🛡️ JEP Guard for ClawHub — Browser Extension v1.1.0
The official browser companion for JEP Guard, designed specifically for the ClawHub ecosystem.
Not just a monitor. A safety layer that lives inside your browser, enhancing every ClawHub page with pre-install accountability, real-time causal overlays, and cross-tab session visualization.
✨ What Makes This Different
| Feature | Traditional Monitor | JEP Guard ClawHub Edition |
|---|---|---|
| ClawHub Store | Passive viewing | Injects safety analysis & gates installs |
| AI Pages | No visibility | Floating causal overlay |
| Cross-tab chains | Ignored | Visual session graph |
| Install flow | One-click danger | JEP acknowledgment gate |
| Compliance | Manual export | One-click PDF report |
| User autonomy | Assumed consent | Explicit opt-in for every feature |
🚀 Installation
Chrome / Edge / Brave (Manifest V3)
- Download and unzip this package.
- Open
chrome://extensions→ Enable Developer mode. - Click Load unpacked → Select the folder.
- Pin 🛡️ to your toolbar.
Firefox
- Open
about:debugging→ This Firefox → Load Temporary Add-on. - Select
manifest.json.
🔌 Connect to Daemon
claw run jep-guard daemon --mode skill_os
The extension polls http://localhost:9745 by default. Change in Settings if your daemon runs on a different port.
🖥️ Feature Breakdown
1. First-Run Onboarding
- No data collection until you say yes
- Granular toggle for every feature: daemon connection, ClawHub enhancement, install gating, overlay, notifications
- Minimal mode: storage-only, zero network calls
2. Popup Dashboard (Ctrl+Shift+J / Cmd+Shift+J)
- Live daemon status with color-coded pill
- Active session card — shows which skill currently owns the active tab
- Mini Session Graph — SVG visualization of cross-tab skill chains
- 6-stat grid — J/D/V/T/Total/Skills
- Recent chain + Skill reputation snapshot
- Quick actions: Settings · Export JSON · Generate Report · Pause All
3. ClawHub Store Enhancement (Content Script)
When you browse clawhub.ai:
- Skill cards get a "🛡️ JEP Ready" badge + colored risk bar (critical/high/medium/low)
- Detail pages inject a pre-install accountability panel:
- Risk level tag
- Permission chips
- Auto-start warning
- Shell command detection
- Install gating: The install button is disabled until you check "I acknowledge this skill will be causally traced by JEP Guard"
4. Causal Overlay (All AI Pages)
A draggable, minimizable floating widget on any page:
- Real-time daemon status
- Live J/D/V/T counts
- One-click hide/show (
Ctrl+Shift+K)
5. Options Page
- General: Daemon host, poll interval, notification toggles
- Event Log: Search, verb filter, pagination, JSON export
- Session Graph: Full-size interactive SVG of cross-tab chains
- Skills: Reputation cards with completion-rate bars
- ClawHub: Fine-grained control over store enhancement, install gating, and badges
- Privacy: Emergency pause, clear data, revoke permissions, transparency log
- About: Links to GitHub, IETF draft, contact
7. Token Budget Layer (Extension)
A JEP-native token optimization extension that records every MCP call cost, deduplicates redundant calls, and enforces user-defined daily budgets — with full causal traceability.
| Strategy | Behavior |
|---|---|
| Prune | Trim redundant context before MCP calls |
| Dedup | Merge duplicate calls within a time window |
| Batch | Group calls into a single batched request |
Every optimization decision is logged as a JEP event (Verb: V — Verify), so you can audit why a call was skipped or merged.
6. Compliance Report (report.html)
A printable, PDF-ready audit report with:
- Generation timestamp
- Event summary
- Recent events table with verb badges
- Skill reputation snapshot
- Legal declaration footer
⌨️ Keyboard Shortcuts
| Shortcut | Action |
|---|---|
Ctrl+Shift+J (Cmd+Shift+J on Mac) | Open popup |
Ctrl+Shift+K (Cmd+Shift+K on Mac) | Toggle causal overlay |
🔒 Security & Privacy
- localhost only — No remote servers. Ever.
- No credential storage — Only user preferences in
chrome.storage.sync. - Optional permissions —
notifications,tabs,scripting. NonativeMessagingrequired. - User autonomy first — Every feature is opt-in. You can pause or revoke everything at any time.
- Transparency log — Every permission request and data access is logged.
- MIT-0 License — Public domain.
📦 Compatibility
- Extension: v1.0.0
- Required Daemon: JEP Guard ≥ v2.0.4
- Manifest: V3 (Chrome 88+, Edge 88+, Firefox 109+)
📬 Links
- IETF JEP Draft: https://datatracker.ietf.org/doc/draft-wang-jep-judgment-event-protocol/
- Contact: signal@humanjudgment.org
Because "it works" is not enough. You need to know why it works — on ClawHub, in your browser, everywhere.