Poordjaevin

io.github.Icaro0310v0.1.1Updated Oct 6, 2026

Typed answers with calibrated confidence for agents. Local-first, no API key.

VerifiedSTDIODesktop onlyAI & MLDeveloper Tools

Overview

AI-generated overview

Gives an assistant local, calibrated typed decisions — classify, rate, yes/no judge, and gate risky actions — with confidence scores.

What it does
poordjaevin is a local decision layer that returns typed answers with calibrated confidence instead of free-form prose. Its MCP tools are gate(action), judge(text, statement), classify(text, options), rate(text, levels), and decide(text, questions), which batch several typed questions in one pass. Answers are always drawn from the options you declare, and confidence is calibrated with temperature scaling plus conformal abstention. It can score through the Devin ACP backend or a fully offline local NLI model.
When to use it
Useful when an agent needs fast structured decisions — routing a ticket, classifying intent, scoring severity, or gating a risky tool call before it runs — and you want the work to stay local and keyless. It is aimed at private, offline, or zero-marginal-cost deployments rather than chat.
Requirements
Runs as a local stdio process installed from PyPI or GitHub. The default acp backend needs the devin CLI on PATH (or DEVIN_CLI_PATH), Node.js 18 or newer, and valid Devin credentials at the platform credentials.toml path (override with DEVIN_CREDENTIALS_PATH). The offline nli backend needs no key but downloads a roughly 400MB model once. Optional variables include POORDJAEVIN_BACKEND, POORDJAEVIN_ACP_MODEL, POORDJAEVIN_ACP_TIMEOUT, POORDJAEVIN_ACP_MAX_COST, and POORDJAEVIN_ABSTAIN.
Before you install
The acp backend reads the same Devin credentials.toml the Devin CLI uses to authenticate the ACP session; the README says it is never logged or copied. With acp, confidence is the model's own self-reported probability, not NLI logprobs, and every response carries a confidence_source field. ACP calls may incur cost, so POORDJAEVIN_ACP_MAX_COST can fail closed over a budget. The gate tool is advisory: it only suggests whether an action should be blocked.

Installation

In SourceWeft

  1. Open Poordjaevin in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

poordjaevin

The poor man's Jev. An open source, local-first "System One" decision layer for LLM apps: typed decisions with provably calibrated confidence. No API key. No waitlist.

[MIT license] [Python 3.10+] [ECE 0.170 to 0.071] [no API key required]

Community project. Not affiliated with, endorsed by, or sponsored by Cognition AI. "Devin" is a trademark of Cognition AI.

Linux · Personal Windows · Corporate Windows

Part of the awesome-devin ecosystem: the curated hub for the devin-* tools.

Fork note: this is the Devin-ecosystem fork of rupeshpoojary9/poordjaevin. It adds a Devin ACP backend: poordjaevin serve scores through the model your Devin CLI already uses, with automatic model rotation and per-call cost telemetry, so Devin users need no extra model download, no Ollama, no VM, and no API key beyond Devin's own credentials. The original keyless local backend remains as the fully offline fallback (POORDJAEVIN_BACKEND=nli).


Your model's 0.9 is a vibe. poordjaevin's 0.9 is a measurement.

Every LLM-in-JSON-mode hands you a confidence score and hopes you don't check it. poordjaevin checks it. On the shipped eval set it cuts calibration error (ECE) from 0.170 to 0.071 with zero loss of accuracy, and it runs on your laptop with no API key.

[Reliability diagram: raw confidences are overconfident, calibrated confidences hug the diagonal]

Left: raw confidences, overconfident. Right: calibrated, a stated 0.8 really is right about 80% of the time.

Quickstart

Not on PyPI yet. Install from GitHub:

bash
# Linux / macOSpip install "poordjaevin[local] @ git+https://github.com/Icaro0310/poordjaevin.git"
powershell
# Windows (PowerShell)py -m pip install "poordjaevin[local] @ git+https://github.com/Icaro0310/poordjaevin.git"

[local] pulls torch + transformers for the offline NLI backend. If you only plan to use the Devin ACP backend (poordjaevin serve default), a plain pip install "poordjaevin @ git+https://github.com/Icaro0310/poordjaevin.git" is enough.

python
from poordjaevin import Client, Choice, Score, Noul
client = Client()  # local model, no key, offline after one download
result = client.ask(    state="I've emailed three times and I'm STILL being double-charged. Cancel my account today.",    questions={        "topic":        Choice(["billing", "technical", "account", "shipping", "other"]),        "frustration":  Score(levels=["low", "medium", "high"]),        "is_urgent":    Noul("The customer needs a response today."),        "wants_cancel": Noul("The customer wants to cancel their account."),    },)
result["topic"].value          # "billing"      always one of your options, by constructionresult["topic"].confidence     # 0.86           calibrated, not a viberesult["frustration"].value    # "high"result["is_urgent"].value      # Trueresult["wants_cancel"].value   # True

One call, one model pass, four typed answers. No prompt engineering, no JSON parsing, no "the model returned prose."

Use it with Devin (MCP server, Devin-only)

poordjaevin ships an MCP server, so Devin (or any MCP client) can make fast, calibrated decisions as tools. The obvious use: gate a risky tool call before the agent runs it.

This mode needs nothing but Devin. The default backend (acp) talks to devin acp through a small packaged Node bridge, so every decision is scored by the model your Devin plan already provides, with automatic model rotation. No Ollama, no VM, no tunnel, no second API key: the bridge reads the same credentials.toml the Devin CLI uses.

bash
# Devin users: no local model neededpipx install "poordjaevin[mcp] @ git+https://github.com/Icaro0310/poordjaevin.git"

Add it to your Devin MCP configuration:

json
{  "mcpServers": {    "poordjaevin": { "command": "poordjaevin", "args": ["serve"] }  }}

Requirements for the ACP backend: the devin CLI on PATH (or DEVIN_CLI_PATH), Node.js >= 18 on PATH, and valid Devin credentials at %APPDATA%\devin\credentials.toml (Windows) or ~/.local/share/devin/credentials.toml (Linux, override with DEVIN_CREDENTIALS_PATH).

Backend selection and tuning, all optional:

VariableDefaultMeaning
POORDJAEVIN_BACKENDacpacp = Devin's model via ACP, nli = fully offline local model
POORDJAEVIN_ACP_MODELautopin a specific Devin model instead of automatic rotation
POORDJAEVIN_ACP_TIMEOUT120seconds per decision round trip
POORDJAEVIN_ACP_MAX_COSTunsetfail closed when cumulative ACP cost exceeds this budget
POORDJAEVIN_ABSTAINoffon = abstain below the calibrated threshold instead of answering

Honesty note: with acp the confidence is self_report (the model's own stated probability, temperature-adjusted), not NLI logprobs. Every tool response carries a confidence_source field so callers never mistake one for the other, and model/cost are logged per call for quota monitoring.

No Devin on the machine? Use the offline path:

bash
pipx install "poordjaevin[local,mcp] @ git+https://github.com/Icaro0310/poordjaevin.git"POORDJAEVIN_BACKEND=nli poordjaevin serve   # ~400MB one-time model download, then offline

The server also works with Claude Code/Desktop (claude mcp add poordjaevin -- poordjaevin serve), same JSON config shape.

The agent then has these local tools:

ToolWhat it does
gate(action)guardrail: should this action be blocked (moves money, deletes data)?
judge(text, statement)a yes/no question, with calibrated P(true)
classify(text, options)pick one option, with calibrated confidence
rate(text, levels)an ordinal score (low / medium / high)
decide(text, questions)several typed questions at once, one pass

Why this beats asking an LLM to judge: it is local (private), free (no tokens), fast, and the confidence is calibrated instead of made up.

Why poordjaevin exists

Most production AI work is not chat. It is fast structured decisions: route a ticket, classify an intent, score a sentiment, extract a field, gate a tool call. TypeSafe's Jev named this category ("System One" models) and nailed the thesis — and, per the independent cross-system benchmark below, it currently backs its calibration claims up: it's the strongest model measured here. It's also closed, hosted, and behind a waitlist.

poordjaevin exists for the deployments where "call a hosted API" isn't the answer: private data, offline environments, zero marginal cost, no waitlist. It reproduces Jev's typed-decision interface on a small local model and proves its own calibration honestly (5-fold cross-validated, never graded on what it was fit on). Against the other open local alternatives it leads on the mixed decision-primitive benchmark below, but not on the high-cardinality one — see the real breakdown. It does not beat Jev. That's the honest trade for fully local and free.

poordjaevin vs the field

Independently measured, not self-reported — see crossbench/ for the full harness, data, and every raw result file.

[Bar chart comparing poordjaevin, Jev, von, and Laya on accuracy and ECE across Banking77 and the multi-primitive set. Jev leads the multi-primitive set on both metrics; von leads Banking77 on both accuracy and calibration among the open options; poordjaevin leads the open options on the multi-primitive set only.]

poordjaevin in red. Chart regenerates from crossbench/results/ via crossbench/plot_comparison.py — same numbers as the table below.

Jev (TypeSafe)vonLayapoordjaevin
Interface (typed questions, one pass)yesyesyesyes
Runs locally, no API keynoyesyesyes
Your data stays in your environmentnoyesyesyes
Waitlist / signupyesnonono
Open sourcenoyes (Apache-2.0)yes (Apache-2.0)yes (MIT)
Accuracy, Banking77 (77-way, n=154)0.8120.8380.5190.656
ECE, Banking77 (lower better)0.0840.1350.3880.414
Accuracy, multi-primitive set (n=160)0.9060.7750.7750.781
ECE, multi-primitive set (lower better)0.0450.1080.2150.071

Read straight, because that's the point of doing this:

  • Jev wins the multi-primitive set outright — best accuracy and best calibration, no caveats.
  • von wins Banking77 — best accuracy of all four systems (0.838, ahead of even Jev's 0.812), though Jev still calibrates better there (0.084 vs 0.135).
  • poordjaevin leads the open, local options on the multi-primitive set — best accuracy and best calibration among Laya/von/poordjaevin there. That does not carry over to Banking77: von beats poordjaevin on accuracy by a wide margin (0.838 vs 0.656), and poordjaevin has the worst calibration of all four systems there (0.414 — even behind Laya's 0.388), not the best.

Nobody sweeps, and poordjaevin specifically does not sweep the open-source field — it wins one benchmark and loses the other, to von, decisively. Full methodology, fairness notes, and every raw result file are in crossbench/ — reproducible for a few cents of Jev API calls and some CPU time.

poordjaevin is not a Jev clone and makes no claim to beat it, or to beat von across the board. It reproduces the interface, proves its own calibration with numbers instead of marketing copy, and is the strongest fully local option on the mixed decision-primitive benchmark — not on high-cardinality classification, where von currently leads.

The three primitives

PrimitiveUse it forReturns
Choice(options)classification, routingwinning option, per-option probabilities, calibrated confidence
Score(levels)ordinal rating, severitywinning level, a continuous score on the scale, confidence
Noul(statement)yes/no gates, guardrailsP(true), thresholded to a bool

The returned value is always drawn from the set you declared. An invalid category is structurally impossible, not "usually avoided." This is tested against adversarial inputs (NaN, infinity, negatives, all-zero score vectors).

How it works

state + typed questions        |        v   one batched pass through a local zero-shot NLI model   (no API key)        |        v   raw probabilities per option        |        v   calibration: temperature scaling + conformal abstention        |        v   typed, schema-valid answers + calibrated confidence
  • Local NLI backend (fully offline): one small natural-language-inference model scores every option as an entailment hypothesis, in a single batched forward pass. Fully offline after a one-time ~400MB download. No key, no vendor, your text never leaves your machine. This is the backend used by poordjaevin eval / calibrate and by Client() in Python; select it for serve with POORDJAEVIN_BACKEND=nli.
  • Devin ACP backend (default for poordjaevin serve): routes scoring through devin acp, so decisions use the model your Devin plan already provides, with automatic rotation and per-call cost reporting. No extra model, no extra key.
  • Calibration (the moat): temperature scaling fits one scalar so predicted confidence matches real accuracy; conformal thresholding turns a target risk budget into an "I don't know, escalate" signal. Calibration is backend-specific: a calibrator fitted on the NLI backend is not applied to ACP scores (the server warns and falls back to raw confidence on a mismatch).

Benchmarks

Reproduce everything with two commands:

bash
poordjaevin eval       --set evalset/tasks.jsonl          # accuracy, ECE, Brier, risk-coveragepoordjaevin calibrate  --set evalset/tasks.jsonl --plots  # before/after ECE + the diagrams

On the shipped eval set (55 hand-labelled items, 160 decisions), local NLI backend, keyless:

MetricRawCalibrated
Accuracy0.7810.781
ECE (calibration error)0.1700.071
Brier0.184lower
Temperature1.002.71

Temperature is fit by 5-fold cross-validation, so the "after" number is measured on held-out data, never on data it was fit on. Full tables and the honest limitations are in RESULTS.md.

Against Jev, Laya, and von, on the same inputs, same metrics code: see poordjaevin vs the field above and the full harness in crossbench/. Short version: poordjaevin leads the open options on this mixed decision-primitive benchmark, von leads on high-cardinality classification, Jev leads overall.

Selective prediction: it knows when it doesn't know

Set a risk budget and poordjaevin abstains on its least confident decisions instead of guessing:

[Risk-coverage curve: error rate drops as the model abstains on low-confidence decisions]

At a 10% error budget it confidently answers 55% of decisions and escalates the rest. That is the natural bridge from System One (fast automatic answer) to System Two (a human, or a bigger model).

Real examples

bash
python examples/ticket_router.py   # full triage on a support ticketpython examples/tool_gate.py       # gate a risky tool call before it runspython examples/demo.py            # raw vs calibrated, side by side

The tool-gate example encodes a practical lesson: the local model is strong at concrete questions ("this action moves money", "this deletes data") and weak at abstract ones ("this is dangerous"). Ask concrete questions and let a one-line rule apply the policy.

Honest limitations

No hype. Here is what this is not.

  • Not as fast as Jev. Jev uses a custom model. poordjaevin uses commodity ones. We report latency, we do not market it.
  • The eval set is small (tens of items, one labeller, English, support flavoured). Enough to show calibration direction and schema validity, not a leaderboard.
  • After-ECE is 0.071, not below 0.05. That is the real cross-validated number, reported as measured. Per-question temperature would likely push it lower.
  • The local model is moderately intelligent. It does real semantic entailment, not deep reasoning. Calibration and abstention are what make that safe.
  • Jev is currently ahead, measured, not assumed, and so is von on one axis. The cross-system benchmark has Jev winning the multi-primitive set outright and leading Banking77 calibration; von beats both Jev and poordjaevin on Banking77 accuracy. poordjaevin's honest position is "best fully local/free option on the mixed decision-primitive benchmark," not "beats Jev" and not "beats every open alternative everywhere."
  • Temperature scaling doesn't fix everything. At Banking77's 77-way cardinality, a proper cross-validated temperature refit barely moves ECE (0.414 → 0.416) — the miscalibration there is structural to the small NLI backend at high option counts, not a scalar you can fit away. See crossbench/results/banking77_poordjaevin_recalibrated.json.

FAQ

Is this a Jev clone? No. It reproduces Jev's developer interface and its calibrated-confidence guarantee on open, local models. It does not copy Jev's architecture or its speed.

Can I run Jev locally? Not Jev itself, it is closed and hosted. poordjaevin is the local, open-source alternative: it runs the same typed-decision interface on your own machine, offline, with no API key and no waitlist.

Is there an open-source alternative to Jev? Yes, this is one. poordjaevin is MIT-licensed, reproduces Jev's Choice/Score/Noul interface on commodity models, and proves its calibration with reproducible numbers.

Do I need an API key or GPU? No. Two free paths: serve defaults to the ACP backend, which reuses your existing Devin credentials and model; nli runs on CPU, offline, after one model download.

How is this different from an LLM in JSON mode? Two ways. Output is schema-valid by construction, not by parsing. And the confidence is calibrated and proven, not a number the model made up.

What is a "System One" model? A model for fast, automatic, structured decisions (classify, route, score, gate), as opposed to slow, deliberative chat. The name is from Kahneman's System 1 / System 2.

What is ECE? Expected Calibration Error: the average gap between a model's confidence and its actual accuracy. Lower is better. poordjaevin's whole job is to shrink it.

Can I use my own model? Yes. Backends are pluggable; a backend only implements entail_probs(pairs).

Roadmap

  • Typed primitives, schema-valid by construction
  • Local NLI backend, single pass, keyless
  • Eval set + metrics (accuracy, ECE, Brier, risk-coverage)
  • Calibration: temperature scaling + conformal abstention
  • MCP server: use poordjaevin as local tools in Claude Code
  • Independent cross-system benchmark vs Jev, Laya, von (crossbench/)
  • Devin ACP backend: LLM scoring through your existing Devin credentials (the intelligence dial)
  • Close the Banking77 accuracy/calibration gap to Jev (bigger backend, per-class calibration)

Platform support

Windows, Linux, and macOS. The ACP bridge resolves Devin credentials and the devin executable per platform:

PlatformDevin credentialsDevin CLI
Windows%APPDATA%\devin\credentials.tomldevin.exe on PATH
Linux$XDG_DATA_HOME/devin/credentials.toml (default ~/.local/share/devin/credentials.toml)devin on PATH
macOS~/Library/Application Support/devin/credentials.tomldevin on PATH

Override either with DEVIN_CREDENTIALS_PATH and DEVIN_CLI_PATH. The credential file is read only to authenticate the ACP session; it is never logged or copied.

Contributing

Issues and PRs welcome, especially new labelled decision tasks for the eval set. If you find a case where the confidence is not honest, that is a bug worth filing.

License

MIT. Use it, ship it, sell it.


poordjaevin: poor in price, rich in honesty. If your model's confidence is a vibe, come check it.


If this saved you debugging time, a ⭐ on the repo helps others find it.

Source: README.md at commit 1ec4e3e

Tools

0
Tool metadata has not been indexed yet.

Version history

1
  1. v0.1.1LatestOct 6, 2026