Specter evaluates the rules in your active ruleset in order and returns one of three outcomes: ALLOW, REVIEW, or BLOCK. A BLOCK stops evaluation immediately, REVIEW outcomes accumulate, and if nothing matches the result is ALLOW. Signals go in and a decision comes out, in real time.

Rules can be condition (boolean logic over the transaction), backend (delegate to an external engine), backend_group (several backends together), or blacklist (block when a field matches a blocked value). You decide the order and the thresholds; Specter enforces them consistently on every transaction.

→ See how the decision engine works