actiongate-jev

What it is

ActionGate is a runtime security gateway that evaluates proposed tool calls with deterministic policy and Jev, then issues single-use permits bound to the exact action. It is for developers building AI agents that need to authorize tool calls.

How it uses Jev

ActionGate asks six narrow Jev questions in one request: alignment, target match, policy conflict, sensitive-data exposure, scope expansion, and missing intent. The model returns calibrated probabilities that supply evidence, but code owns authority; a model score never overrides RBAC, schema, limit, or duplicate failures. Only an enforced ALLOW produces a grant.

Primitives:choicescorenoul

Technique worth stealing

Asking six narrow typed questions instead of one vague safety question, and treating model scores as evidence while code retains authority.

Try it

git clone, pnpm install, pnpm dev; then pnpm refund:demo.

View on GitHub