Skip to main content

ezrules

Website & live demo · Documentation · Blog

Open-source transaction monitoring for teams that need clear rule control, auditability, and fast operational changes.

ezrules gives fraud, risk, and compliance administrators a web workspace for managing decision rules without turning every policy update into an engineering project. Rules can be drafted, tested, reviewed, promoted, paused, rolled out, and audited from one place, while your systems keep sending events to a simple evaluation API.

30-day ezrules transaction volume dashboard

Why Teams Use It

  • Own the rule lifecycle. Create rules, keep drafts separate from live logic, pause risky rules, restore older revisions, and promote changes deliberately.
  • See what happened. Review canonical served decisions, the outcome returned, every rule that fired, and the exact event version those rules used.
  • Improve rules with evidence. Use labels, precision/recall reports, backtests, shadow rules, and percentage rollouts before changing production decisions.
  • Run with admin controls. Manage roles, permissions, API keys, outcomes, user lists, field types, traffic persistence, and audit history inside the product.
  • Self-host it. Run the full stack yourself with PostgreSQL, Redis, FastAPI, Celery, and the web UI.

Demo

The demo stack starts with sample rules, outcomes, labels, and evaluated events.

git clone https://github.com/sofeikov/ezrules.git
cd ezrules
docker compose -f docker-compose.demo.yml up --build

Then open:

Service URL
Web UI http://localhost:4200
API http://localhost:8888
Mail UI http://localhost:8025

Login with admin@example.com / admin.

To stop and remove the demo data:

docker compose -f docker-compose.demo.yml down -v

Trace A Decision Field By Field

Hover across triggered rules to see referenced payload fields

Product Tour

Manage Live Rules

Create and maintain the rule set from a reviewable UI. Active rules, drafts, ordering, lifecycle actions, and rule status are visible in one place.

Rules list

Monitor 30-Day Activity

Switch the dashboard to the 30-day window to review sustained traffic and outcome patterns instead of a single point-in-time snapshot.

30-day outcome trends

Inspect Rule Logic And Performance

Each rule has its own detail view with source logic, test payloads, historical revisions, backtesting, hit/outcome performance, and recent transactions that triggered the rule.

30-day rule performance chart

Review Tested Events

The Tested Events view connects decisions back to the raw payload, triggered rules, labels, resolved outcomes, and nearby entity relationships. Referenced fields are highlighted so an admin can see why a rule fired, while the event graph shows related traffic through shared users, cards, devices, merchants, and other configured entities.

Tested event payload with referenced fields highlighted

Tested Events page showing an expanded event graph

Expand Event Relationships

Click an entity node in the graph to expand nearby transactions that share that customer, account, card, device, merchant, or another configured entity.

Graph entity expansion from one event to connected transactions

Measure Rule Quality

When events are labeled, ezrules can compare outcomes to ground truth and rank rules by precision, recall, F1, true positives, false positives, and false negatives.

Rule quality report

Validate Candidate Changes Safely

Use shadow mode when you want observe-only comparison, and use rollouts when a candidate rule should serve a controlled share of live traffic.

Shadow comparison

Rollout comparison

How It Fits Into Your System

Your application sends an event to ezrules, and ezrules returns the resolved outcome.

curl -X POST http://localhost:8888/api/v2/evaluate \
  -H "Content-Type: application/json" \
  -H "X-API-Key: <api-key>" \
  -d '{
    "transaction_id": "txn_123",
    "effective_at": "2026-04-23T12:00:00Z",
    "event_data": {
      "amount": 875.50,
      "currency": "EUR",
      "customer_country": "US",
      "shipping_country": "MX",
      "has_3ds": 0
    }
  }'

The result is stored for review in the UI, including the winning outcome and the rules that contributed to the decision.

Core Workflows

  • Rule authoring: write rule logic with validation, observed field references, configured outcomes, and list references.
  • Event testing: dry-run JSON events against the active rule set without storing them in Tested Events or analytics.
  • Shadow deployment: observe what a rule would do on live traffic without changing production outcomes.
  • Rule rollouts: send a stable percentage of traffic through a candidate rule before full promotion.
  • Backtesting: compare proposed logic against historical events before release.
  • Graph investigation: inspect connected events through configured entity links and use graph-derived stats inside rule logic.
  • Labeling and quality reports: upload or assign labels, then measure how rules perform against known outcomes.
  • Audit and access control: keep change history and separate admin, editor, and read-only responsibilities.

Documentation

The documentation site is also available at ezrules.readthedocs.io. Product articles and walkthroughs live on the ezrules blog.

Development

For contributors, the project uses Python 3.12, uv, FastAPI, SQLAlchemy, Celery, PostgreSQL, Angular, Tailwind CSS, and Playwright.

uv sync
uv run poe check

Frontend dependencies live in ezrules/frontend/.

cd ezrules/frontend
npm install
npm start

See docs/contributing.md for contribution guidance.

License

Apache License 2.0. See LICENSE.

Metadata

Release files for ezrules 1.26.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for ezrules 1.26.0
File Size Uploaded Provenance
ezrules-1.26.0.tar.gz 8.5 MB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for ezrules 1.26.0
File Interpreter ABI Platform
ezrules-1.26.0-py3-none-any.whl Python 3 none any Details

Total release size: 9.2 MB

Release files / ezrules-1.26.0.tar.gz

Download URL ezrules-1.26.0.tar.gz
Size 8.5 MB
Tags Source
SHA-256 checksum
How to use checksums
9cb13f560a7dbd9df86bdce3e83b8f7961577865c49b7f6a467d3e042bb2d55e
BLAKE2b-256 checksum
How to use checksums
f2305986c43b53cdd0759a0c5953b06fd2d0baa2e594ae9122f61c4194f78174
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via uv/0.11.26 {"installer":{"name":"uv","version":"0.11.26","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Release files / ezrules-1.26.0-py3-none-any.whl

Download URL ezrules-1.26.0-py3-none-any.whl
Size 669.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
422ca160799a7c8b4f6a4da6c9d7de1b92016e12082e48ff7e7154597cf40d2c
BLAKE2b-256 checksum
How to use checksums
39f226d80b31874f70422e8e3b74f031f814c945b9b45cc45b19cf4676a549f5
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via uv/0.11.26 {"installer":{"name":"uv","version":"0.11.26","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Security for ezrules 1.26.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Release history Release notifications | RSS feed

This release

1.26.0 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page