafe
The JavaScript counterpart of the LangChain integration, with the same classifier and middleware shapes.
DeepChat: agent tool-permission review
Reviews each tool call on three axes — risk level, whether the user authorised it, and an explicit prompt-injection pressure check.
agentgateway: Jev and OpenAI guardrail
Three yes-or-no questions (jailbreak, harmful content, secret disclosure) on each request and each response, rejected with HTTP 403 at a probability of 0.5 or more and blocked on any evaluation error; the gateway sends half the evaluations to Jev as Nouls and half to OpenAI.