Curated CAP source you build and deploy into your own subaccount with SAP's documented MTA flow. No Decionis account is needed to download; activation uses your workspace's org API key after installation.
Checksum + SBOM ship today; a detached Ed25519 signature joins them once the dedicated artifact-signing key is provisioned (manifest.signed tracks it honestly).
shasum -a 256 -c the published checksum. manifest.json records the same sha256 and whether a detached Ed25519 signature is published for this release; SBOM.json is the dependency bill of materials.
Extract, cf login to your Cloud Foundry subaccount, then mbt build — the descriptor runs npm install and cds build --production, so the artifact that deploys is compiled by your own toolchain.
cf deploy mta_archives/decionis-sap-btp-governed-execution_<version>.mtar creates and binds the XSUAA, Destination, and Event Mesh services declared in mta.yaml.
DECIONIS_PROTOCOL_URL + DECIONIS_PROTOCOL_API_KEY + DECIONIS_SAP_ORG_ID outbound to the protocol; a BTP Destination (DECIONIS_SAP_DESTINATION_NAME) for S/4HANA write-back — tokens minted at runtime, never stored; a generated DECIONIS_EVENT_MESH_WEBHOOK_SECRET inbound. Full reference: docs/runtime-config.md inside the kit.
Load a policy pack in the shipped policy-setup UI, send a governed change (the primary demo is a purchase-order change over $50,000), and confirm the dossier fields written back to the document.
The full administrator guide ships inside the kit as INSTALL.md, alongside docs/runtime-config.md for every credential and configuration value.