pi-jev-sentinel GitHub avatar by harshwasan

harshwasan /

Security & Guardrails

pi-jev-sentinel

Open-source Pi coding-agent extension that uses Jev to check tool calls before they run, scan files for prompt injection, flag risky replies, and keep secrets out of what it sends.

License: MITLanguage: TypeScriptLast push: 9/19/2026#security-guardrails#typed-decisions

What Jev Does in this Architecture

Before each tool call, Jev receives the user's request (or pinned task), the proposed command, the agent's explanation, and recent conversation. It answers a Choice for intent (on task / off task / injected / needs more context) and a Score for risk (safe / needs approval / harmful). Local code turns these into run, ask the user, or warn. If Jev says more context would help, the extension adds it and asks again.

Key Architecture Benefit

Adds structured choices or scores to the workflow; performance and cost benefits have not been independently verified.

Review & Benchmark Note: Author and repository text is preserved where clear; missing languages are enriched automatically. Checks establish source-level Jev integration, not runtime, safety, or performance validation.
Clone Repository
git clone https://github.com/harshwasan/pi-jev-sentinel.git

Inspect on GitHub

Check out the upstream repository README, issues, and commit log.

harshwasan/pi-jev-sentinel

Architecture Category

Security & Guardrails

Real-time safety guardrails, prompt injection detection, and moderation gates.

View all in this category →

Related Projects in Security & Guardrails

safer-with-jev repository icon by andrelandgraf

andrelandgraf

safer-with-jev

3
Security & GuardrailsMITTypeScript

An HTTP inspection gateway that checks request content with Jev before optionally forwarding it to an HTTPS destination.

What Jev does here

Jev judges prompt injection or unsafe content; local rules forward, flag or block the request.

Adds an inspectable content check ahead of an existing HTTP service.

#security-guardrails#typed-decisions
3 evidence links
Inspect details
pi-jev repository icon by y0usaf

y0usaf

pi-jev

70
Security & GuardrailsMITTypeScript

A Pi extension that flags tool risks before execution and checks output for secrets and failure types.

What Jev does here

Jev scores destructive actions, scope and output risks; configuration chooses warnings or confirmation.

Defaults to shadow mode and fails open on API errors; it is not a standalone security boundary.

#security-guardrails#coding-agents
35 evidence links
Inspect details
Security & GuardrailsMITTypeScript

Adds rule checks to Pi commands and file operations, then uses Jev to assess cases that need further judgment.

What Jev does here

Local rules handle explicit denies and allows before Jev assesses authorization and risk for bash, write, and edit.

Keeps policy and decision records available for adjusting operation gates.

#security-guardrails#coding-agents
22 evidence links
Inspect details