Open-source runtimes, conformance specifications, SDKs and verification tools built on the Decionis execution-authority protocol.
AgentSafe · golden adversarial demo
PROVEN: 8 adversarial attempts, 0 unauthorized executions
Proposed action
wire.transfer
Execution binding mismatch
BLOCK
Every decision leaves a signed Decision Dossier you can verify offline.
Replay of a recorded run · synthetic agent, vendor and amounts
Install
Pick one. None of them needs an account.
Homebrew (macOS, Linux)
brew tap decionis/agent-safe https://github.com/decionis/agent-safe-pipeline && brew trust decionis/agent-safe && brew install agentsafeLinux installer
curl -fsSL https://raw.githubusercontent.com/decionis/agent-safe-pipeline/master/packaging/install.sh | shDocker
docker run --rm -e NODE_ENV= ghcr.io/decionis/agentsafe:0.2.5 testKubernetes (Helm)
helm install agentsafe oci://ghcr.io/decionis/charts/agentsafe --version 0.2.5 --namespace payments --set decionis.tenantId=<your organization id> --set upstream.service=payments --set upstream.port=8080It sends the same consequential requests directly, through the gateway in shadow, and through it in enforcement, at a synthetic target. Nothing real is called and nothing of yours is read.
agentsafe testExposure 6 of 6 adversarial actions reached the target directly, 6 of 6 in shadow, 0 of 6 under enforcement
Evidence 26 chained lines, verified
Verdict BOUNDARY HOLDS
✓ boundary testedProjects
Execution gateway for AI agents and APIs.
Sits in front of the service an agent calls. It captures each consequential request as an intent, asks the Decionis authority, and forwards exactly the authorized request once, holds it for a person, or refuses it.
Apache-2.0 · v0.3.5 · runtime 0.2.5
agentsafe testThe workflow gate for CI.
One Decionis verdict before a deploy, a migration or an infrastructure change runs, on GitHub Actions, GitLab CI, Jenkins or any runner. The command runs only on a claimed grant, and every run leaves a signed Decision Dossier.
Apache-2.0 · decionis/govern@v2 · binary 2.1.0
curl -fsSL https://decionis.com/govern/install.sh | shGoverned customer-operations review surface.
The operator workflow for reviewing customer and account decisions. Steward runs the review; Decionis keeps policy evaluation, execution grants, Decision Dossiers and the authoritative record.
Apache-2.0 · v0.3.0
docker run --rm -p 3000:3000 ghcr.io/decionis/steward:0.3.0Offline verification for Decision Dossiers and proof artifacts.
Checks a Decision Dossier's signature and binding against the published keys, on your machine, with no account.
@decionis/verify 0.4.0 · Apache-2.0
npx @decionis/verify --file dossier.json --jwks https://api.decionis.com/.well-known/decision-dossier-jwks.jsonOpen execution-intent conformance specification.
How an action is described before it is authorized, so the same intent means the same thing to every runtime that checks it.
agent-safe.intent/1
Versions and commands checked against each repository on 2026-09-25.
Build on it
Protocol reference
What an execution grant means, how it is claimed and finalized, and what a Decision Dossier proves are defined in the protocol reference, not on this site, so there is one definition to build against.