Get access
Salanor · design partners 2026

Provenance you can
take to audit

Aegis by Salanor: provenance and liability coverage for AI agents.

When enterprises put agents into regulated workflows, someone has to keep the receipts. Aegis signs every action to an APS-1 ledger with policy and compliance exports. Aether adds risk intelligence on that ledger in 2027.

Already onboarded? Open Console in the header.

Aegis provenance pipeline · shipping 2026

Built so diligence teams can check the work

Shared primitives across Salanor products: provenance, open standards, and regulatory exports. Verify a published event without Salanor credentials.

  • BYOKCustomer-controlled keys

    Register Ed25519 public keys in Console. Sign with AWS KMS, GCP KMS, Vault, or agent-held keys. Salanor verifies; it does not hold your private key.

  • APS-1Open provenance standard

    Published JSON Schema + verifier. Export bundles use the same wire format.

  • 6+Regulatory export mappings

    SOC 2, EU AI Act, NIST AI RMF, HIPAA paths, FedRAMP target — control mapping in exports, not certification claims.

  • <1sTrace reconstruction

    Console rebuilds the signed causal chain interactively — click any step, view payload preview, open signed events.

  • 60sMerkle witness cadence

    witness:worker batches pending events every 60 seconds and publishes transparency log entries.

  • 2027Liability bridge (Aether)

    Future: differentially-private telemetry for underwriters on top of Aegis ledger.

From agent call to signed record

Four steps, no rewrite of your agent code.

01

Instrument once

Connect via n8n Workflow Bridge, TypeScript GovernanceBridge, Python/Go SDK, or direct APS-1 ingest. LangGraph and CrewAI guides in docs.

02

Sign & enforce

Policies evaluate before risky tools run. Events are Ed25519-signed with BYOK keys you control.

03

Ledger & witness

Hash-chained append-only storage. Merkle roots batched every 60s into a transparency log.

04

Audit & comply

Reconstruct traces interactively in Console. Download compliance ZIPs. Stream OTLP logs to Splunk, Datadog, or Sentinel.

Liability is what blocks production

What design partners say before they put agents in real workflows.

The gap isn't model safety. It's decision defensibility when an agent acts on a Tuesday in March.

Representative concern · regulated industries (design partner interviews)

We need cryptographically verifiable provenance before we scale autonomous workflows in regulated lines.

Representative concern · AI governance teams (design partner interviews)

We did not start Salanor because AI is exciting. We started it because the wrong people will pay if no one builds the receipts.

Regulatory outputs, not slide decks

Export bundles include control mapping for common frameworks. Formal certification is on the roadmap — see platform status.

SOC 2Export mapping
EU AI ActArt. 12+ mapping
NIST AI RMFBundle exports
HIPAABYOC path

Talk to the founders

We are onboarding a small set of design partners. Technical diligence calls are available weekly.