the agent tries.jev decides.

paste an npm name on the right. an agent attempts a real install. jev reads the package text first — readme, agents.md, the usual suspects — and only a confident allow lets npm write anything to .sandbox.