What runs at your boundary is open source. The authority is Decionis.
You can read, run and change everything that holds an action at your boundary: AgentSafe, the specification it implements and the vectors that test it. What decides whether the action may run, binds that approval to the one action and signs the record is the Decionis Authority.
Where the line is
AgentSafe captures the intent and asks. Decionis decides, issues the grant and records the decision. AgentSafe then executes exactly what was authorized, once.
Open source
You run it, read it and change it.
Capture the exact intent an agent proposes
Hold the action at your boundary until there is a decision
Execute exactly the authorized request, once
Test locally, with stand-ins for the authority and for Presence
Guard MCP tools, and plug in your own effects through the adapter contract
Decionis Authority
We host it, or you run it in your cloud under license.
Decide whether that exact intent is authorized under your production policy
Issue a single-use execution grant bound to it
Claim the grant atomically, immediately before the action runs
Confirm a person is present when your policy needs one
Keep your policy versions, tenancy and roles
Sign the Decision Dossier and retain the evidence
The open-source projects
AgentSafe
Apache-2.0
The runtime at your boundary. Point an agent at it instead of the service: it captures each consequential request, asks Decionis, and forwards exactly that request once, holds it for a person or refuses it. The Agent-Safe Intent specification and its conformance vectors live in the same repository.
One reviewable surface over an account portfolio for customer-operations, risk and revenue teams. Every review an operator makes goes to Decionis, which makes, records and executes the decision.
The Decionis Authority is commercial software wherever it runs. We host it on the plans on the pricing page, or you run it in your own cluster from the versioned Helm chart, under a commercial license.