Decionis
Open source

What runs at your boundary is open source. The authority is Decionis.

You can read, run and change everything that holds an action at your boundary: AgentSafe, the specification it implements and the vectors that test it. What decides whether the action may run, binds that approval to the one action and signs the record is the Decionis Authority.

Where the line is

AgentSafe captures the intent and asks. Decionis decides, issues the grant and records the decision. AgentSafe then executes exactly what was authorized, once.

Open source

You run it, read it and change it.

  • Capture the exact intent an agent proposes
  • Hold the action at your boundary until there is a decision
  • Execute exactly the authorized request, once
  • Test locally, with stand-ins for the authority and for Presence
  • Guard MCP tools, and plug in your own effects through the adapter contract

Decionis Authority

We host it, or you run it in your cloud under license.

  • Decide whether that exact intent is authorized under your production policy
  • Issue a single-use execution grant bound to it
  • Claim the grant atomically, immediately before the action runs
  • Confirm a person is present when your policy needs one
  • Keep your policy versions, tenancy and roles
  • Sign the Decision Dossier and retain the evidence

The open-source projects

AgentSafe

Apache-2.0

The runtime at your boundary. Point an agent at it instead of the service: it captures each consequential request, asks Decionis, and forwards exactly that request once, holds it for a person or refuses it. The Agent-Safe Intent specification and its conformance vectors live in the same repository.

Repository On decionis.ai

Steward

Apache-2.0

One reviewable surface over an account portfolio for customer-operations, risk and revenue teams. Every review an operator makes goes to Decionis, which makes, records and executes the decision.

Repository On decionis.ai

Govern

Apache-2.0

One Decionis verdict before a CI step runs, such as a production deploy: a GitHub Action, and the same binary for GitLab CI and Jenkins.

Repository On decionis.ai

Also in public repositories

Every SDK and adapter, with the license it states and whether its source is public, is on decionis.ai/sdks .

Releases you can check

AgentSafe v0.3.5

  • A CycloneDX SBOM and signed build provenance with the release
  • SHA256SUMS for every release file
  • A Sigstore-signed release tag
  • SLSA provenance on its npm packages
  • The OpenSSF Best Practices passing badge

The v0.3.5 release

Steward v0.3.0

  • A CycloneDX SBOM and signed provenance with the release
  • A container image you can check with gh attestation verify

The v0.3.0 release

Run the authority in your own cloud

The Decionis Authority is commercial software wherever it runs. We host it on the plans on the pricing page, or you run it in your own cluster from the versioned Helm chart, under a commercial license.