# Diagrams — Jev next to Amazon Bedrock

Editable diagrams.net sources for the FactualMinds post
[Jev (TypeSafe AI) on AWS](https://www.factualminds.com/blog/jev-typesafe-ai-aws-guide-2026/).

Checked **11 Oct 2026**. Jev is drawn outside the AWS account on purpose. These are design views, not a deployed stack, and they do not show a PrivateLink hop.

| File | Point |
| --- | --- |
| `01-production-architecture.drawio` | Entry, adapter, NAT egress to TypeSafe, Bedrock, Gateway, CloudWatch |
| `02-request-sequence.drawio` | Validate, one Jev call, policy, Bedrock draft, review, and error branch |
| `03-tool-security.drawio` | Allowlist, IAM, Cedar, deterministic check. Jev is not authorization |
| `04-failure-fallback.drawio` | Timeout, 429, low confidence, and Bedrock errors fail closed |

Rendered WebP files live at `src/assets/images/blog/jev-typesafe-ai-aws-guide-2026-*.webp`.