hardening

MIT-licensed DeepSeek Harness plugin that scores non-read-only tool calls for risk, irreversibility and injection suspicion with TypeSafe's hosted Jev model, escalating or denying only in enforce mode; needs a paid API key.

MIT-licensed guard for coding agents (a Pi extension and Claude Code/Codex CLI plugins) that scores tool calls, outputs and replies with TypeSafe's Jev for injection and risk, then allows, asks, or blocks; needs a TypeSafe key.

Apache-2.0 fail-open gateway filter for OpenResty, APISIX, Kong, Envoy and JS hosts that scores inbound LLM requests for prompt injection, judging with a paid TypeSafe Jev key, a fine-tuned Laya or an OpenAI-compatible endpoint.

MIT-licensed hook for seven coding agents and any ACP pair that asks TypeSafe's hosted Jev typed questions about a tool call or its result, then denies, asks or allows it and flags suspected prompt injection; needs a billed key.

MIT-licensed CLI and MCP server giving agents eleven typed-decision tools on TypeSafe's hosted Jev model (route, triage, guard, grep, rank, compact), plus an advisory Claude Code PreToolUse hook; needs a TypeSafe API key.

Pack of 38 defensive-only Markdown skills for Claude Code and compatible coding agents, covering MCP security, prompt-injection defense, OWASP LLM Top 10, VPS/WordPress/Cloudflare hardening and incident response.

MIT-licensed research-stage harness in which an LLM proposes one read or patch, code validates it, Jev answers four yes/no questions, and a fixed table decides; the host owns authorization, and nothing is applied or executed.