Deixic classifies every change against the authority you grant. Policy is checked before a credential is resolved, and a named person approves sensitive changes, with a reason, in the app or Slack.
coding-agent · Platform
Observe runs. Change runs within the policy you grant. Sensitive waits for a named approver. Outside your authority is denied or sent to you as a decision.
Policy is checked before anything runs: allow it, deny it, or require approval.
The approver gives a reason. An approval binds to the exact arguments, policy version, and requester, and any change means Dex asks again.
In the app queue, or in the Slack thread. Each Slack approve button works once, for the named approver.
Signed organization policy for Deixic Code; publishing a policy with the kill switch set blocks the actions that policy gates.
Each governed action leaves a signed receipt with the policy, approval, request, and result in a tamper-evident audit log.
Use it with Dex on every surface, alongside company context that existing agents read over MCP.