Layer 4 — The surfaces
A surface is not an integration and not a logo — it is a place where Decionis becomes available. There are 22 of them, and they group into four families, which is a great deal easier to remember than a catalogue.
For the engineers wiring agents and services to real systems. The protocol reached directly — from an agent's tool call, your own code, a pipeline, or plain HTTP. This is the shortest path from nothing to a first verdict.
Every tool call an agent makes can ask Decionis before it runs.
Every function in your own code can ask Decionis before it commits.
Every deployment can ask Decionis before it ships.
Every command in a terminal or a pipeline can ask Decionis before it executes.
Every system you already run can ask Decionis over plain HTTP.
Every automation step can ask Decionis before it fires.
For the systems of record that already run the business. The protocol reached from inside the platform where the action originates — checkout, ERP, CRM, HR — so the check happens in the execution path rather than beside it.
Every checkout can ask Decionis before the order is accepted.
Every listing, order and promotion can ask Decionis before it goes live.
Every vendor payment and purchase order can ask Decionis before it posts.
Every price change and order can ask Decionis before it reaches the buyer.
Every system of record can ask Decionis without changing how it runs.
Every payroll run and HR business process can ask Decionis before it commits.
Every headless checkout can ask Decionis before it captures payment.
Every Magento order can ask Decionis before it clears.
Every Flow, Apex and Agentforce action can ask Decionis before it fires.
For individuals holding authority over their own transactions. The same protocol, pointed at decisions a person makes for themselves rather than ones an enterprise makes at scale.
For anyone deciding whether this is real. The protocol reached in order to understand it — break it in a sandbox, fork someone else's policy, read the reference implementation.
Try to break the protocol — overspend, bypass approval, delete production — and watch it hold.
Fork a decision recipe someone else already runs instead of authoring policy from scratch.
Read the protocol schemas, policy packs, MCP samples and starter kits in the open.
Go from zero to a first verdict, then to a governed production surface.
Adding a surface does not add a policy engine. Authority is defined once and enforced everywhere, which is why the twentieth surface costs far less than the first.
Surfaces are where people encounter Decionis — Shield, the sandbox, the governance console, MCP, the GitHub Action.
Connectors are how systems reach the protocol — webhooks, Zapier, Make, n8n, Shopify, SAP, Salesforce.