The function that decides whether a high-stakes action is allowed to happen — before it happens. Something always holds it: a person reading a policy document, a hard-coded check, or nothing at all. Naming it makes it something you can put in one place, delegate deliberately, and prove.
The decision runs inside the path the action takes — at the checkout, the payment release, the agent's tool call. An answer that arrives after execution is a report, not authority.
Authority you can't predict is authority you can't delegate to. The decision is a fixed evaluation of your rules against the facts of the action — no model guessing, no drift between identical cases.
Each decision is recorded and signed, so anyone — your auditor, your bank, your buyer — can verify what was decided, under which rule, without taking your word for it.
The adjacent categories are real and useful — they answer different questions.
Alerting and monitoring tell you what already happened. By the time the alert fires, the discount shipped and the money moved. Decision authority changes the outcome, not the report.
Decionis vs alerting toolsPolicy engines like Open Policy Agent evaluate rules when asked — and leave wiring the ask, the enforcement, and the evidence to you. Decision authority couples the rule to the moment of execution and signs what it decided.
Decionis vs Open Policy AgentIsolation layers limit how much damage code can do while it runs. That bounds the blast radius; it doesn't decide whether the action should happen. The two compose — the decision comes first.
Decionis vs runtime layersAgents propose; Decionis decides. Tool calls, purchases, and deploys get a verdict before they run.
Discounts, price changes, and orders clear a margin decision before the order commits.
Shield gives your subscriptions and AI assistants a personal spending permission step.