Same install everywhere we ship: GitHub Action, LangChain (Python & JS), Azure API Management, Slack, Shopify. The gate observes, records a signed Decision Dossier, and never changes caller behaviour β until you decide to enforce. One-line change to flip, reversible without uninstalling.
You don't have to wire every surface β start with the one whose audit you'd be asked about first. Tabs below swap the install snippet to that surface verbatim.
Installs with no code. The Decionis app sits beside Slack approvals and records a Decision Dossier for every routed request.
1. Install Decionis from the Slack Marketplace.
2. /decionis β "Connect a workflow" β pick refund_approval (or any of the starter packs).
3. The app runs in observation mode out of the box: every Slack approval still
flows the same way, plus a signed Decision Dossier is recorded alongside it.Every gated call produces a signed Decision Dossier. Nothing changes for callers.
App Home shows the verdict distribution for the last 7 / 30 days per workflow. Every dossier links to the public verify URL.
/verify/decision-dossiers/<id>.One-line change. Reversible without uninstalling.
1. /decionis β "Workflows" β open the workflow you started in shadow.
2. Toggle "Enforcement" β On. Verdicts are now ALSO posted in-thread as
allow / block / escalate buttons that act on the underlying system.
3. Reversible: toggle Enforcement β Off any time to return to observation.Same dossier id, same verify URL, same audit log β the only difference is that blocked verdicts now actually hold the action. If a real workflow regresses, swap back to shadow: the rollback is the same one-line edit, in reverse.
Every dossier ID you record in shadow opens to a public verification page and unfurls with the OG verdict card in Slack / Teams / LinkedIn. Use them in the rollout review packet β the same signed artifact is the proof your CFO, your security reviewer, and your customer's auditor all want.