@decentrys/protect 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Decentrys Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,82 @@
+# @decentrys/protect
+
+Evidence-based on-chain risk assessment for wallets and dapps.
+
+> **Lack of evidence is not evidence of malice.**
+>
+> A contract deployed two hours ago by an anonymous wallet with no audit and
+> thin liquidity is *unknown*, not dangerous. Scoring those facts as risk
+> produces a system that protects incumbents and taxes every new project — a
+> gatekeeping product wearing a security product's clothes. Decentrys refuses
+> to do that, and there is no code path by which newness can raise a risk
+> level.
+
+## Install
+
+```bash
+npm install @decentrys/protect
+```
+
+## Use
+
+```ts
+import { Decentrys } from '@decentrys/protect';
+
+const decentrys = new Decentrys({ apiKey: 'dk_pub_live_...' });
+
+const { assessment, decision } = await decentrys.assessTransaction({
+  chain: 'ethereum',
+  from: userAddress,
+  to: contractAddress,
+  data: calldata,
+});
+
+assessment.riskLevel     // 'CAUTION'
+assessment.explanation   // why, in words you can show a user
+assessment.threatSignals // each with its evidence, confidence and hop distance
+assessment.facts         // observed, never accusatory
+decision.action          // what *your* policy says to do
+```
+
+## Two properties worth knowing
+
+**It never throws.** This runs between a user and a signing screen. A security
+service having a bad minute must not cost someone their transaction, so an
+unreachable Decentrys returns an assessment that says exactly that in its
+`unknowns` — never a reassuring result it did not earn.
+
+**It never blocks.** Decentrys returns intelligence; your policy decides. The
+default blocks only `KNOWN_MALICIOUS`, which requires analyst-verified
+evidence because it is the one output that accuses a third party.
+
+## Risk levels
+
+Seven, not safe/scam. `NO_CRITICAL_RISK_DETECTED` · `INFORMATIONAL` ·
+`CAUTION` · `ELEVATED_RISK` · `HIGH_RISK` · `CRITICAL_THREAT` ·
+`KNOWN_MALICIOUS`. Capabilities can reach `CAUTION`; only threat signals with
+evidence go past it.
+
+`historyStatus: 'LIMITED'` is the correct, expected state for anything
+recently deployed. It measures *our* coverage, never the subject's danger, and
+must not be rendered as a warning.
+
+## Browser
+
+Ships an ESM and an IIFE bundle with zero dependencies, for extensions and
+pages with a strict CSP: `@decentrys/protect/browser`, global
+`DecentrysProtect`.
+
+## The tests are part of the argument
+
+`src/classify.test.ts` encodes the cases that must never regress — including
+that a brand-new unaudited contract with an anonymous deployer is
+`INFORMATIONAL`, not a threat. They ship with the package. Read them.
+
+## Licence
+
+MIT © Decentrys Labs
+
+## Links
+
+- [decentrys.com](https://decentrys.com) · [SDK overview](https://decentrys.com/sdk) · [Developer API](https://decentrys.com/developers)
+- Source: [github.com/teamdecentrys-byte/Decentrys](https://github.com/teamdecentrys-byte/Decentrys)