Proposed architecture
A separate adapter should receive a concise state and the questions. It normalizes the result into an internal schema. A rule check follows; only after that comes any action. The same design can later compare several providers without changing the business logic.
A suitable first role
Start in observation mode: the model only labels an operation as related, unclear or risky. The operator sees the recommendation, but nothing is executed automatically. That way you collect a sample of both false alarms and missed risks.
Fixed rules on top of the model
We recommend not bypassing human approval of the exact version of a change, not changing the scope of permissions based on a score, and keeping destructive commands behind an independent check. A network error must not mean automatic permission.
Testing the adapter
Unit tests should cover all three response types, an invalid schema, an empty response, a timeout, a provider limit and an unknown category. Keep integration tests separate from cheap local tests. Paid calls should have an explicit budget.
The vendor describes adversarial input as a weakness of the model. S07 That is why we do not present the classifier as a standalone defense against prompt injection. It is just one more signal among several checks.
What JEV.sk does not promise for now
We do not sell an audited security product. We do not claim a guaranteed protection rate or independent certification. This content is a proposal for a safe engineering practice that you need to verify yourself.
Sources and level of verification
- S07Jev 1.13 jaggedness ↗
TypeSafe AI · Primary source retrieved · check attempted 23 September 2026