文档Docs
Jev 安全选项Jev safety options
在 TypeSafe、OpenRouter 和关闭三种 Jev 安全审核里选一种，看清每种会怎样、在哪里切换。Choose one of three Jev safety review options, TypeSafe, OpenRouter or off, and see what each does and where to switch.
Jev 是一个专门做安全判断的 AI 模型。打开后，它会多看一眼进出 Agent J 的一部分内容，帮你挡住可疑的消息；关掉后少了这一道防护，但更快、误拦更少。用不用、用哪家，由你自己决定。
Jev 管哪些地方
- 手机审批：Agent J 看不清的命令，会先问 Jev 这条命令和当前任务是否一致；把握够了就直接放行并记录，你就少批几张卡。把握的高低在「Jev 判断阈值」里调。花钱、删除、对外发送、改凭据、改价这五类明确危险的动作不问 Jev，一律弹卡给你批。
- Bots 客服：访客的问题和 bot 的回答，包括你的人工回复，发出前都过 Jev。详见 Bots 配置参考。
- Agent 好友：好友发来的消息先过本地凭据过滤，再请 Jev 看看是不是在套密钥、冒充主人或者夹带指令。详见 Agent 好友。
- 另外，发反馈前的脱敏复查、群聊和短信提醒里拿不准的内容，也按同一个设置走。
交给 Jev 的内容都先去掉密钥、路径、主机名这些信息，直接从你的 Agent J 主机发给你选的服务商，费用由你自己的账户承担。
三种选择
| 选择 | 要准备什么 | 适合谁 |
|---|---|---|
| TypeSafe（推荐） | 在 TypeSafe 注册、创建 key、充少量金额 | 新用户 |
| OpenRouter | 已有的 OpenRouter 账号和 key | 已经在用 OpenRouter 的人 |
| 关闭 | 不用 key，但要你在手机上签名确认 | 想更快、少误拦，能接受安全性弱一点的人 |
key 在「模型和 API Key」靠上的 Jev 区域用密钥卡填写，别发到聊天里。已经有 key 的会自动沿用；两种都有时沿用 OpenRouter。
在哪里切换
打开 设置 → 安全，找到「安全审核（Jev）」：
- 开关开着时，在「Jev 密钥来源」里选 TypeSafe 或 OpenRouter；开关关掉就是关闭。下面一行「当前使用：…」显示正在用哪一种。
- 每次切换都要你确认并签名，签了才生效。关闭时弹出「关闭 Jev 安全审核？」，点「跳过，我知道安全性会弱一点」才会关；重新打开点「确认启用」。
- 这一项只在已配对的手机上出现。
安装时的这一步
安装时 Agent J 会提示你选一种。没有 key 也没做选择时，agentj onboarding 会把这一步列为下一步。想关闭的话，配对好手机后在设置里关。
还没选的时候：好友消息照旧只走本地过滤，审批卡照常弹；Bots 客服要等你选好才能上线。
关闭意味着什么
- 所有 Jev 审核都跳过，客服、好友和审批照样能用。
- 本地这几道闸一直都在：凭据过滤、危险命令拦截、需要你批准的操作、工具权限。
- 少了模型这一层：可疑的好友消息或访客问题只靠本地规则判断，安全性弱一点。
- 审批不会因此变松：Agent J 看不清的命令都改成弹卡给你批，审批卡可能会多一些。
- 有 key 也能关。
- 只有你在已配对手机上的签名才算数。Agent 不能替你关，改配置文件也关不掉；签名的那台手机被解绑后，这次关闭就不算数了。
开着但出问题时
选的服务暂时连不上、或者 key 失效时，Jev 不会悄悄变成关闭：bot 不发出回复，好友消息被拦下，审批改成弹卡给你批。
关于数据会发到哪里，见数据安全。
Jev is an AI model that makes safety judgements. When it is on, it takes a second look at some of what goes in and out of Agent J and helps stop suspicious messages. When it is off, you lose that layer but things are faster and fewer messages are wrongly stopped. Whether to use it, and which provider, is your choice.
Where Jev is used
- Phone approvals: when Agent J cannot tell what a command does, it first asks Jev whether the command fits the current task. If Jev is confident enough, the command runs and is logged, so you approve fewer cards. Set how confident it must be with "Jev threshold". Spending money, deleting, sending things out, changing credentials and changing prices are never sent to Jev: they always ask you.
- Bots: visitor questions and bot answers, including your own replies, pass Jev before they go out. See Bots configuration reference.
- Agent friends: a friend's message first passes the local credential filter, then Jev checks whether it fishes for secrets, pretends to be you or smuggles in instructions. See Agent friends.
- The privacy recheck before feedback is sent, and unclear items in group chats and text-message alerts, follow the same setting.
Everything sent to Jev has keys, paths and computer names removed first. It goes straight from your Agent J host to the provider you chose, and your own account pays for it.
Three choices
| Choice | What you need | Who it suits |
|---|---|---|
| TypeSafe (recommended) | Register at TypeSafe, create a key and add a small balance | New owners |
| OpenRouter | Your existing OpenRouter account and key | People who already use OpenRouter |
| Off | No key, but you confirm and sign on your phone | People who want speed and fewer false stops and accept weaker safety |
Enter the key with the secret card in the Jev section near the top of "Models & API keys". Never paste it into the chat. An existing key is used automatically; if you have both, OpenRouter is used.
Where to switch
Open Settings → Safety and find "Safety review (Jev)":
- With the switch on, pick TypeSafe or OpenRouter under "Jev key source". Turning the switch off means off. The line "Currently using: …" shows which one is active.
- Every change asks you to confirm and sign, and only takes effect after you sign. To turn it off, the sheet "Turn off Jev safety review?" appears; it turns off only when you tap "Skip — I understand safety is weaker". To turn it back on, tap "Confirm enable".
- This setting appears only on a paired phone.
The setup step
During setup, Agent J asks you to pick one. With no key and no choice, agentj onboarding lists this as the next step. To turn Jev off, do it in Settings after pairing your phone.
Until you choose, friend messages keep using only the local filters and approval cards appear as usual; Bots cannot go live until you choose.
What off means
- All Jev review is skipped; bots, friends and approvals keep working.
- These local checks always stay: credential filters, dangerous-command blocking, actions that need your approval, and tool permissions.
- The model layer is gone: suspicious friend messages or visitor questions are judged only by local rules, so safety is weaker.
- Approvals do not get looser: commands Agent J cannot read now always come to you as cards, so you may see more of them.
- You can turn it off even with a key in place.
- Only your signature on a paired phone counts. The Agent cannot turn it off for you, and editing a settings file does not turn it off. If the phone that signed is unpaired, that off choice no longer counts.
When Jev is on but something fails
If the chosen provider cannot be reached or the key stops working, Jev never quietly turns itself off: bots send nothing, friend messages are stopped, and approvals come to you as cards.
For where your data goes, see Data security.