Ndovu elephant mark ndovu briefings / jev-system-one-models
Ndovu Briefing · Learning material · Sep 18, 2026

Jev: intelligence you can call like a function

Podcast

The fish at the poker table

9 min 52 s · two hosts

A guided tour of the launch: what Jev is, how RLCD differs from RLHF, the numbers, the independent tests, and the one claim nobody should repeat uncritically. Written and produced by the Ndovu AI Research Lab.

Can't play? Download the MP3 (5.5 MB) AI-narrated · synthetic voices

On September 15, 2026, TypeSafe AI came out of stealth with Jev, "the first System One Model". It cannot write you a poem, summarize a PDF, or chat. Instead it answers typed questions with typed, probabilistic decisions, in milliseconds, at a price that looks like a typo. This page explains what it is, how it works, what holds up, and what does not.

$42/B tokinput · output free
70–500msend-to-end latency
$40Mraised · SF
30.8Mviews in 3 days
01 / THE PROBLEM

Why don't superhuman chat models automate anything?

TypeSafe's founding question, asked by CEO Diogo Almeida after helping build the research behind ChatGPT: if models are this smart, why is most software still not intelligent?

His answer is structural, not capability-based. LLMs are trained with RLHF, reinforcement learning from human feedback, which optimizes for answers human raters prefer. That produces models that are articulate, helpful, and pleasant. It also produces three failures that matter for software: overconfidence (models state wrong answers firmly), inconsistency (similar inputs get different answers), and text output (strings must be parsed and validated before code can act on them).

TypeSafe's manifesto calls this the "horseless carriage" problem: we bolted new intelligence into the shape of a chat window, the way early cars kept the buggy whip socket. Their bet is that the bottleneck for automation is not raw intelligence, which they argue already exists, but intelligence that is dependable enough to bury five layers deep in a system, like any other software dependency.

02 / WHAT IT IS

State in, typed decisions out

Jev exposes three AI primitives, modeled on software primitives: modular, composable, and fast. Each question is evaluated in parallel and in isolation against the same state, in a single call. Adding more questions barely changes response time, and no question contaminates another (no context rot).

PrimitiveQuestionReturnsMaps to code
ChoicePick one option from a list (up to 255)choice, probabilities, confidencea match statement
ScoreRate the state on a rubricscore, probabilities, confidencesorting / ranking
NoulIs this statement true?noul (0–1, Bernoulli)an if statement
{
  "state": // anything: JSON program state, or plain text
    "My card was charged twice. Order #8412. I need this fixed today.",
  "questions": {
    "route_to":    { "type": "choice", "options": ["billing", "technical", "sales"] },
    "is_urgent":   { "type": "noul" },
    "refund_fit":  { "type": "score", "rubric": "duplicate-charge refund likelihood" }
  }
}
{
  "route_to":   { "choice": "billing", "probabilities": {"billing": 0.85, "technical": 0.08, "sales": 0.07}, "confidence": 0.82 },
  "is_urgent":  { "noul": 0.94 },
  "refund_fit": { "score": 0.91, "confidence": 0.77 }
}

The core discipline: atomic questions, composed in code. Don't ask "rate this startup pitch". Ask about market size, technical feasibility, and differentiation separately, then combine with your own formula in code. Each question should be a "gut-check determination": the kind of judgment a knowledgeable person makes in a few seconds. If it needs extended reasoning, that's an LLM job, not a Jev job.

03 / HOW IT WORKS

A parallel sampler and a new training target

Two claims of novelty: a new architecture that answers in one parallel pass, and a new training algorithm called RLCD. Here is what that means, and what remains secret.

Parallel sampling kills the output bill

An LLM generates one token at a time, each conditioned on the last. Sequential generation is why output tokens cost ~5x input. Jev never generates a sequence: all fields of the answer are computed in a single query, which is why output tokens are free ("too cheap to meter"). The founder draws a direct line to history: replacing sequential computation with parallel is how Transformers leapfrogged RNNs.

RLCD: Reinforcement Learning for Calibrated Decisions

Where RLHF optimizes human preference and RLVR optimizes programmatically verifiable rewards, RLCD optimizes calibrated decisions: answers whose stated probabilities are epistemically honest. The pitch: if a model is right 95% of the time but never signals when it's in the failing 5%, you cannot automate with it. A calibrated model lets your code set the threshold: act autonomously above 0.9, escalate to a human below.

What's unpublished matters: there is no paper, no architecture disclosure, and no public benchmark scores. The community's informed guess (HN user paraschopra, who did related work): an encoder-style transformer of roughly 2–3B parameters, distilled from frontier models, post-trained with a calibrated-RL objective, i.e. heavily penalizing probability distributions that disagree with observed outcomes. An open replication ("Qwen-2.5-1B-RLCD") appeared on Hugging Face within 48 hours of launch.

LLMs (RLHF / RLVR)Jev (RLCD)
Optimizes forAnswers human raters prefer; programmatically verifiable outputsCalibrated decision probabilities on System One tasks
Input emphasisSequential messages, conversationStructured program state
OutputStrings; parse + validate; can hallucinateTyped values, schema-guaranteed, with probabilities
SamplingSequential, one token at a timeParallel, all outputs in one query
Cost$0.20–$10 / MTok in; output ~5x input$0.042 / MTok in; output free
Latency3–329 s end-to-end70–500 ms end-to-end
ConfidenceOverconfident and inconsistent, even when askedAlways emitted; claimed calibrated
Sweet spotChat, copilots, coding agents, verifiable problemsClassify, route, score, extract, branch, judge, verify
04 / THE CLAIMS

Extraordinary claims, measured

TypeSafe's own blog says "extraordinary claims require extraordinary evidence" and publishes its own nuances, which is rarer than it should be. Here is every major claim against the evidence.

ClaimEvidenceStatus
70–500ms latency, 40–200x fasterDemo: 0.114s vs 8.566s for GPT-5.6 Terraverified on narrow tasks independent test: 0.59s end-to-end incl. network
$0.042/MTok input, output freePricing pageverified in practice sustainability unproven; possibly subsidized
238x cheaper input than Fable 5.1Pricing page arithmeticunverified
193.6x faster, 444.6x cheaperSelf-run workflow evalsself-selected blog admits "higher end of real world gains"
"Can't hallucinate"Schema matching is guaranteedcontested type safety ≠ factual correctness; CEO conceded this on HN
Calibrated confidenceRLCD objective (unpublished)plausible, unverified no public rejection curves
Frontier intelligence on System One tasksWorkflow evals vs GPT-6 Astra / Fable 5.1 averagemixed strong on classification; fails adversarial judgment and code logic
COST PER 1,000,000 DECISIONS (log scale) — nearhere.events, Sep 16 2026 $10 $100 $1,000 $10,000 Jev · $43 Mistral Small 4 · $370 Gemini Flash-Lite · $2,496 ACCURACY ON 50-CASE EVENT-VALIDATION TEST SET Jev · 96% Gemini Flash-Lite · 86% Mistral Small 4 · 84%
Independent benchmark run by nearhere.events on a real production task (excluding unsuitable local-event listings), with per-model tuned prompts. Same 50 cases for all models; Jev rejected zero valid events. Cost measured on a separate 21-record run, list prices.
05 / THE DEBATE

"Can't hallucinate" and other contested words

The launch's flashpoint. On Hacker News (1,860 points, 490 comments), the loudest argument was semantic: is type safety the same as truth safety?

TypeSafe's claim

Outputs are constrained to a predefined type system. A malformed answer is mathematically impossible, so the 0% on their hallucination chart is guaranteed by construction, not measured. A random forest doesn't "hallucinate"; it can be wrong, but it doesn't fabricate malformed outputs the way an LLM fabricates citations. Confidence estimates let software discard low-certainty answers automatically.

CEO: "type safety is not factual correctness. I very much agree." (conceded on HN)
The skeptics' case

Type safety is not truth safety. "It can still emit a completely wrong valid value" (jacobgold). "An approve for an unauthorized action still meets the schema guarantee" (thduabmd). And individual calibration doesn't prove calibration of a combined decision — that work gets pushed back onto the developer. One commenter called it "the most misleading marketing campaign I've seen in months."

The Register: the comparison "really isn't fair as its output is not natural language".

The prior-art deflation

The HN consensus landed on a reframe: Jev is a generalized zero-shot classifier that takes its option set at runtime — a framing the CEO explicitly endorsed ("exactly right!"). The cited family: GLiNER/GLiClass (encoder-based, no text generation, multi-task single forward pass), BERT-style encoders, DeBERTa zero-shot classifiers, conformal prediction ("productionized conformal prediction"), and logit-inspection tricks with constrained decoding. The sharpest counter from the company: LLM-based constrained decoding "makes models dumber", and prompting an LLM for one word is slower, pricier, and less self-consistent than a purpose-built model.

The benchmark refusal

TypeSafe deliberately declines public benchmarks, arguing their workflow evals better represent production use. Skeptics read the same fact differently: "I bet they would publish them if their score were good" (jceg). The fairest synthesis: their evals are transparent about method but self-made; independent evidence so far supports narrow classification strength and does not test breadth.

06 / INDEPENDENT VERDICTS

Two stress tests, one split decision

Within 48 hours of launch, independent developers ran Jev against real workloads. The results trace its shape with unusual clarity.

Win · Near Here event validation

A real production gate: should this listing be excluded from a local-events index? With per-model tuned prompts, Jev hit 96% vs 86% (Gemini Flash-Lite) and 84% (Mistral Small 4), rejecting zero valid events. At $0.043 per 1,000 decisions vs $0.37 and $2.50, roughly 9x–58x cheaper, and 0.59s vs ~3s per decision. Verdict: "a promising fit for this narrow decision."

nearhere.events · Sep 16, 2026 · model jev-1.13.0
Loss · backnotprop poker eval

Poker money rides on hidden information. Jev matched a solver's top action 63% of the time on 30 spots — and on the trap spots where the correct play is to check the nuts and let the opponent bluff, it shoved all-in 16 of 16 times. It held a straight against a made flush and bet "ahead" 5 of 5. Verdict: "the fish at the poker table... people are wiring it into decisions without evaluating it."

backnotprop.com · Sep 17, 2026 · solver-grounded (0.59% exploitability)

Early-access reports from Hacker News

07 / PLAYBOOK

When to reach for Jev — and how to evaluate it

The pattern the market is converging on: LLMs as slow, brilliant System 2; Jev as the fast, cheap, calibrated System 1 underneath. The subconscious and the conscious.

Good fitBad fit
High-volume classification, routing, triage (millions/day)Anything needing generated text, prose, or code
Real-time decisions in a UX loop (games, agents, ~100ms budgets)Deep reasoning, math, hidden-information strategy
Guardrails: judging, scoring, verifying LLM outputsLong-context work (32k limit) or conversational state
Map-reduce semantic features over petabytesAdversarial settings without a fallback (see: poker)
Confidence-gated automation with human escalation thresholdsTasks needing explanations for auditability

Interactive: why calibration is the whole game

The pitch is that a calibrated model lets you automate aggressively. Drag the confidence threshold and watch what happens to a plausible batch of 1,000 Jev decisions, each with a stated confidence and a hidden correctness drawn from that calibration.

0.85
auto-acted
escalated to human
accuracy on auto-acted
Stated confidenceObserved accuracyAutomated at threshold?

This is a simulation with a perfectly calibrated model (observed accuracy tracks stated confidence exactly). It teaches the decision Jev's pricing forces you to make: a lower threshold automates more work at lower guaranteed accuracy. Whether real-world Jev calibration matches its own stated confidences is the open question — demand a rejection curve on your own data before trusting it.

An evaluation checklist

08 / CONTEXT

The people, the name, the bet

Diogo Almeida, co-founder & CEO. Verified 4th author of the InstructGPT paper (arXiv:2203.02155), the research that became ChatGPT; ex-Google Brain. His "co-invented ChatGPT and RLHF" phrasing is defensible for InstructGPT and generous for RLHF, which predates him. Sasha Sheng, COO, is an ex-Meta/FAIR research engineer; Erik Gafni, CTO, a repeat founder (Ravel) and early employee at Invitae and Freenome. The company raised $40M, works in-person in San Francisco, and its manifesto tagline is "Build Prod, Not God."

The name is the thesis. Jev is named for William Stanley Jevons, the 19th-century economist who observed that making coal engines more efficient increased coal consumption rather than reducing it. TypeSafe expects the same with decisions: every order of magnitude drop in the cost of intelligence unlocks more use cases than it saves. Whether the token market behaves like the energy market is the wager the whole company sits on.

Share this briefing