What it is
Action trust layer
Wrap critical actions once, then enforce approvals, SoD, and audit on every click or API call.
React SDK
REST API
Idempotent
Add approvals, separation-of-duties, and audit trails to any button or API call — without rebuilding your app.
import { TrustButton } from "@trustlayer/react";
<TrustButton
resource="invoice:123"
action="approve"
policy="four_eyes_v1"
>
Approve
</TrustButton>
This walkthrough runs in-browser only. No backend calls are made on this page.
Wrap critical actions once, then enforce approvals, SoD, and audit on every click or API call.
Policy evaluates actor, resource, and context, then returns an enforceable UI decision.
Keep product velocity while adding governance that scales across human and AI initiated actions.
Require independent review before payouts, refunds, and role changes.
Gate AI write actions by confidence, tenant policy, and approver context.
Prevent critical ops from shipping without visible human authorization.
Use these with your running backend to validate real behavior.
curl -sS "$SERVICE_URL/v1/actions?resource=invoice:123&action=approve" \
-H "x-api-key: {API_KEY}" \
-H "Authorization: Bearer $TRUST_USER_TOKEN"import { TrustButton } from "@trustlayer/react";
<TrustButton resource="invoice:123" action="approve">
Approve
</TrustButton>Initial setup stores only the user and action identifiers required for approvals.
Multiple distinct approvers must approve before execution, and the requester is excluded.
Every decision includes a reason so UI and logs can explain why an action was allowed or blocked.
Start small. Upgrade when governance becomes core.
Get the SDK + managed Trust API when we open the beta.
Requests are stored in the TrustLayer leads database table.
Confirmation email is not automatic yet; alerts are sent only when SMTP/Slack is configured.