Before AI acts, Decionis decides.
AI agents open pull requests, trigger deploys, issue refunds, and change production state. Decionis sits between the moment something wants to act and the moment it does: every high-stakes action is checked against policy deterministically — same input, same verdict — and receives ALLOW, BLOCK, RESTRAIN, or ESCALATE in under 120 ms, sealed as a cryptographically signed Decision Dossier you can verify offline.
| Purpose / Domain | Repository / Package | Quick start | Links |
|---|---|---|---|
| CI/CD Action Gate — gate risky workflow steps: deploys, AI-generated PRs, Terraform applies | decionis/govern |
uses: decionis/govern@v1 |
Docs · Sandbox |
| Agent Tool Control (MCP) — a permission layer between LLM agents and their tools | decionis/mcp |
npx -y --package=@decionis/mcp decionis-mcp |
Docs · Sandbox |
| Presence SDKs (Go · Swift) — verify human presence before consequential actions execute | decionis/presence-go · decionis/presence-swift |
go get github.com/decionis/presence-go@v0.2.0Swift: add https://github.com/decionis/presence-swift at 0.2.0 |
Docs · Sandbox |
| Dossier Verification — independently verify any signed Decision Dossier | decionis/govern |
steps.<gate>.outputs.verify-url |
Docs · Sandbox |
| API Gateway Plugin — human verification at the edge, with no application code changes | decionis/kong-plugin-presence |
luarocks install kong-plugin-presence |
Docs · Sandbox |
| Reference Architecture — the whole pattern end to end, runnable: intent capture → verdict → human approval → safe execution | decionis/agent-safe-pipeline |
gh repo clone decionis/agent-safe-pipeline |
Architecture · Threat model |
🕹️ No account needed — run a live policy check in the Sandbox and watch a real verdict and signed dossier come back.
sequenceDiagram
autonumber
participant T as Intent / Trigger
participant E as Decionis Engine
participant H as Human approver (Presence)
participant X as Execution
T->>E: Propose action + context
Note over E: Policy check (deterministic)<br/>Gate 1 · State Admission<br/>Gate 2 · Execution Authority
alt Verdict ALLOW
E-->>X: Proceed with execution
else Verdict BLOCK
E-->>T: Halt, with machine-readable reasons
else Verdict RESTRAIN
E-->>T: Hold for human review before execution
else Verdict ESCALATE
E->>H: Request live human approval
H-->>E: Approve / deny
end
E-->>T: Signed Decision Dossier (Ed25519, verifiable offline)
- Intent / Trigger — a CI job step, an AI agent's tool call, or an API request declares what it wants to do before doing it.
- Decionis Engine (policy check) — the dual-gate engine evaluates the action deterministically: Gate 1 admits the claimed state, Gate 2 decides execution authority. Same input, same verdict, in under 120 ms.
- Verdict — ALLOW lets execution proceed, BLOCK halts it with reasons, RESTRAIN holds the action for human review, and ESCALATE routes to a live human check via Presence. The hosted API returns these as
APPROVE/REJECT/REQUIRE_REVIEWand the clients normalize them, so expect both spellings on the wire. - Signed Decision Dossier — every verdict ships as an Ed25519-signed, immutable audit record. Verify any dossier independently via its
verify-urlor the dossier verification page — no trust in us required.
🔏 What a Decision Dossier looks like
{
"dossier": "dsr_2026_9f2ka8",
"action": "deploy.production",
"verdict": "ALLOW",
"policy": "prod-deploy-gate@v3",
"gates": { "state_admission": "pass", "execution_authority": "pass" },
"latency_ms": 42,
"alg": "ed25519",
"sig": "kQ4vR…8zPw"
}- Contribute — read our contributing guide and open issues with the structured templates. We welcome bug reports, policy templates, connectors, and docs.
- Security — found a vulnerability? Don't open a public issue — see our security policy or email security@decionis.com.
- Policy Exchange — share and reuse community policy templates on the Policy Exchange.
- Talk to us — questions about the hosted platform or integrations: contact.
- We follow the Contributor Covenant Code of Conduct.
decionis.com · Docs · Integrations · Sandbox
Every high-stakes action asks permission — and receives a signed Decision Dossier.