JEP Guard intercepts high-risk commands, requires user confirmation, issues temporary tokens, and logs actions with exportable audit receipts.
# JEP Guard
**Causal Operating System for OpenClaw Skills**
> Invisible protection. Complete audit. Trusted reputation.
## Install
```bash
claw install jep-guard
```
## Quick Start
```bash
# Initialize (interactive wizard)
claw run jep-guard init
# Start daemon (explicit manual start)
claw run jep-guard daemon --mode skill_os
# View dashboard
claw run jep-guard dashboard
```
## What It Does
- **Protects** — Blocks risky operations before execution (Causal Gate)
- **Audits** — Records every judgment, delegation, verification in JEP format
- **Traces** — Reconstructs "who did what and why" across multiple agents
- **Certifies** — Gives skills reputation scores based on real performance
## For Users
```
You: "Plan my trip to Tokyo"
planner-skill → search-skill → booking-skill
[JEP Guard] ✅ 12 events protected · 0 blocked · 1 chain
```
## For Skill Developers
```javascript
const guard = require('@jep-guard/sdk').init('my-skill');
// Before acting
const { token } = await guard.judge({ action: 'write', target: file });
// After acting
await guard.verify(eventId, 'approved', ['sha256:...']);
```
## Architecture
```
OpenClaw Skills
↓
JEP Guard Daemon
├── Causal Gate (pre-execution control)
├── Skill Registry (identity + capabilities)
├── Causal Router (cross-skill delegation)
├── Policy Engine (OPA/Cedar rules)
├── Reputation (objective scoring)
└── Audit Stream (JEP standard export)
```
## Security Notes (v2.0.4)
- Installer does **not** auto-start background processes.
- No shell commands are executed during install/uninstall.
- Full-protection mode requires explicit interactive consent.
## References
- IETF JEP Draft: https://datatracker.ietf.org/doc/draft-wang-jep/
- IETF JAC Draft: https://datatracker.ietf.org/doc/draft-wang-jac/
- License: MIT-0 (Public Domain)don't have the plugin yet? install it then click "run inline in claude" again.