The System One Split: Jev, CUA-S1-FORMS, and the Decision Layer Coming Beneath the Agent Loop

Written by

in

by Chris DePuy / September 20, 2026

Between September 15 and 18, four related releases arrived within four days. TypeSafe AI emerged from two years of stealth with Jev, a model class the company calls System One, LangChain published an integration guide showing Jev wired into agent middleware, Browser Use open-sourced Jev Ultrafast, a browser-agent reference implementation, and Cua released CUA-S1-FORMS, an MIT-licensed form-filling specialist with training code and open weights. Each release is separable. Read together, they describe an architectural split that the agent-tooling market appears to have reached all at once: the decisions inside an agent loop, which for two years have been billed as generation, are being moved to small classifiers that return typed answers instead of text.

Abstract concept art: a single luminous control node forking into many thin decision paths over a dark lattice. Source: Generated with ComfyUI SDXL.
A decision layer beneath the agent loop: one model proposing, a smaller classifier choosing. Concept image generated for Market Intelligence Research with ComfyUI SDXL.

TypeSafe AI: Jev and the System One Category

Jev is not a trimmed-down language model. It generates no text; a caller sends application state plus a set of predefined questions, and the model returns typed answers, per-option probabilities, and a confidence estimate. The interface is three question types: Choice picks among candidate options, Score places input on an ordered scale, and Noul answers a yes-or-no proposition as a probability. Questions inside one request evaluate in parallel, so a batch of judgments costs close to what a single one does. TypeSafe trains the model with what it calls Reinforcement Learning for Calibrated Decisions, positioning calibrated confidence as the feature that lets software act on an answer autonomously above a threshold and escalate below it.

The company reports the model at 193.6x faster and 444.6x cheaper than the LLM baseline in its own workflow comparisons, and prices input at $42 per billion tokens with output tokens uncharged. Both figures are company-published and vendor-run; the material point is structural. Once a routing or approval call costs fractions of a cent and returns in well under a second, the per-step economics of an agent loop change, and per the founding profile, the pitch carries credential: CEO Diogo Almeida co-invented RLHF and InstructGPT, the methods behind ChatGPT, and spent the two preceding years in stealth building the RLCD approach. The name is a thesis in itself: Jev is named for the economist William Stanley Jevons, whose 1865 paradox holds that a cheaper resource is consumed more, not less.

Browser Use: Jev Ultrafast and the Indexed Action Space

The clearest public demonstration of the pattern is Browser Use’s open-source reference agent, which replaced the usual screenshot-and-prompt loop with a structured one. Each observation builds an indexed table of interactive elements, Jev selects an operation and a target element in one request, and a small language model is invoked only when the chosen operation is typing. Screenshots sit outside the default decision loop entirely. The published reference run completed a Google Flights search in 7.1 seconds, and the repository’s own measurements record median browser protocol calls falling from 1,092 to 101 and median task time from 9.450 to 7.092 seconds, a 25% reduction, across six alternating runs in which both the baseline and the new policy passed three of three. The README is careful to note the same limitation itself: the comparison covers three repetitions of a single task on a single browser configuration, which is an architecture proof rather than a reliability benchmark, and a selection the model marks complete still needs an independent check of the result.

LangChain and Vercel: the Safety Classifier, Unbundled

The second deployment shape is the guardrail. Coding harnesses including Claude Code, Codex, and Cursor ship a classifier that judges whether a shell command may execute before auto mode proceeds, logic that until this week lived inside closed-source product code. LangChain’s September 17 post unbundles the pattern as open middleware: AutoModeMiddleware has Jev inspect tool calls and block risky executions before the tool runs, while a companion router lets Jev pick the cheapest capable model per request and leaves the probabilities in agent state for audit. Vercel is shipping the same control in its own agent tooling, in a guide in which Jev classifies each proposed shell command as clear or caution, running the routine commands without a prompt and pausing the rest for a person, with any failed review defaulting to human approval.

Cua: CUA-S1-FORMS and the Open End of the Category

Where TypeSafe’s model is an API service, Cua’s release makes the category buildable. CUA-S1-FORMS, the first member of Cua’s System One family, plans form completion as selections over known options, choosing fill, check, click, or skip per field, drawing values from a supplied document while application code validates and orders the plan and Cua Driver executes it. The MIT-licensed repository ships synthetic-data generation, training, and evaluation code alongside the weights on Hugging Face, which is the distinction that matters to an infrastructure analyst: a buyer can generate training data, fine-tune the specialist, and keep the resulting decision layer local. Cua is equally careful to frame System One as a borrowed engineering analogy for quick decisions with firm boundaries, not a claim about model architecture. Community builders are pointing the open and hosted halves at the same deskside hardware, with published plans to bolt the hosted decision model onto DGX Spark fleets so local Qwen and DeepSeek engines only handle generation and the escalation tiers, and one Claude Code plugin that has the decision model score every recorded tool call and drop stale ones instead of summarizing the transcript, with kept content staying verbatim.

The convergence across four independent codebases, hosted API, reference browser agent, framework middleware, and open specialist weights, says the decision layer is becoming a product slot distinct from the model slot. Across the four releases we have examined, the unresolved question is trust rather than speed: a classifier that blocks commands is itself an attack surface, a wrong routing decision costs the run it mis-steers, and every headline speed ratio published so far is a vendor number. As firms such as 650 Group have been tracking in their AI infrastructure research, the constraint on agent deployments has moved from model quality to the economics and governance of the thousands of small judgments beneath each answer, and this week the tooling ecosystem moved to instrument that layer separately from the models above it.

More posts

© MarketIntelligenceResearch.com