https://decionis.com/_next/static/chunks/6361-5a53a5af675c41ad.js

1"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[6361],{37926:(e,o,t)=>{t.d(o,{MP:()=>n,fe:()=>d,z5:()=>h});let i=[{title:"Authority lives in documents, not in the execution path",body:"A policy that exists in a PDF, a spreadsheet or a Jira approval cannot stop the action it governs. By the time a human reads it, the order shipped, the payment cleared, the agent already called the tool."},{title:"Every system enforces its own rules, differently",body:"The same authority — who may spend what, on whose behalf, up to which limit — is re-implemented in the storefront, the ERP, the ITSM queue and the agent framework. Four implementations, four drift rates, no single answer."},{title:"Autonomy removed the human pause",body:"Approval workflows assumed a person between intent and execution. Agents close that gap to milliseconds, so the check has to move into the execution path itself or it does not happen at all."},{title:"After the fact, nobody can prove what was decided",body:"Logs record what happened. They do not record which policy was in force, which version, on what evidence, or why the action was permitted — which is exactly what an auditor, a regulator or an incident review asks for."}],n=[{token:"ALLOW",summary:"Authorized",body:"The action is within policy on the evidence presented. It executes, and the dossier records the authority it executed under."},{token:"ESCALATE",summary:"Needs approval or more info",body:"The action needs authority the requester does not hold, or evidence the request did not carry. It waits for whoever can supply it. When that is a person's approval, Presence, the escalation layer built into Decionis, verifies the approver for this exact action."},{token:"BLOCK",summary:"High risk or out of policy",body:"The action breaches policy or crosses a risk threshold. It does not execute, and the dossier records which rule stopped it and on what evidence."}],a=["Allow","Block","Require Approval","Throttle / Limit"],r=[{step:"Signals",body:"The proposed action plus the evidence around it — actor, amount, counterparty, cost basis, inventory, prior decisions — normalized into one contract regardless of which surface it arrived from."},{step:"Policy",body:"The rules in force at that instant, resolved from the policy graph and pinned by version, bundle hash and effective window so the decision is reproducible later."},{step:"Verdict",body:"A deterministic ALLOW, ESCALATE or BLOCK — the same signals against the same policy always produce the same verdict."},{step:"Action",body:"Execution proceeds, halts, or waits on an approver, and the signed Decision Dossier is written to the ledger either way."}],s=[{stage:"Detect",body:"A high-stakes action is proposed on some surface."},{stage:"Evaluate",body:"Signals are gathered and checked against the policy in force."},{stage:"Decide",body:"A deterministic verdict is issued — allow, escalate, or block."},{stage:"Execute",body:"The action proceeds, waits for authority, or is stopped."},{stage:"Record",body:"A signed Decision Dossier preserves what was decided and why."}],c=[{id:"github",name:"GitHub",doubt:"Is this a real system or a landing page?",proves:"Proof we are real.",href:"https://decionis.ai",body:"The govern Action and the Node SDK are public, and every Decision Dossier can be verified against our published JWKS without trusting our code."},{id:"sandbox",name:"Sandbox",doubt:"Does the protocol actually stop anything?",proves:"Proof the protocol works.",href:"/sandbox",body:"Try to overspend, violate policy, delete production, expose secrets or bypass approval, and watch the verdict come back. No account required."},{id:"policy-exchange",name:"Policy Exchange",doubt:"Can we express our own authority in it?",proves:"Proof people can build on it.",href:"https://decionis.ai/policy-exchange",body:"The policy packs the Decionis evaluator ships, each a versioned bundle of rules, shown rule by rule in the order the evaluator tries them."},{id:"connectors",name:"Connectors",doubt:"Can we actually deploy it where we work?",proves:"Proof it is deployable.",href:"/surfaces",body:"Every place Decionis becomes available — checkout, ERP, ITSM, agent tool calls — reached without rewriting the system it governs."}],d=[{id:"why",label:"Why Decionis",href:"/why-decionis",purpose:"The problem: authority lives in documents while AI executes in milliseconds.",layer:2}

1,{id:"how",label:"How it Works",href:"/how-it-works",purpose:"The protocol: signals in, deterministic verdict out, execution gated on it.",layer:3},{id:"choose",label:"What to Govern",href:"/what-to-govern",purpose:"Pick the kind of action you want a decision in front of.",layer:null},{id:"surfaces",label:"Surfaces",href:"/surfaces",purpose:"Where Decionis becomes available — four families, not 25 products.",layer:4},{id:"proof",label:"Proof",href:"/proof",purpose:"Four forms of evidence: GitHub, Sandbox, Policy Exchange, Connectors.",layer:5},{id:"developers",label:"Developers",href:"https://decionis.ai",purpose:"The public artifacts and the fastest path to a first verdict.",layer:null},{id:"pricing",label:"Pricing",href:"/pricing",purpose:"What it costs, once you know what it is.",layer:null}];function h(){return["## The thesis","","**".concat("Decionis decides what has authority to happen.","**"),"","Identity and security systems supply evidence; Decionis deterministically applies customer policy, binds an ALLOW or Presence approval to the exact execution, and records the observed outcome in a signed Decision Dossier.","","## The problem","","AI can now execute real-world actions, but enterprises still express authority in documents, approvals and disconnected systems.","",...i.map(e=>"- ".concat(e.title,". ").concat(e.body)),"","## The protocol","",r.map(e=>e.step).join(" -> "),"",...r.map(e=>"- ".concat(e.step,": ").concat(e.body)),"","Verdicts: ".concat(n.map(e=>"".concat(e.token," (").concat(e.summary,")")).join(", "),"."),"Actions: ".concat(a.join(", "),"."),"","## The decision lifecycle","",s.map(e=>e.stage).join(" -> "),"","## The proof","",...c.map(e=>"- ".concat(e.name,": ").concat(e.proves," ").concat(e.body)),""].join("\n")}},76361:(e,o,t)=>{t.d(o,{GY:()=>h,K6:()=>u,Q7:()=>i,b2:()=>d,pC:()=>y,v3:()=>m});let i=t(37926).MP,n=[{token:"AUTHORIZED",summary:"Executed under recorded authority",meaning:"The action was within policy on the evidence presented, and it ran. The dossier records the authority it executed under."},{token:"ESCALATE",summary:"Restrained and routed for human approval",meaning:"The action was held short of execution and referred to someone who holds the authority to permit it. The dossier records which rule escalated it, and to whom. It is not a refusal — the action can still proceed once approved."},{token:"BLOCKED",summary:"Refused outright",meaning:"The action breached policy or crossed a risk threshold and did not execute. Nobody is asked to approve it. The dossier records the rule that refused it and the evidence behind that refusal."},{token:"PENDING_MFA",summary:"Awaiting sign-off on a decisioning surface",meaning:"The action is paused while sign-off completes on a connected decisioning surface — Slack, Microsoft Teams, or Webex — by someone who holds the authority to approve it. It is an approval hold, not a re-authentication challenge answered by the requester. The action has neither executed nor been refused — the record is open, and resolves when that sign-off lands."}],a={RESTRAINED:"ESCALATE"},r=[{token:"APPROVE",summary:"Execution continues",meaning:"The wire spelling of the allow class on the decision route. The action is within policy on the evidence presented; execution continues, and the dossier records the authority it ran under."},{token:"ESCALATE",summary:"Held for a named approver",meaning:"The same word in every layer. The action is held short of execution and routed to a named person who holds the authority to permit it. It can still proceed once approved."},{token:"REJECT",summary:"Execution stops",meaning:"The wire spelling of the block class on the decision route. The action breached policy or crossed a risk threshold; it does not execute, and nobody is asked to approve it."},{token:"REVIEW",summary:"Queued for review",meaning:"The escalate class without a named approver yet — the decision is held in a queue, for example when no policy rule matched. Distinct from ESCALATE on the wire so the approval queue can tell routed holds from unrouted ones."}],s={APPROVE:"ALLOW",ESCALATE:"ESCALATE",REJECT:"BLOCK",REVIEW:"ESCALATE"},c={AUTHORIZED:"ALLOW",ESCALATE:"ESCALATE",PENDING_MFA:"ESCALATE",BLOCKED:"BLOCK"};function d(e){return c[e]}function h(e){let o=p(e);return n.some(e=>e.token===o)?o:a[o]}let l={PROCEED:"ALLOW",APPROVED:"ALLOW",HOLD:"ESCALATE",DELAY:"ESCALATE",DENY:"BLOCK",DENIED:"BLOCK",REJECTED:"BLOCK"};function p(e){return e.trim().toUpperCase().replace(/[\s-]+/g,"_")}function u(e){let o=p(e);if(i.some(e=>e.token===o))return o;let t=h(o);return t?c[t]:r.some(e=>e.token===o)?s[o]:l[o]}function y(e){var o;let t=h(e);return t?null==(o=n.find(e=>e.token===t))?void 0:o.summary:void 0}let m=n.map(e=>({dossier:e.token,dossierSummary:e.summary,dossierMeaning:e.meaning,protocol:c[e.token],caveat:"PENDING_MFA"===e.token?"No exact protocol equivalent: PENDING_MFA is an open state awaiting sign-off on a decisioning surface, not a decision the engine returned. ESCALATE is the closest judgement."

1:void 0}))}}]);