Privacy: what leaves your machine

What is sent, and what is not

sent to the endpoint	never sent
the question text and options	your config file or profiles
the input (--in, stdin, each line of a batch)	anything from files you did not name
the merged ## Jev context and --context text	for plugins: the full transcript (the state is a short description of the event)
for judge: the request, the proposal, the --action lines
for plugins: a description of the event (the command, the fetched text, the prompt)

The endpoint is whatever the profile says. A hosted service sees the input and keeps whatever its terms say it keeps; a local model on 127.0.0.1 sees the same and keeps nothing you did not configure. jevx makes no other network calls: no telemetry, no update check.

Redaction is your job today

The skill tells agents never to put secrets into --in or --proposal. Redaction before send is on the maintainer’s not-done list.

Keys

A header like Authorization: Bearer $JEV_API_KEY is stored with the $VAR literal and expanded from the environment at request time. profile list prints the literal, not the value. If the variable is unset the call fails with its name (exit 4) rather than sending an empty header.

The ledger

With ledger true (the default), every call appends one line to ~/.local/share/jevx/calls.jsonl: the host, model, number of questions, a 12-hex-character hash of the question set, latency, token usage and an error message if any. It never holds the input, the question text or a header. JEVX_LEDGER=off disables it for a shell.

~/.local/share/jevx/calls.jsonl (one line)

{"host":"api.typesafe.ai","model":"jev-1.13.0","ms":673,"qhash":"b4838021a792","questions":1,"ts":"2026-09-27T16:30:24Z","usage":{"input_tokens":281,"output_tokens":20}}

jevx stats summarises it per day and host (--days N, default 7):

$ jevx stats
day  host                                 calls errors  tokens in      out   p50 ms
2026-09-27  api.typesafe.ai                  51      0      16612     1524      577

That line is one machine, one day, while the earlier docs were being written: 51 calls to the hosted endpoint, no errors, median 577 ms. Your numbers will differ with the endpoint and the network.

Hooks and plugins

• Installed disabled. hook status says what is in settings.json and whether anything ran.
• Shadow mode scores in a detached process and cannot delay the agent.
• act mode fails open: an endpoint error lets the tool call or the turn proceed.
• uninstall --hooks removes only jevx’s entries and backs up the settings file first.