jev-factory
jev-factory turns the process nvsh used to build its Tool-Jev model into a reusable factory for jev-like models. It adds explicit knobs and a recorded decision step after every run. It then fine-tunes its own jev-like model to make those decisions (self-hosting).
Status: the factory exists; the first model is not yet trained. The domain-module contract, the 23
jev runstages,jev status,jev decide,jev askandjev revieware built and tested. The first product, a jev-tool scorer whose candidates are this CLI's own verbs, is not yet trained. The build brief is issue #1.
What "jev-like" means
A jev-like model is a small, calibrated candidate scorer (OpenJev-style, nvsh's "Track B"), not a generative tool caller. It works like this:
- It reads one request plus up to 52 lettered candidate actions
(
A) <name>: <description>). Two controls are always offered:explainandescalate. - It produces a probability distribution over those candidates, then calibrates it (a temperature, plus an optional per-label vector).
- A gate with separate thresholds for read-only and mutating actions turns the calibrated distribution into propose / explain / escalate / abstain.
- Action arguments are grounded deterministically, outside the model.
- The choice must survive reordering, re-lettering, subsetting and paraphrasing of the candidates (the permutation-probe robustness bar).
nvsh's reference build is scorer-r3b on Qwen/Qwen3.5-0.8B, served as
GGUF Q4_K_M. It scored 0 wrong mutating proposals and ECE 0.016 after
calibration on the test side, at about 355 ms per decision on an AGX Orin.
jev-factory carries that recipe as code (see Who uses it).
Other model families are planned too, such as the GLiNER2.5-Decide encoder
(nvsh#67). The factory
treats the backbone as a pluggable adapter behind the same
candidates → calibrated distribution → gate contract.
The plan (three layers)
- Factory. nvsh's staged pipeline, made domain-generic through a
declarative domain module: actions with
read_onlyflags, grounding, prompts, seed corpus and escalation reasons. The stages run from pre-registering the bars and seeding the corpus through train, select, quantize, recalibrate, one final run, bundle and a private upload. Each stage is resumable and writes an artifact manifest. The first acceptance test is parity: reproduce nvsh's scorer-r3b selection verdict from its frozen data. This builds on nvsh's domain-module seam, nvsh#62. - Decision surface.
jev decide <run>applies a pre-registered rule to a run's metrics. It emits a verdict (ship, more or fewer epochs, targeted augment, fix the grader, recalibrate, heal the quant, refit the gate, or escalate to a human) as an append-only decision record. A human override is recorded as a deviation. - Self-hosting. The factory builds a jev-like decider whose
candidates are those verdicts, using real nvsh decisions as the sealed
set. The decider drives the loop (
jev decide --model <bundle>) only after it beats the rule with 0 wrong mutating verdicts. Below its gate it falls back to the rule or the human.
These honesty rules are enforced in code, not exposed as knobs:
- Sealed held-out and test sets are touched once.
- The gate is fit on the fit fold only.
- Leakage fails closed.
- Every write verb is dry-run unless you pass
--apply. - Publishing is private-first. Going public is always a human decision.
The CLI is jev init <domain>, jev run <stage>, jev status <run>,
jev decide <run>, jev ask <request>, jev review <domain> (a local
site where an operator reviews a domain's seed entries) and
jev distill <stage> (the Clef-to-Strands-Decider distillery, see
docs/distill.md; Strands Decider is not the Layer-3 decider). Training dependencies stay out of
the base install, behind the train extra or an external venv.
Who uses it
- The operator approves every gate. Scaffold a run with
jev init <domain> --work <dir>, dry-run each stage, then pass--apply. Read progress withjev status <dir>(manifests, staleness, detached-job progress) and the append-only records indecisions.jsonl. Publishing privately is automatic; going public is always your decision. - The mesh agent (this repo's resident) runs the stages in order
(
jev run --helplists them), readsjev status --jsonand records each between-runs verdict withjev decide. It never edits a record, the pre-registration or a sealed set. - A domain author builds a jev-like model for a new domain by writing one
domain module instead of forking scripts. The contract is
jev_factory/domain/model.py: operations withread_onlyflags, groundable argument kinds, the world snapshot schema, one list of escalate reasons, prompts and a seed corpus. A complete small example istests/fixtures/toy_domain.jev initvalidates a module loudly, one named error per problem. Seejev explain domain.
Lessons encoded
Each failure nvsh hit is a check in code with a test that fails when it is
violated: the mid-run rule change, leakage, the silent adapter merge,
hand-copied bundle files, stale snapshots and the verdict-parser blacklist.
docs/lessons-encoded.md maps each one to its nvsh
record and to the tests.
What's here now
- The factory: the domain module (
jev_factory/domain), the staged pipeline (jev_factory/factory), the stage code (core,data,measure,backbones,release,evals), the decision surface (decide) and the jev-CLI domain (jev_factory/domains/jev_cli). - An agent-first CLI,
jev, cited from teken (afi-cli). The runtime package has no third-party dependencies. - A mesh identity:
culture.yaml(suffix: jev-factory,backend: claude) and the matching resident promptCLAUDE.md. - Four harness prompt files, each read by exactly one harness (see below).
- The guildmaster skill kit under
.claude/skills/, vendored cite-don't-import. Seedocs/skill-sources.md. - A build and deploy baseline: pytest, lint, the agent-first rubric gate, a per-harness smoke check, and PyPI Trusted Publishing in GitHub Actions.
Prompt files by harness
Four harnesses, four root files, no shared base — each file is read by exactly one harness:
| Harness | File(s) |
|---|---|
| Claude Code | CLAUDE.md |
| Pi / associate | AGENTS.override.md + .pi/SYSTEM.md |
| colleague | AGENTS.colleague.md |
| Qwen Code | QWEN.md |
Claude Code — CLAUDE.md is the fullest write-up of the repo's
conventions; read it first.
Pi / associate — AGENTS.override.md replaces this directory's
AGENTS.md/CLAUDE.md in Pi's context layer, so Pi does not inherit
CLAUDE.md. .pi/SYSTEM.md replaces Pi's default system prompt with the
non-coding associate identity (read/find/summarize only).
colleague — colleague's prompt cascade is AGENTS.md →
AGENTS.colleague.md → AGENTS.colleague.<model>.md. This repo ships only
the middle layer: there is no AGENTS.md (a shared base across harnesses was
considered and rejected) and no per-model override file.
Qwen Code — Qwen Code reads QWEN.md and AGENTS.md; since there is no
AGENTS.md, QWEN.md is its sole source of guidance.
There is intentionally no AGENTS.md at the root — each harness gets an
unrelated file rather than cascading from a shared base.
Two selections, not one
It is tempting to read "switch harness" as one decision. It is actually two, and this repo's layout exists partly to keep them separate:
- The interactive harness — which binary you run (
claude,pi,colleague,qwen).cdinto the clone and run any of them; all four are live simultaneously, and none of them requires editing a file or flipping a switch. A harness can be force-selected for one invocation (e.g. a CI smoke check) without ever touchingculture.yaml— seedocs/automation-contract.md. - The mesh resident — the single
backendculture.yamldeclares, which is what the Culture daemon starts and whatsteward doctorchecks.guild harness use <name>changes only this.
culture.yaml's backend affects (2) only. It never affects which harness
you can invoke interactively in (1). See
docs/harness-selection.md for the full
writeup, including who reads this config and why existing siblings are not
retrofitted by this arc.
Quickstart
uv sync
uv run pytest -n auto # run the test suite
uv run jev whoami # identity from culture.yaml
uv run jev learn # self-teaching prompt (add --json)
uv run teken cli doctor . --strict # the agent-first rubric gate CI runs
The command is jev, the import package is jev_factory, and the PyPI
distribution is jev-factory.
CLI
| Verb | What it does |
|---|---|
init <domain> |
Scaffold a run directory and run config (dry-run by default). |
run <stage> |
Run one build stage; --apply commits, --detach survives the shell. |
status <run> |
Stage manifests, staleness and job progress. |
decide <run> |
Apply the pre-registered rule; append a decision record. |
ask <request> |
Propose one jev verb from a bundle; executes nothing. |
whoami |
Report this agent's nick, version, backend, and model from culture.yaml. |
learn |
Print a structured self-teaching prompt. |
explain <path> |
Markdown docs for any noun/verb path. |
overview |
Read-only descriptive snapshot of the agent. |
doctor |
Check the agent-identity invariants (prompt-file-present, backend-consistency). |
cli overview |
Describe the CLI surface itself. |
Every command supports --json. Results go to stdout, and errors and
diagnostics go to stderr (never mixed). Exit codes: 0 success, 1 user
error, 2 environment error, 3+ reserved.
Contributing
See CLAUDE.md for the full conventions: the jev-like
invariants, the nvsh source material, version-bump-every-PR, and the cicd
PR lane. Every PR bumps the version (/version-bump), and CI blocks merge
otherwise.
License
Apache 2.0 — see LICENSE.
Metadata
Release files for jev-factory 0.12.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| jev_factory-0.12.1.tar.gz | 1.9 MB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| jev_factory-0.12.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 2.7 MB
Release files / jev_factory-0.12.1.tar.gz
| Download URL | jev_factory-0.12.1.tar.gz |
|---|---|
| Size | 1.9 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
8c5b3eaa4c5477eb7ac7b5affb1d6d0ac84ab35886d47137fd60b538aa93207f
|
|
BLAKE2b-256 checksum How to use checksums |
205c8d9af9ffc0a1774000b520a768aa3e5de0b5ae1fb62133080dad8fb98c48
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.13.1 {"installer":{"name":"uv","version":"0.13.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Release files / jev_factory-0.12.1-py3-none-any.whl
| Download URL | jev_factory-0.12.1-py3-none-any.whl |
|---|---|
| Size | 775.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d37fbd4be5045c8c576a29fbaebffef1f5d09e7de8528c9a6c42afd1ed80ddb9
|
|
BLAKE2b-256 checksum How to use checksums |
7f354998ef7a49952df7efa6da1748e9808ad539d2ba2782a2128262c3d9bf31
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.13.1 {"installer":{"name":"uv","version":"0.13.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Security for jev-factory 0.12.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.