Execution Authority for consequential digital actions
Get started with zero config. Decionis enforces your policy before AI agents and automated systems commit high-stakes actions, routes exceptions to verified human approval, and produces signed proof of every decision.
ALLOWESCALATEBLOCK
Illustrative decision stream
Treasury agent
Today's payment run
Pay supplier invoice
ALLOWsingle-use grant issued
Sweep surplus cash
ALLOWsingle-use grant issued
Reclassify intercompany transfer
ESCALATEIC-0192 · priority normal → low
held for approval
No policy covers this call
Presence asks your treasury lead before it commits
Approved for this exact action single-use grant issued
Decision Dossier signed Ed25519 · DSR-5B21-7E04
Fund payroll account
ALLOWsingle-use grant issued
Decionis products
Decionis is the Execution Authority platform. AgentSafe applies it to agent and infrastructure actions. Commerce Gate applies it to commerce. Presence verifies a named human when policy requires approval. All use the same decision and evidence model.
Decionis · Execution Authority
Your policy → ALLOW, ESCALATE or BLOCK → signed decision evidence
Developers, platform engineers and security teams
Open-source runtime and hosted gateway for agents, APIs, and CI/CD.
Agent tool calls, API requests, MCP tools, deployments and infrastructure changes.
Start NowInstall AgentSafeReview the AgentSafe gatewayHigh-volume merchants and enterprise commerce teams
Margin, order, promotion, fulfillment, and refund controls for high-volume commerce.
Price changes, orders, promotions, fulfillment, inventory and refunds.
Start NowReview Commerce Gate capabilitiesExplore commerce workflowsPresence verifies the person when your policy requires approval for a specific action.
Decision Dossier preserves the verdict, policy context and signed evidence for independent verification.
AgentSafe is open-source. It enforces the hosted Decionis authority’s verdict; it does not decide policy locally. Hosted authority and production Enforcement are commercial services.
Decionis is execution-authority infrastructure for AI agents and automated systems. Before a consequential action commits, Decionis evaluates it against the organisation’s policy and returns ALLOW, ESCALATE, or BLOCK. When approval is required, a named person can be verified for that exact action. Every decision produces signed evidence that can be checked independently.
Enforcement applies at the boundaries you connect. Each integration documents its own coverage and failure behavior.
Counted from the decision ledger. Each figure names its window and links to how it is measured.
Recorded protocol decision evaluations across environments, including sandbox and Shadow Mode. Evaluations are not executed actions or customers.
Decision results recorded as blocked, escalated or requiring review. A Shadow Mode result does not stop the underlying action.
Distinct paths observed in enforcement during the trailing 30 days, plus currently configured enforcement rollouts. A path is not a customer or a connector.
Registered people, excluding internal and synthetic accounts. This is not a count of paying customers or employees.
Open source
“I liked being able to see what would happen before making anything live.”
Decisions are recorded in Ed25519-signed Decision Dossiers you can verify without an account.
Why it compounds
Each time the gate authorizes, holds, or blocks an action, it writes the decision record. Every policy change keeps a dated, attributed revision. Your team can verify what was permitted and under whose authority.
The record is a byproduct of authorizing the action, not a task someone owes you at the end of the week.
It describes what was actually permitted, when, and under whose approval — not what someone meant to write down later.
Every entry is signed, so an auditor or a buyer verifies it against a published key instead of taking your word for it.
Independently checkablepublic corpus · DOI 10.5281/zenodo.22692903npx -y @decionis/verify
Why this cannot simply be copiedShadow to enforcement
No rip-and-replace. Existing systems remain responsible for execution.
Replay what already happened against your policy.
Evaluate live actions and record what would have been held. Nothing is held.
Tune thresholds until the holds are the ones you meant.
Turn on enforcement for a single action type.
Add the next action once the first one runs clean.
Trust
Every Decision Dossier is signed with Ed25519, and the public keys are published. You can verify any dossier offline, without an account and without calling us.
An approved action carries an execution grant bound to that exact action. The grant is claimed once, immediately before the action runs, so a replayed request is refused.
Run the Decionis Authority in your own cloud from the versioned Helm chart, under a commercial license.
Every public endpoint accepts TLS 1.2 or 1.3 only. Stored data is encrypted at rest with AES-256.
AgentSafe v0.3.5 ships with a CycloneDX SBOM, signed build provenance and a Sigstore-signed release tag.
Report a vulnerability privately to security@decionis.com. Leave production keys, customer payloads and unredacted dossier contents out of the report.
Choose a product, see a decision and understand what changes when you connect it.
Execution Authority determines whether one exact action is permitted to execute now, under the organisation’s policy and required approval. Identity proves who is acting; guardrails assess content and risk; Execution Authority decides whether the resulting action may commit and records the decision as verifiable evidence.
AgentSafe serves developers, platform engineers and security teams governing agent, API and infrastructure actions. Commerce Gate serves high-volume merchants and enterprise commerce teams governing prices, orders, promotions, fulfillment and refunds. Both use Decionis policy decisions, verified human approval when required, and signed evidence. Choose the product that matches the action you need to control.
Run a live decision in the sandbox with synthetic data. It needs no account, email or card. Choose an action, evaluate it against a policy, and inspect the signed result. The result links to AgentSafe, Commerce Gate or a relevant business workflow so you can continue with the system your team uses.
Customers start in Shadow Mode, where Decionis evaluates real actions without blocking them. Teams review which actions would have been allowed, escalated, or blocked, tune policy, and then enable Enforcement Mode for one boundary. The same integration can be returned to Shadow Mode if necessary.
Yes. Every verdict produces an Ed25519-signed Decision Dossier, and you can check the signature against our published JWKS offline — no account, and no need to trust our code for the result to mean something.
Start with Commerce Gate for margin, orders, promotions, fulfilment and refunds, or Hosted Gateway for agents, APIs, workflows and CI/CD. Create your account and continue straight to your workspace.
Shadow mode first · nothing enforced until you say so
