Decionis Commerce Gate

Commerce Gate for Drupal helps store owners inspect their own history and review commerce policy decisions in Shadow Mode. Start locally before connecting an account.

Revision 2 public beta. Local Store X-ray and the existing Shadow journey are available. Enforcement trials, publishing tuned limits, billing contact confirmation and workspace ownership claims are not yet available. The package includes these controls for a later service rollout. This beta is not covered by Drupal's security advisory policy.

Features

• Store X-ray: scan 30–365 days of local orders, refunds and promotions without sending data off the site. Per-currency results show margin estimates, cumulative refunded payments, promotion stacking, observed outside refunds and cost coverage. Results are unsigned estimates; refund totals do not reconstruct individual partial-refund events.
• Costs and limits: add variation costs, map an existing cost field or import a CSV. Review suggested limits with their supporting observations. Saved limits drive the local X-ray and sandbox. Connected publication shows a confirmed policy version only after the service accepts it; until then, the interface says “Not yet published.” Publication is unavailable during the initial beta rollout.
• Shadow Mode: queue checks locally for evaluation after the response or through cron. The Decisions page shows reasons and effective action modes, and warns when pending work has waited more than an hour. Available signed Decision Dossiers have inline verification and full-payload download. Pending, incomplete or invalid evidence is never presented as verified.
• Enforcement controls: permission-checked confirmation applies to one action. Activation requires the service and a current workspace entitlement. Trial controls and expiry handling are included but remain unavailable during the initial rollout. When enforcement is available, held refunds and price changes use an exact-action, single-use grant; changed, expired or already-run proposals are refused.
• Review: per-currency reports, CSV exports, browser printing, an optional weekly Drupal-mail digest and a setup checklist. Aggregate reports are unsigned; the checklist is not a safety certification.

Post-Installation

Use the downloads page for verified release availability, Composer instructions, the official ZIP, checksum, provenance and Getting Started guide. Enable decionis_commerce, apply the included recipe, add variation costs and open /admin/commerce/decionis/x-ray. Review local findings before connecting. Schedule Drush or protected-URL cron for deferred checks, replay and optional digests. The packaged README contains installation, failure-policy and recovery steps.

Scope and current limits

The module covers supported Drupal refund forms, variation price validation, promotions and coupons, order review and placement, and manual Commerce Stock writes. Custom code that skips these hooks or writes directly to the database can bypass checks. Refunds made outside Drupal bypass its preflight; later visibility requires a supported integration to record the refund on the matching Drupal payment.

Fincra Support confirmed on 4 November 2026 that its refund function covers underpayments (the full amount received) and overpayments (the excess). Other refund requests require a separate customer payout outside Drupal. This module does not execute those payouts, and they are not automatically reflected as Drupal refunds. Fincra stores should begin with orders, prices and promotions. Fincra currently requires Drupal 10 and the three packaged compatibility patches.

Optional AgentSafe setup can hold a supported payment key under root or a separate service user. Installation remains a Drush/host operation with readiness and recovery checks. A service running under Drupal's own account is a weaker boundary. The local sandbox uses rolled-back synthetic records and is not production evidence.

Data and service availability

Local X-ray and limit drafting send nothing. Connection sends business name, billing email, site URL and consent for provisioning. Remote policy requests exclude customer names, email addresses, postal addresses, coupon codes and payment details. Credentials are excluded from configuration exports and logs.

Connected historical replay is metered against the workspace's governed-action allowance, even in Shadow Mode. The local Store X-ray is free and uses none of that allowance. Review Build pricing before connecting or sending a large history. Connected features require the deployed Decionis services. Drupal's optional digest uses its own mail setup.

Additional Requirements

Drupal 10.3+ or 11; Drupal Commerce 3.3.13+ or Commerce 2.41+ on Drupal 10; PHP 8.1+ with curl and sodium (PHP 8.3+ for Drupal 11); the Key module; and separately scheduled Drush or protected-URL cron. Earlier Commerce versions with the October 2026 security advisories are excluded.

License: GPL-2.0-or-later. The separately installed decionis/php-client dependency is Apache-2.0. Source is available on DrupalCode and the GitHub mirror. Contact Decionis for service access and support.