Edge deployment
Hash-verified .dmb bundle. ~20 ms cold start. No database.
Publish a ruleset to the edge as a hash-verified decision bundle (.dmb). The edge binary loads it, re-verifies the content hash, and serves decisions with no database, no pool, and no outbound network. If verification fails, the binary exits — an orchestrator sees a failed deploy, not a pod silently serving wrong rules. Crypto signing is residual (distribution layer).
Published figures
From the product binaries under documented conditions — not customer averages.
947 B
Hash-verified decision bundle
No database on the edge path
~20 ms
Cold start to first decision
Edge binary, debug build, Postgres stopped
1.5 MB
Verified wasm32 engine
Six-crate dependency tree
How the hash-verified bundle works
Build freezes a hash-verified .dmb
POST /api/manager/versions/:id/bundle (or dm-bundle) emits a decisionmanager.bundle.v1 document: resolved definition, app key, environment, version, engine budgets, and a SHA-256 content_hash over the canonical definition. That is integrity — not an Ed25519 product signature (residual / distribution layer).
Edge binary verifies before binding
decision-edge reads the .dmb from disk or stdin, recomputes the content hash, compiles once, then binds. Hash mismatch or unloadable definition → process exits before accept. Orchestrator sees a failed deploy, not traffic on wrong rules.
Every response carries the hash
Every /decide response includes content_hash in the envelope. Downstream systems can prove which logic produced the decision — without trusting a free-floating version number.
Supported runtimes
AWS Lambda
wasm32 layer or container
Cloudflare Workers
WASM module binding
Google Cloud Run
wasm32 sidecar
Kubernetes sidecar
Wasmtime runtime
V8 isolates
Deno Deploy, etc.
Native Linux / macOS
Direct wasm32 binary
Hosted plans are EU-resident (Frankfurt default). Edge deployment to your own runtime is account-scoped — we don't operate a global multi-region mesh.
Edge deployment on your account
Business and Custom plans include portable edge/WASM deployment to your own Lambda, Workers, or Cloud Run. Start a trial to explore.