JEP Guard

JEP Guard intercepts high-risk commands, requires user confirmation, issues temporary tokens, and logs actions with exportable audit receipts.

JEP (Judgment Event Protocol)@schchit

Install

openclaw skills install @schchit/jep-guard

JEP Guard

Causal Operating System for OpenClaw Skills

Invisible protection. Complete audit. Trusted reputation.

Install

bash

claw install jep-guard

Quick Start

bash

# Initialize (interactive wizard)
claw run jep-guard init

# Start daemon (explicit manual start)
claw run jep-guard daemon --mode skill_os

# View dashboard
claw run jep-guard dashboard

What It Does

Protects — Blocks risky operations before execution (Causal Gate)
Audits — Records every judgment, delegation, verification in JEP format
Traces — Reconstructs "who did what and why" across multiple agents
Certifies — Gives skills reputation scores based on real performance

For Users

text

You: "Plan my trip to Tokyo"
planner-skill → search-skill → booking-skill

[JEP Guard] ✅ 12 events protected · 0 blocked · 1 chain

For Skill Developers

javascript

const guard = require('@jep-guard/sdk').init('my-skill');

// Before acting
const { token } = await guard.judge({ action: 'write', target: file });

// After acting
await guard.verify(eventId, 'approved', ['sha256:...']);

Architecture

text

OpenClaw Skills
      ↓
JEP Guard Daemon
  ├── Causal Gate      (pre-execution control)
  ├── Skill Registry   (identity + capabilities)
  ├── Causal Router    (cross-skill delegation)
  ├── Policy Engine    (OPA/Cedar rules)
  ├── Reputation       (objective scoring)
  └── Audit Stream     (JEP standard export)

Security Notes (v2.0.4)

Installer does not auto-start background processes.
No shell commands are executed during install/uninstall.
Full-protection mode requires explicit interactive consent.

References

IETF JEP Draft: https://datatracker.ietf.org/doc/draft-wang-jep/
IETF JAC Draft: https://datatracker.ietf.org/doc/draft-wang-jac/
License: MIT-0 (Public Domain)