When do I use DQL vs Sentinel?
Use DQL when the question is: does this purchase or transfer match the mandate on five axes? Use Sentinel when the question is: may this irreversible exit run, cheaply, now?
Answers
DQL vs Sentinel
DQL evaluates spend-shaped decisions across five axes and returns ALLOW, BLOCK, or REVIEW. Sentinel is a lower-cost, single-verdict checkpoint for irreversible actions and returns ALLOW, BLOCK, or UNCERTAIN.
The two surfaces
DQL — POST https://dql.thoughtproof.ai/dql/verify. Five-axis score: intent, scope, risk, consistency, reversibility. Aggregate ALLOW / BLOCK / REVIEW. Spend-shaped decisions (checkout, booking, a cap). $0.05 per live verify. Stripe trial, packs, PAYG, or x402 USDC on Base.
Sentinel — POST https://sentinel.thoughtproof.ai/sentinel/verify. Single-verdict pre-execution exit: ALLOW / BLOCK / UNCERTAIN. Fail-closed on BLOCK and UNCERTAIN. Irreversible steps you can afford to call often (ship, delete, send-to-prod). Checkpoint or standard cascade. API key or x402.
On the MCP, verify_decision routes: spend language → DQL; high-blast exit without spend language → Sentinel; unsure → DQL.
RV and PLV are not on this path.
Use DQL when the question is: does this purchase or transfer match the mandate on five axes?
Use Sentinel when the question is: may this irreversible exit run, cheaply, now?
execute on the MCP is true only if the chosen surface returns native ALLOW.
Axis by axis
| Axis | DQL | Sentinel |
|---|---|---|
| Endpoint | POST https://dql.thoughtproof.ai/dql/verify |
POST https://sentinel.thoughtproof.ai/sentinel/verify |
| Verdicts | ALLOW / BLOCK / REVIEW | ALLOW / BLOCK / UNCERTAIN |
| What it scores | Five axes: intent, scope, risk, consistency, reversibility | Single-verdict exit check |
| Use when | Purchase or transfer vs a mandate | Cheap check before ship / delete / send-to-prod |
| Price | $0.05 per live verify (Stripe trial, packs, PAYG, or x402 USDC on Base) | Checkpoint or standard cascade; API key or x402 |
| MCP route | spend / checkout / booking / cap language | high-blast exit without spend language |
| Not this path | RV, PLV | RV, PLV |
Follow-ups
How does verify_decision route between DQL and Sentinel?
Spend language → DQL. High-blast exit without spend language → Sentinel. Unsure → DQL.
Are RV and PLV on this path?
No. RV and PLV are not on this path.
When is execute true on the MCP?
execute on the MCP is true only if the chosen surface returns native ALLOW.