> Jev as a judge: How counterfeit policy steers Jev

We evaluate Jev's prompt injection detection and show how counterfeit classification policies can steer its decisions and bypass LangChain's tool-risk gating.