v0.2.0

The gate sees intent, never what a command printed. This adds an output judge:
a tool_result handler that asks two questions in one request and appends one
line to the tool result the model reads.

• Secret leak. Does this output carry a credential? Flags 0.92-0.99 against
  0.01-0.02 across runs, so the threshold sits at 0.90. A hit appends a
  do-not-repeat warning and raises a notification.
• Failure class. choice over transient, environment, code_bug,
  permission, user_error, no_failure, each mapping to one sentence of
  advice from a table. Answers under confidence 0.60 append nothing, and
  no_failure stays silent.

New config block, defaulted on, judged tools default ["bash"], identical
output judged once per 120s. /jev output prints the last verdict and /jev off now stops both judges.

Installs and upgrades with pi install npm:@y0usaf/pi-jev.