Register Ed25519 public keys in Console. Sign with AWS KMS, GCP KMS, Vault, or agent-held keys. Salanor verifies; it does not hold your private key.
Aegis live for design partners
Provenance you can
take to audit
Aegis by Salanor: provenance and liability coverage for AI agents.
When enterprises put agents into regulated workflows, someone has to keep the receipts. Aegis signs every action to an APS-1 ledger with policy and compliance exports. Aether is our research program for risk intelligence on that ledger.
Already onboarded? Open Console in the header.
Aegis provenance pipeline
Platform
Built so diligence teams can check the work
Shared primitives across Salanor products: provenance, open standards, and regulatory exports. Verify a published event without Salanor credentials.
BYOKCustomer-controlled keys APS-1Open provenance standard Published JSON Schema + verifier. Export bundles use the same wire format.
2+4Compliance frameworks SOC 2 and EU AI Act mapping ship in export ZIPs today. NIST AI RMF, HIPAA, FedRAMP, ISO 42001 are on the roadmap. Evidence mapping only, not certification claims.
<1sTrace reconstruction Console rebuilds the signed causal chain interactively: click any step, view payload preview, open signed events.
60sMerkle witness cadence witness:worker batches pending events every 60 seconds and publishes transparency log entries.
PreviewLiability bridge (Aether) Research program: risk telemetry for underwriters, built on the same Aegis ledger.
Products
Aegis now. Aether in research.
Aegis by Salanor is live for design partners. Aether is a separate research program on the same ledger, not the focus of this quarter.
How it works
From agent call to signed record
Four steps, no rewrite of your agent code.
01
Instrument once
Connect via n8n Workflow Bridge, TypeScript GovernanceBridge, Python/Go SDK, or direct APS-1 ingest. LangGraph and CrewAI guides in docs.
02
Sign & enforce
Policies evaluate before risky tools run. Events are Ed25519-signed with BYOK keys you control.
03
Ledger & witness
Hash-chained append-only storage. Merkle roots batched every 60s into a transparency log.
04
Audit & comply
Reconstruct traces interactively in Console. Download compliance ZIPs. Stream OTLP logs to Splunk, Datadog, or Sentinel.
Why now
Liability is what blocks production
What design partners say before they put agents in real workflows.
“The gap isn't model safety. It's decision defensibility when an agent acts on a Tuesday in March.”
Representative concern · regulated industries (design partner interviews)
“We need cryptographically verifiable provenance before we scale autonomous workflows in regulated lines.”
Representative concern · AI governance teams (design partner interviews)
“We did not start Salanor because AI is exciting. We started it because the wrong people will pay if no one builds the receipts.”
Compliance
Regulatory outputs, not slide decks
Export bundles include control mapping for frameworks we support today. Additional frameworks are on the roadmap. Formal certification is separate. See platform status.
Available in exports today
SOC 2Control mapping in export ZIPs
EU AI ActArt. 12+ mapping in exports
Roadmap
NIST AI RMFRoadmap
HIPAABYOC path
FedRAMPArchitecture path
ISO 42001Roadmap
Talk to the founders
We are onboarding a small set of design partners. Technical diligence calls are available weekly.