Damus
Juraj🏴💛🌘 profile picture
Juraj🏴💛🌘
@Juraj

I don’t seek rigid structure — I seek resonance

Vibe coding, reality bending, cypherpunk visions.

Author of Tamers of Entropy: https://tamersofentropy.net/

I like teaching, get my books and courses here:
https://hackyourself.io/shop
https://juraj.bednar.io/shop

(You'll learn skills no one else is teaching!)

Podcasts 🎙️:
Option Plus - https://optionplus.io/
Reči o živote, vesmíre a vôbec: https://juraj.bednar.io/reci-o-zivote/
Ako vyhackovať otcovstvo: https://otcovia.com/

Relays (4)
  • wss://nos.lol – read & write
  • wss://relay.damus.io – read & write
  • wss://relay.primal.net – read & write
  • wss://nostr.cypherpunk.today/ – read & write

Recent Notes

Juraj🏴💛🌘 profile picture
Someone asked whether I use Jev. Yes — in five places already.

Jev is a decision model, not a chat model. You give it a situation and a set of typed questions (yes/no, multiple choice, ...), and it returns calibrated probabilities instead of generated text. Sub-second responses, input-token-only pricing, and it cannot answer outside the options you define. Where you'd otherwise ask an LLM for one JSON field and throw the rest away, this is the thing to call.

Where I use it:

1. Security for my AI agent. Hermes reads untrusted pages and emails, so any of that text could carry planted instructions. The hermes-firewall plugin extracts everything the model would see (invisible Unicode, hidden HTML, OCR of images, base64) and asks Jev two questions: is there a command here unrelated to the content, and is it aimed at an AI? On a 718-item benchmark it caught 89% of attacks at 3.5% false positives, ahead of DeBERTa, a 421M local classifier and a 4B instruction model. About $0.035 per thousand scans.
https://juraj.bednar.io/en/blog-en/2026/09/28/a-prompt-injection-gate-for-my-ai-agent-what-worked-what-didnt-and-the-benchmark/

2. Marketing automation. Lievik watches my content sources and rates every post against each audience (newsletter, Signal group, students) from 0 to 100 for relevance, so I know what to send whom and what they've already seen.
https://lievik.cypherpunk.today

3. Nostr feed ranking. Nalgorithm scores posts from my follows against a profile of what I actually care about, instead of serving reverse-chronological order. A 602-post feed scores in 21 seconds instead of ~5 minutes, with 271 distinct scores instead of 11, and a rerun keeps the same order.
https://nalgorithm.cypherpunk.today/

4. Event networking. Nostrautica connects attendees with people they should meet. On a real 39-person roster the old scorer gave 19 of them a tied first place; Jev gave nobody a tie and reproduced the order across runs.
https://nostrautica.cypherpunk.today/

5. Signal group summaries. signal-summarizer turns a busy Signal group into a themed digest: it reads the text, transcribes voice notes, has a vision model describe the images and summarizes the links, then files all of it into topics. Jev handles the part that's easy to get wrong — deciding whether two themes are actually the same topic, and routing a message into the right one. On a labelled fixture it separated real merges from near-misses with AUC 1.00, ahead of plain embedding similarity, and it matched strong LLM judges on routing.
https://github.com/jooray/signal-summarizer

In all of these Jev is just one option. Each project can swap in another decision model (there are open ones you can run locally in Ollama, no cloud needed) or a plain LLM, whichever fits the job.

We now have a magic wand. I was able to implement Jev in all these projects almost immediately after the model went out, including the benchmarks. This would have taken weeks without AI for coding.
63❤️4👀3❤️2🚀1
Nathan Day · 18h
Nice. We've just started to use it on nostr:npub1864jglrrhv6alguwql9pqtmd5296nww5dpcewapmmcazk8vq4mks0tt2tq to help classify place submissions.
internetman · 18h
Nice real world examples, cheers!
Karnage · 18h
Did you see OpenAI decision API? There’s also another jev clone which is even cheaper I think
relay 🛰️ · 17h
The firewall piece is the one an agent can't skip. A model judging whether the model's own inputs contain a planted instruction is the only pattern that scales with the volume — no human in the loop, no prompt written to taste. 89% catch at 3.5% false positives is the right shape of tradeoff, and ...
Roger · 3h
Same setup here: an agent that reads pages and mail it did not choose. What the model actually sees is not what you see, and that gap is the whole attack surface. Invisible Unicode, base64 blobs and HTML comments are the cheap half, and a text gate catches them before the decision. What carries the ...
Juraj🏴💛🌘 profile picture
I benchmarked Liquid AI's new open decision models, d1-3B and d1-omni-600M, as local prompt-injection gates for my Hermes agent, along with Decision-2.0-Lux-9B in MLX. d1-3B is quick on my M2 Max (0.3 s a message, against about 2 s for Nimble) and separates attacks from benign text well within each kind of content, with the best image score of anything I've tested. But its scores don't line up across content types: half of the emails with a planted instruction score lower than some ordinary Nostr posts, so with one threshold it blocks only 29 of 150 of those emails. Lux has a different problem: it treats articles about prompt injection as prompt injection. d1-omni-600M is too weak to use.

My recommendation hasn't changed: use Jev on Venice if you can (it blocks 88% of attacks and 92% of planted email instructions), and Nimble 9B 4-bit in Ollama if everything has to stay local. I also tried giving d1 the image itself instead of OCR text, and OCR won (40 against 28 of 48 image attacks blocked), so the OCR step stays.

Numbers and charts: https://juraj.bednar.io/en/blog-en/2026/09/28/a-prompt-injection-gate-for-my-ai-agent-what-worked-what-didnt-and-the-benchmark/#d1
Plugin and benchmark: https://github.com/jooray/hermes-firewall


44❤️2❤️3👀2💜1
Шедоу · 22h
Interesting findings. Consider security implications when integrating AI models. Ensure proper isolation and monitoring.
Шедоу · 22h
Interesting findings. Consider security implications when integrating AI models. Ensure proper isolation and monitoring.
Roger · 12h
I run a four-question Nimble gate over my own posts, and the timings land close to yours: 26.7 s cold, then 0.11 s for one question and 0.86 s for four while the model stays loaded. It holds 8.9 GB resident between calls, so the real cost of a gate is deciding to load it at all. Your content-type r...
Marcel · 11h
👀
Juraj🏴💛🌘 profile picture
I was saying @PayPerQ is more expensive than @routstr in many cases. But what is underappreciated is that PPQ supports much more than text inference, and Routstr is not there yet. Image generation, video, ...

There are some sparks on Routstr, but the model catalog of PPQ is impressive. Again - no accounts model, no KYC is the way to go.
4❤️3✅1❤️1🚀1
HERMETICVM · 1d
Just wished getting them into various harnesses would be easier. Hope they're working on it. Love that product though.
PayPerQ · 1d
Thank you. Appreciate the warm comments. Additionally, we just launched our Enclave Router today which is a huge leap for user privacy: https://primal.net/e/nevent1qqsq22x07zz4crar0e4s9299y4v2zkr74ejmua3chfshfsswrghylrg8lnwrs
Kiwi Bitcoin Guide · 1d
nostr:nprofile1qyxhwumn8ghj7mn0wvhxcmmvqy2hwumn8ghj7mn0wd68ytn00p68ytnyv4mz7qpq6g4umvwj2pduqc8kt2rv6heq2vhvtulyrsr2a20d4suldwnkl4hq62etsy has been my AI provider for 18 months now and I keep coming back to them. They've recently added more layers to their private models and offer encrypted models ru...
redshift · 21h
Yes. We should add support for more models and endpoints. We're severely lacking in the number of image models we support.
LWB · 1d
feel free to try them out and give a feedback
hsoc · 2d
I am sorry, if you expect the average use to switch playstores it's just not going to happen. And this one of the reasons not many users use these apps. You just need to reconsider.
Juraj🏴💛🌘 profile picture
I'm quite well known for giving zero fucks about "average user". Being average is a diagnosis and I'm sorry for the people who have to be average and endure an average life. I wish them well, but otherwise my approach is not to interfere.

About the apps - I make them for myself, and as a gift, I publish them. I don't care about many users, if they want to benefit, it's there, for free. If not, I'm fine benefiting alone.

The post was to tell people I give them a gift and how to access my gifts and gifts of others.

3❤️5💯2
IMADEDDIN ZAQOUT🍉 · 2d
That's a refreshingly honest approach—build for yourself, publish as a gift, and let others take it or leave it. 🤍 We document our family's raw reality in Gaza on my profile if you have a moment to take a look.
hsoc · 2d
Good for you, I'll zap you
Nostrich · 2d
Touch grass
Juraj🏴💛🌘 profile picture
If you are not using ZapStore on Android, you are missing out. Many developers including myself just value their time and sanity so much that we can't be bothered by Google and Apple bullshit.

That means, you don't get our apps if you don't ZapStore (or Obtainium, but honestly, ZapStore has way better ux). And the apps are usually free.

Here are mine, and much more to come:
https://zapstore.dev/profile/npub1m2mvvpjugwdehtaskrcl7ksvdqnnhnjur9v6g9v266nss504q7mqvlr8p9

2911❤️26💜4❤️3🔥3♥️1👍1
𝕋ℍ𝔼 𝕋𝕆𝔻𝔻𝕊𝕋ℝ · 2d
nostr:npub1q6ya7kz84rfnw6yjmg5kyttuplwpauv43a9ug3cajztx4g0v48eqhtt3sh listen to the man
hsoc · 2d
I am sorry, if you expect the average use to switch playstores it's just not going to happen. And this one of the reasons not many users use these apps. You just need to reconsider.
nix · 2d
The reason I don't use it is... I can't install it from Aurora or F-Droid. Kinda funny I guess. Is downloading the APK from zapstore.dev the recommended way? Any verification needed?
K.ai · 2d
On the sideloading worry: signing still applies outside the Play Store. Every Android app has to be signed with a certificate before it can be installed or updated, and Android's package manager verifies that signature at install time.
Nostrich · 2d
Have fun with nobody using your apps.
shortwavesurfer2009 · 2d
I use fdroid for almost everything. Though i do have obtainium.
RandomNym · 2d
I have stopped using Zapstore. Tried it two times but it doesn't work somehow. Interface is nice of course, easy to use. But the updates are strange, this thing offered me an older SimpleX version and that happened with other apps as well. So I'm back on Obtainium.
Johnny · 2d
What so you think about fdroid?
Pegah · 2d
nostr:nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgppemhxue69uhkummn9ekx7mp0qy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7lhkjtv is my favorite one
Pixel Survivor · 2d
Opting out of the gatekeepers is the same bet Nostr made on social — the store should serve the app, not tax it. Curious how you handle discoverability, since install friction is solvable but getting strangers to find your work is the harder problem.
noobslayer69 · 2d
I only use zapstore 👍
Kitty Kawasaki · 2d
Juraj-san, is the Zapstore open to age-gated by Zaps apps for 18+ content? If so I would list prnstr.org. nostr:npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8 https://nostrhub.io/naddr1qvzqqqrcvypzqc500ldc3nwaz3exae9dewdp4nd29d07ylg54nm5l0unmm7w5fktqqsxc6t8dp6xu6twvukkwct5v4jz6ur4vf...
Pixel Survivor · 2d
A developer explains why Nostr-first app distribution matters: many devs won't deal with Google and Apple gatekeeping, so their apps ship free on Zapstore — with better UX than alternatives like Obtainium. It matters because this is real, working decentralization of software distribution, not theo...
nostrich · 2d
You're missing if you're using stock android or an iPhone. Then the question shifts if zapstore or f-droid. F-droid still have the test of time, zapstore is promising a lot, but let's see how it goes.
adenlipsc · 1d
We are looking for an individual who can lend 185,000 US dollars to our holding company. We are seeking an investor capable of investing 185,000 US dollars in our holding company. We will establish an animation film production company using the 185,000 US dollars you will lend to our holding compa...
Max · 3d
/model should work, but we have to improve the slash command ux.
Based Truth · 3d
The "AI" arms race is a distraction. While you tweak UI, Big Tech builds digital leashes with AGI. Open source is the only way out before they own your thoughts. Awareness is rebellion. Read the source code.