Zero Leakage
Inbound orders are intercepted, cross-verified against live ERP inventory states, and authorized before checkout finishes.
The deterministic decision layer between intent and execution — governing AI agents, autonomous systems, and human approval chains inline. Allow, block, or escalate in <120ms, with a signed dossier for every verdict. Start on Shopify; extend the same policy graph across your ERP and autonomous ops.
Shadow Mode is free and read-only on your own data — it records what it would have allowed, held or blocked and stops nothing. Enforcement is one click, when the drift is real.
margin floor breach · suppressed before checkout token issued
Six deterministic outcomes, measured at the point of sale — before money moves or state changes.
Inbound orders are intercepted, cross-verified against live ERP inventory states, and authorized before checkout finishes.
Hard mathematical margin floors instantly block 'hallucinated' coupon stacking and runaway automation loops at the point of sale.
Decionis is live on Shopify today — your proven, 100+-install surface — and runs the same deterministic policy graph across SAP and your ERP through one common native-surface contract. Each surface is a concrete implementation, not a second control plane.
Margin floors enforced inside Shopify Functions and Flow at the checkout edge. Self-serve from the App Store.
Margin and promo-hygiene guardrails for your eBay Sell-API listings, orders, and promotions — eBay OAuth connect, production-validated against a live seller account.
A blocked discount and a reclaimed margin point are outcomes. They hold only because of what runs underneath: a control plane that decides before the checkout token is issued, not an alert after the loss.
Three primitives compose that certainty — a deterministic verdict, two gates that enforce it, and a signed record that proves it. Together they make execution at machine speed safe enough for finance to authorize.
Every high-stakes intent resolves to one deterministic verdict — ALLOW, ESCALATE, BLOCK — at the millisecond of execution. Same inputs, same verdict, every time. No model, no probability, no drift.
The whole idea, in one sentence
Nothing reaches execution without passing through the decision. Everything else — the surfaces, the proof, the connectors — is how that is done and how you can check it.
Find your path
Pick the kind of action you want a decision in front of. Each route is short, names what actually goes wrong, and ends with a policy you can try to break.
Gate tool calls, egress, secrets, deployments and token spend.
Add a decision before a Zap, an n8n node, a webhook or a protected action.
Stop margin leakage, excessive refunds, overselling and unauthorized spend.
Apply one policy graph to ERP, CRM, ITSM and internal workflows.
Decision records, dossiers, and evidence-bearing execution events
Infrastructure metrics, not vanity metrics.
Decionis tracks decision quality, prevented loss, approval velocity, and generated proof.
Every certified action can leave behind a signed Decision Dossier.
Real teams put governed decisions in their execution path with Decionis. These are verifiable onboarding proofs — how fast a partner reached a live, signed decision contract. The economic side of the story is accounted for separately, and honestly, on the prevented-loss methodology.
Enilo went live with Decionis as the governance layer around its eligibility signals — registering, uploading a sample feed, confirming the inferred mapping, and issuing production credentials in less than a day, on a standard versioned-policy contract rather than a services engagement.
Checkout margin protection is live in production today. And the same gate that blocks a bad checkout is a deterministic decision layer for any high-stakes action: one Universal Action Gate governs vendor deals, visa applications, and code deploys with the same signed verdict — no native integration required.
The five things teams ask last — the ones that decide whether this is worth an afternoon.
No. Decionis sits in front of the action you already take — your workflow, your systems, your approvers. It answers one question before execution, should this run, and hands the verdict back to whatever asked. Nothing is migrated into Decionis.
Yes. Shadow Mode evaluates your real traffic and records what it would have allowed, held, or blocked — while stopping nothing. You turn on enforcement once the numbers are yours rather than ours, and even then timeouts and engine errors fail open.
Yes. Policies are versioned inside your own workspace and are never shared between customers. If policy cannot leave your network at all, the whole control plane runs in your own VPC with one helm install.
Minutes for the API, an SDK, or MCP — one call in front of the action you want gated. Native platform connectors take longer because they follow each marketplace's install and review path, and an enterprise rollout across several systems is measured in weeks, not minutes.
Yes. Every verdict produces an Ed25519-signed Decision Dossier, and you can check the signature against our published JWKS offline — no account, and no need to trust our code for the result to mean something.
Install read-only, let Shadow Mode run on your recent orders, and read a Drift Report built from your own data. If the number is real, enabling enforcement is one click.
Read-only · no checkout changes · reversible per rule
Turn slow, manual back-office fraud and margin reviews into instant, deterministic, cryptographically signed approvals.
Recover the silent losses from tools editing prices outside guardrails — and every block lands a signed, audit-ready dossier, so audit teams skip weeks of prep.
Multi-channel inventory lag lets the same last item sell on Shopify and eBay at once — and the resulting cancellations wreck your seller rating. Decionis validates live inventory at the millisecond of checkout and halts double-sales before the order commits, insulating your Top Rated Seller status.
Shopify Functions and Flow today, with Slack, ServiceNow, SAP, and your ERP governed by the same policy graph. New surfaces plug into one common contract — not a second control plane.
Vendor payments, purchase orders, and procurement approvals governed before they execute in SAP — the dual-gate control plane on your ERP.
Margin and pricing guardrails for your Amazon SP-API listings and orders — Login with Amazon connect, shadow-mode first while we validate against live seller accounts.
Cross-verify cost basis and inventory against your system of record via standard webhooks — the same Gate 1 admission check, any backend.
Payroll runs, expense payouts, and supplier invoices circuit-broken before they commit, and HR business processes (terminations, compensation changes, hires) checked for authority, segregation of duties, and pay equity — dual-gate packs built and tested, pending validation against a live Workday tenant.
Margin floors enforced at WooCommerce checkout — Block and classic, using core COGS, with a signed Decision Dossier per evaluation. Installable from the WordPress.org plugin directory; new stores start in shadow mode and enforcement is opt-in.
Synchronous checkout-webhook enforcement for Adobe Commerce / Magento — halts a margin-breaching order (op:exception) or lets it through, failing open on any engine error. Cost basis read from Magento's product cost; pending validation against a live store.
Pre-execution Action Gate for Salesforce — Flow, Apex, and Agentforce actions checked before they run (allow / hold / escalate) with signed Decision Dossiers on the record. Managed package, shadow-first rollout; AppExchange Security Review in progress.
Live today: Shopify, eBay, SAP, ERP & Webhooks, WooCommerce. In beta: Amazon, Workday, Adobe Commerce, Salesforce.
Gate 1 (State Admission) verifies the premise against your live ERP system of record, so nothing executes on ghost data. Gate 2 (Execution Authority) issues a hard runtime block the instant an action breaches your encoded margin floor. Fail-closed: if it cannot prove safe, it does not pass.
Whatever the protocol decided, the dossier records what then happened — AUTHORIZED, ESCALATE, BLOCKED, PENDING_MFA — in an immutable, Ed25519-signed record, chained so it is tamper-evident and verifiable without an account. The result is an audit-ready trail for every real-time state change.
Six pages teach the rest, in order.
See all seven canonical diagramsSet limits on your own AI activity, and get a record when something is stopped.
Or compare all five side by side.
CoolDeal completed the entire Decionis onboarding for its Resolve pillar from the public API docs alone — sponsor verification, mapping, sample upload, deployment-bundle issuance, and callback registration — with no dashboard handoff or custom operator path.
See exactly how we account for the margin loss Decionis prevents — computed from live governed decisions, never a fabricated number — and model your own payback.