What it is
Ban attackers with judgment where regex alone fails.
What it does: Rules first, then OpenJev or hosted Jev on ambiguous clients.
Why it belongs in the showcase: Ops guardrail with explicit local vs hosted System One boundary.
Caveats: Local default; careful rollout.
Evidence
Public MIT repo, created 2026-10-31, 0 stars as of 2026-11-02. README documents hard-rule triage, OpenJev local default, hosted Jev API switch, labeled access-log eval, Linux/Windows builds, and release workflow badge. Boundary: local OpenJev by default; hosted TypeSafe optional.
Caveats
- Default decider is local OpenJev, not hosted TypeSafe
- Firewall bans are irreversible ops—roll out carefully
- 0 stars; verify Pascal build for your OS
Unofficial case page. Stars / list position observed for heat; do not treat heat as a quality SLA. Review the upstream README before you depend on it.