ALLOW
This exact action is authorized now.
Execute once and preserve the decision ID.
Loading…
Shield developer preview
Let your app ask before it spends.
Add user-controlled spending permissions to apps and AI agents with a few lines of code.
ShieldKit 0.1.0 is public. npm artifacts are verified before every release.
first-decision.tsSANDBOX · no real money
$ npm install @decionis/shield
import { ShieldClient } from "@decionis/shield";
const shield = new ShieldClient(); // sandbox by default
const decision = await shield.authorize({
amount: 89,
currency: "USD",
purpose: "Book hotel",
merchant: "Hilton"
});
if (decision.allowed) await execute();ALLOWASKBLOCK
One abstraction
Your app wants to spend. Shield decides whether it has permission.
No policy graphs, signature plumbing, or enterprise organization model is required for first success.
ASK
The user must approve.
Hold. Execute only after a later ALLOW.
BLOCK
The action is not authorized.
Stop. Do not execute.
Handle ASK correctly
Approval is a hold, never a soft allow.
Shield orchestrates Presence when the user's rules require human approval. Your application waits for a final ALLOW bound to the same action.
switch (decision.verdict) {
case "ALLOW":
await execute();
break;
case "ASK": {
const final = await shield.requestApproval(decision.decisionId);
if (final.verdict === "ALLOW") await execute();
break;
}
case "BLOCK":
await cancel();
}Deterministic sandbox
Understand Shield from one command.
npx @decionis/shield-demo --allEvery fixture is labelled sandbox evidence, replays deterministically, and cannot authorize real execution.
Normal purchaseALLOW
Purchase above automatic limitASK
Subscription below thresholdALLOW
Subscription price increaseASK
Unknown autonomous agentBLOCK
Agent exceeds weekly allowanceBLOCK
Expired spending permissionBLOCK
Choose your surface
TypeScript
@decionis/shieldNode.js, server agents, and browser-safe sandbox.
Swift
ShieldKitiOS and macOS with native async/await types.
REST
POST /v1/shield/authorizeOne contract for any trusted backend.
MCP
shield.request_purchaseConsumer-friendly tools for agent runtimes.
Product hierarchy
- Decionis Protocol
- Enterprise execution authority.
- Presence
- Human authorization and verification.
- Shield
- Consumer, app, and agent spending authority.
Enforcement boundary
Applications must request Shield authorization before executing the consequential action.
Shield deterministically controls Shield-integrated execution. Observed activity and sandbox simulations must be labelled as such. Shield does not universally intercept arbitrary card or bank transactions.
Build a Shield-compatible spender.
Start in sandbox, handle ASK correctly, inspect the dossier, then complete production identity and compatibility validation.