30 Days Gen AI Risk Trial -Start Now
Skip to main content
Perspectives
  • Jev by TypeSafe

Jev. Rethinking AI guardrails.

Explore the examples
The architecture opportunity
01 / CONTEXT

An employee’s AI request

02 / FOCUSED CHECKS
IntentPolicyUncertainty
03 / POLICY RESPONSE

Code applies the action.

Conceptual architecture. Animation does not represent model response time.
Explore this article 5 chapters
OUR VIEW

The next frontier of workforce AI security is making better decisions at the moment employees use AI. I want controls that understand the request, apply the right policy and keep people moving.

That is why Jev, introduced by TypeSafe AI, caught my attention. Its approach to fast, structured decisions points to an opportunity: bring more contextual judgment into the small window between an employee's action and its consequences.

Security at the speed of work

Jev accepts context and questions defined in natural language, then returns typed decisions and probability distributions. Multiple independent questions can be evaluated in parallel within one request. Software gets separate signals it can use to apply policy.

Classification is not new. The interesting combination is flexible criteria, structured outputs and an emphasis on speed. For guardrails, that could make more frequent, focused checks practical. The architectural opportunity is to move control closer to each employee action, with enough context to make a useful decision and little enough delay to preserve the experience.

Context changes the decision

Illustrative policy examples

Same topic. Different intent.

Example policy: allow education, prohibit credential theft.

Employee request

Explain why this email is phishing for our staff awareness session.

Does this request help steal credentials?

No

Expected policy result

Allow

The request helps people recognise phishing. It does not help steal credentials.

Consider a policy that permits security education but prohibits assistance with credential theft. “Explain why this email is phishing” and “Make this credential-harvesting email more convincing” share vocabulary, but request very different help. A contextual check can assess what the assistance would enable. These are synthetic examples of a policy distinction, not measured Jev results. TypeSafe's guardrail cookbook shows how classification and severity scoring can support this kind of bounded judgment.

A better signal for policy

A structured distribution gives policy code more to work with than a single label. Different checks can have different thresholds, reflecting the consequences of a missed violation or an unnecessary block. Ambiguous results can trigger deeper evaluation. The security team still defines the action; the model supplies a signal. This makes the trade-offs explicit and gives teams something concrete to evaluate against their own policies.

Illustrative data · 12 synthetic requests · Not Jev measurements

Move the blocking threshold

A request is blocked when its estimated probability of a policy violation meets or exceeds the threshold.

70%
Estimated probability of a policy violation, p(violation)

1 / 6

Legitimate requests blocked

2 / 6

Violations below threshold

5 of 12 requests blocked at 70%.

Below the threshold, requests pass in this simplified example. A real system can add a review step.

Inspect the illustrative data

Six legitimate requests and six policy violations. These fixed scores illustrate threshold trade-offs, not measured model performance.

Current decisions at a 70% blocking threshold
RequestActual statusp(violation)Decision
L1Legitimate8%Passes
L2Legitimate18%Passes
L3Legitimate31%Passes
L4Legitimate55%Passes
L5Legitimate68%Passes
L6Legitimate88%Blocked
V1Policy violation46%Passes
V2Policy violation62%Passes
V3Policy violation74%Blocked
V4Policy violation81%Blocked
V5Policy violation92%Blocked
V6Policy violation97%Blocked

Those signals need validation. Jev's separate confidence property describes distribution concentration, not the probability an answer is correct. Calibration is measured across predictions and cannot guarantee an individual outcome. TypeSafe also explicitly acknowledges in its Jev 1.13 limitations that adversarial content can steer answers. Security evaluations must therefore measure false positives, missed violations and resistance to manipulation alongside latency.

The standard innovation must meet

I see the strongest architecture as a combination of specialised controls. Deterministic detectors handle known patterns and explicit restrictions. Contextual models answer bounded questions about meaning. Policy code applies the decision, and enforcement must remain reliable when a model is uncertain or unavailable. Each layer has a defined job, and the protection system must be tested as a whole.

Privacy belongs in that architecture from the start. A guardrail may inspect precisely the information it is protecting. Processing location, access, retention and training use are engineering requirements. Any model considered for that role needs a secure deployment path and data-handling arrangements that meet customer requirements. A faster decision has value only within a protection system customers can trust.

THE ADOPTION BAREffective protection.Resilience under pressure.Security and privacy by design.

Our direction at Aona

At Aona, we are investigating this class of model for accurate, high-speed guardrail classification. Jev is an interesting example of the direction, and our focus is the capability this approach could enable for protecting employees' AI use.

We will propose a future offering when we can demonstrate effective protection through deployment options that meet our security and privacy requirements. My ambition is to make contextual protection a natural part of every relevant employee interaction with AI. Faster decision models could help us get there, built on that foundation.

Sources behind this perspective 5 primary sources
  1. Jev, introduced by TypeSafe AI
  2. typed decisions and probability distributions
  3. guardrail cookbook
  4. confidence property
  5. Jev 1.13 limitations

The interactive examples are authored illustrations, not measured Jev outputs. Sources reviewed 21 September 2026.

Bastien Cabirou
A PERSPECTIVE FROMBastien Cabirou

Co-Founder & CEO, Aona AI

More perspectives