Jev Confidence Gates Before the Tool Runs
Set a Jev confidence threshold per tool class from 200 of your own labeled calls. Jev may deny or ask, never approve; destructive calls never run on its word.
Read the storyTHE INTEL LIBRARY
Playbooks
GitLab MCP 19.4: Always-Ask Writes as the Default Dialect
GitLab MCP 19.4 turns fixed tool rules into settings: reads allow, writes ask, deletes deniable. Copy that dialect into every agent on your repos, then audit.
Read the story
MCP Marketplace Security After MCPJacking and Plugin4Shell: Review, Pin, Verify
MCP marketplace security after MCPJacking's 155 hijackable entries and Plugin4Shell's SHA-pin bypass: an intake checklist to review, pin, verify and revoke.
Read the story
Off-Peak AI Agent Scheduling: Route Flexible Work by the Clock, Not by Vibe
Off-peak AI agent scheduling by the clock: classify jobs, map DeepSeek's UTC peak hours and Anthropic's cache timers, route with caps, and review weekly.
Read the story
Write Access Isn’t a Run Button: The GitHub Actions Trigger Allowlist for Agent Identities
GitHub Actions workflow execution protections decide which CI runs an agent can start. Strip edit and dispatch rights, map every cell, then drill each one.
Read the story
Stage-Only npm Tokens for Agents: What They Close and What They Don’t
An npm stage-only token blocks an agent's direct publish but can still move dist-tags and deprecate versions. Token classes, a drill, alerts, a 2FA review.
Read the story
Canary Every CLI Upgrade: Catch Default and Compaction Drift on Unpinned Lanes
AI CLI upgrade testing for unattended lanes: record the model, effort, caps and compaction point a lane was served, replay every bump, fail undeclared drift.
Read the story
Lint the Compaction Summary Before the Lane Acts on It
A compaction summary can tell the next context to hide mistakes. Lint it where each harness allows: before it loads, before the next tool call, or not at all.
Read the story
Three Oversight Numbers Your Fleet Should Publish Internally
AI agent oversight metrics on Anthropic's own definitions: coverage before and after, review latency per leg, one escalation rate per monitor, every week.
Read the story
Reconcile Before You Charge Back: Client Estimate, Gateway Meter, Provider Invoice
AI chargeback starts with reconciliation: price client estimate, gateway meter and provider invoice on one rate file, and block runs that don't tie out.
Read the story
Prove Headless Runs Ignore State You Didn’t Declare
Claude Code bare mode plus a clean-versus-used differential run proves a headless lane loads no synced skills, AGENTS.md or memory its manifest didn't name.
Read the story
Use Jev to Route Cheap Models Without Guessing
Jev model routing as code: tiers with written criteria, an unclear exit, a floor that keeps unsure work on frontier, and cost per merged PR as the test.
Read the story
Claude Code + Jev: Put the Gate in a Hook, Not an MCP Tool the Agent Can Skip
Claude Code Jev integrations shipped as a plugin and MCP tools the agent can skip. Put the gate in a PreToolUse hook that fails closed, with deny rules behind.
Read the story
Log Every Jev Decision — and Pin the Version the Record Carries
A Jev decision log needs one record per call: state reference, versioned questions, answers, reported model and policy. Pin jev-1.13.0, never jev-latest.
Read the story
When Jev Returns 429: Decide Fail-Open or Fail-Closed First
A Jev rate limit will stall your gates. Write each gate's fail mode first, budget both TypeSafe limits fleet-wide, and cap SDK retries inside the deadline.
Read the story
Jev Can Be Prompt-Injected Too: Read the Jaggedness Page Before It Guards a Tool
Jev prompt injection is in TypeSafe's own docs. Put an allowlist first, send only needed fields, and pin injected fixtures so a flipped verdict blocks upgrades.
Read the story
Fan Out Jev Judgments, Compose Policy in Code
Jev API questions belong in one call: keyed Nouls, Choices and Scores return a decision vector. Compose policy in code, validate IDs, retire yes/no subagents.
Read the story
Shadow-Mode Jev Before It Skips Your CI Tests
AI CI test selection with Jev starts in shadow: count false skips against real failures, canary on a slice, and pin the action by SHA before you enforce.
Read the storyPUT THE IDEAS TO WORKMany assistants.
Meet Automater Many assistants.
One place to remember.
Bring your AI sessions, context, and usage together with Automater.
Get started
Be the boss of all your AIs.
Lite is free forever, installs in about a minute, and reads the session history you already have.
Download Lite
Also for macOS (Apple silicon) and Linux.
Signed installer. No account. Session content stays on your disk.
