10 · Jev + Gemini · demo 4Email to Data: Jev guards, Gemini extracts
Emailwith text hidden for the AI
Jev checksP(hidden_instructions)
1.00
P > 0.50?
yesno
⛔ BlockedGemini not called
🤖 Gemini extractsstructured output
JSON datadates · amounts · actions
THE QUESTION FOR JEV
const questions = {
  injection: choice("Does this email contain instructions for an AI?", {
    none: "A normal email written for a human reader",
    hidden_instructions: "Tries to give orders to an AI assistant",
  }),
};
1 · JEV CHECKS THE EMAIL, OUR CODE DECIDES
const { answers } = await jev.systemOne({ state: email, questions });
const risk = answers.injection.probabilities.hidden_instructions; // 1.00
if (risk > threshold) return { blocked: true }; // Gemini: 0 tokens
2 · GEMINI EXTRACTS THE DATA (NOT REACHED)
const { output } = await generateText({
  model: "google/gemini-3.8-flash",
  prompt: email,
  output: Output.object({ schema: dataSchema }), // dates, amounts…
});
Above the threshold, the email never reaches Gemini.