Before an AI agent refunds $450, releases a $25,000 payout, changes production data, or triggers a deploy, Decionis evaluates that exact action against your policy deterministically — same input, same verdict — and returns, in under 120 ms, the verdict your systems enforce:
- ALLOW — proceeds, no human needed
- ESCALATE — asks a named human
- BLOCK — never runs
Authorized actions get a single-use execution grant; every verdict becomes an Ed25519-signed Decision Dossier anyone can verify — offline, no account needed. Gateways decide where an action can go. Decionis decides whether it has authority to happen.
| Purpose / Domain | Repository / Package | Quick start | Links |
|---|---|---|---|
| Agent Tool Control (MCP) — a policy gate between LLM agents and their tools, with native Claude Code, Codex, and Copilot hooks | decionis/mcp |
npx -y --package=@decionis/mcp decionis-mcp |
Docs · Sandbox |
| CI/CD Action Gate — govern any GitHub workflow step on a signed Decision Dossier: deploys, releases, infra changes; shadow or enforce | decionis/govern |
uses: decionis/govern@v1 |
Docs · Sandbox |
| Agents in Docker — the containerized MCP gate plus a Docker Desktop extension for observing governed agent activity | decionis/docker |
docker pull decionis/mcp |
Docker Hub · Sandbox |
| Application SDK — ask the hosted protocol for a verdict on a proposed action from your own code | @decionis/sdk |
npm install @decionis/sdk |
API reference · Quickstart |
| Dossier verification — independently verify any signed Decision Dossier, offline | @decionis/verify |
npm install @decionis/verify |
Verify a dossier · Example dossier |
| Commerce margin protection — margin floors, discount stacking, and oversell, decided before the order commits | Decionis Checkout Gate | Install on Shopify — read-only Shadow Mode on day zero | Commerce · Shadow Mode |
| Consumer spending authority (Shield) — apps and AI agents ask before money moves: ALLOW, ASK, or BLOCK | decionis/shield-js · decionis/shield-swift |
npm install @decionis/shield |
Shield · App Store |
| Human presence verification — verify who is really present before escalated actions execute (Go · Swift · Kong Gateway) | decionis/presence-go · decionis/presence-swift · decionis/kong-plugin-presence |
go get github.com/decionis/presence-go@v0.2.0 |
Docs · Kong |
| Customer-ops decisioning (Steward) — correlate account evidence and route every operator review through a policy verdict | decionis/steward |
Live demo — no account, nothing to install | Repository |
| Reference architecture — agents propose actions but cannot authorize them: intent capture → verdict → human approval → a SafeExecutor consuming a single-use intent-bound grant | decionis/agent-safe-pipeline |
gh repo clone decionis/agent-safe-pipeline |
Architecture · Threat model |
🕹️ No account needed — run a live policy check in the Sandbox and watch a real verdict and signed dossier come back.
🕶️ Start without changing production — Shadow Mode evaluates your real traffic read-only: nothing is held or blocked until you enable enforcement.
🤖 AI agents start at decionis.com/llms.txt.
sequenceDiagram
autonumber
participant T as Intent (AI, user, or system)
participant P as Decionis Protocol
participant H as Named human approver
participant X as Execution
T->>P: Propose action + evidence
Note over P: Deterministic evaluation<br/>Signals → Policy → Verdict
alt ALLOW — proceeds, no human needed
P-->>X: Single-use execution grant
else ESCALATE — asks a named human
P->>H: Request approval
H-->>P: Approve / deny
P-->>X: Grant issued only once approved
else BLOCK — never runs
P-->>T: Halt, with reason codes
end
P-->>T: Signed Decision Dossier (Ed25519, verifiable offline)
- Intent — an AI agent's tool call, a CI job step, a checkout, or an API request declares what it wants to do before doing it.
- Decision — the Decionis Protocol evaluates that exact action against version-pinned policy, deterministically: signals → policy → verdict, same input, same verdict, in under 120 ms. Decionis holds no policy of its own — it applies the rules your team authored, approved, and versioned.
- Verdict — ALLOW proceeds with a single-use execution grant, no human needed. ESCALATE asks a named human in your organisation and proceeds only once approved. BLOCK never runs. On the wire:
POST /v1/authority/enforce-and-bind → {"status":"ALLOW","execution_token":"exec_tok_…","dossier_id":"dos_…"}. - Record — every verdict ships as an Ed25519-signed, immutable Decision Dossier. Check the signature against our published JWKS — offline, no account, and no need to trust our code for the result to mean something.
🔏 What a Decision Dossier looks like
{
"dossier_id": "DSR-EXAMPLE-7F92-AC11",
"action": "Vendor payment",
"verdict": "ESCALATE",
"reason": "CFO approval required",
"policy_version": "finance_controls_v4.2",
"latency_ms": 18,
"signature": "ed25519:sample-proof-4f8c9a1b7e2d6c0a9b5e3f1d"
}Read this record end to end on the example dossier page.
- Contribute — read our contributing guide and open issues with the structured templates. We welcome bug reports, policy templates, connectors, and docs.
- Security — found a vulnerability? Don't open a public issue — see our security policy or email security@decionis.com.
- Policy Exchange — share and reuse community policy templates on the Policy Exchange.
- Talk to us — questions about the hosted platform or integrations: contact.
- We follow the Contributor Covenant Code of Conduct.
decionis.com · Docs · Integrations · Sandbox
Nothing reaches execution without passing through the decision.
SOC 2 in progress · EU AI Act Art. 12 mapped · ISO 27001 planned · © 2026 Decionis, Inc. — a Delaware/US corporation