The TrigGuard protocol defines the contract for deterministic authorization decisions between AI systems and execution surfaces: vocabulary (PERMIT, DENY, SILENCE), enforcement semantics, and the DecisionRecord shape used across aligned products and tooling.

This package is governance and types only — not runtime evaluation, policy engines, or business logic. Those live elsewhere in the monorepo and conform to this contract.

Install

npm install @trigguard/protocol

(Requires the package to be published to the npm registry under the @trigguard scope; see docs/release/PROTOCOL_RELEASE.md.)

Until publish is configured, depend on the repo:

"@trigguard/protocol": "file:../packages/protocol"

or install from a Git URL / workspace as documented in the main TrigGuard repository.

Decision model

Decision	Meaning (high level)
PERMIT	Authorization to proceed under policy (subject to enforcement and deployment rules).
DENY	Action must not proceed as requested.
SILENCE	No authorization was issued; without authorization, execution cannot proceed (see `SILENCE_DEFINITION` export).

Policy-only layers may restrict emitted decisions to PERMIT / DENY; full protocol surfaces also use SILENCE where applicable.

Example import (TypeScript)

import {
  type Decision,
  type DecisionRecord,
  DECISION,
  DECISIONS,
  SILENCE_DEFINITION,
} from "@trigguard/protocol";

const d: Decision = "PERMIT";
const record: DecisionRecord = {
  decision: DECISION.PERMIT,
  enforcement: "EXECUTED",
  reason_code: "NO_POLICY_VIOLATION",
  timestamp: new Date().toISOString(),
};

There is no evaluate() in this package — evaluation lives in TrigGuard services and kernels. This package supplies types and canonical constants so callers and SDKs share one contract.

Build (maintainers / CI)

From packages/protocol:

npm install
npm run build

build runs sync-contract (when the full monorepo is present), tsc, and asset copy into dist/. Published tarballs are built via prepack / prepare before npm publish.

Repository

Canonical source: github.com/TrigGuard-AI/TrigGuard — packages/protocol/.

For installation paths and release tagging, see:

docs/developers/INSTALL_PROTOCOL.md
docs/release/PROTOCOL_RELEASE.md

Legacy note (snapshot)

src/contracts/decision_contract.json is kept in sync with core/contracts/decision_contract.json via npm run sync-contract in the monorepo. Do not edit kernel contracts from this README — follow governance and protocol integrity processes in the main repo.