Smart Shikka Policy Decision API Preview
dry_run
preview_only
decision_only
persistence_off
execution_off
payment_off
What is the Policy Decision API?
The Policy Decision API is the central policy decision layer for Smart Shikka Core. Before any tool action
is approved, planned, or executed, the request must pass through this decision engine. It determines whether
the action is allowed as preview, requires owner approval, requires an execution plan, requires adapter
selection, requires server-side key configuration, or is critically blocked. In this preview, all decisions
are computed but never persisted and never unlock real execution.
Decision Matrix (9 outcomes)
| Outcome | Status |
|---|
| allow_preview | Allowed |
| block_preview_only | Gated |
| requires_owner_approval | Gated |
| requires_execution_plan | Gated |
| requires_adapter_selection | Gated |
| requires_server_side_key | Gated |
| requires_audit | Gated |
| requires_rate_limit | Gated |
| critical_block | Blocked |
Request Examples
Email validation preview
Decision: allow_preview (read-only validation, no network)
Phone OTP send attempt
Decision: requires_owner_approval + requires_execution_plan + requires_audit
WhatsApp send attempt
Decision: requires_owner_approval + requires_execution_plan + requires_adapter_selection
Live research attempt
Decision: requires_owner_approval + requires_execution_plan (Python disabled)
Payment mutation attempt
Decision: critical_block (payment cannot proceed)
Anshika agent tool request
Decision: preview decision only (no Anshika API call)
Decision Receipt Preview
In preview mode, decision receipts are generated as static previews only. They are not persisted,
not signed, and not valid for execution. Future: persistent decision store with signed receipts.
Safety Guarantees
- No policy decision persistence
- No receipt signing
- No real execution
- No adapter execution or SDK
- No external API call
- No Python execution or subprocess
- No send (email, SMS, OTP, WhatsApp, Telegram, notification)
- No write (database, file, audit, memory)
- No payment or customer mutation
- No key material exposed
Future Unlock Plan
- Persistent decision store
- Signed decision receipts
- Role-based policy rules
- Adapter allowlist integration
- Approval workflow integration
- Safe execution plan integration
- Audit store integration
Policy decisions feed into the Tool Approval Workflow,
Safe Execution Plan, and
Tool Adapter Registry.
Version 2.1.2.0.266 ·
Phase: policy_decision_api_preview ·
PR: #267 ·
Smart Shikka