Salanor
Get access
Salanor home
Provenance & AuditEarly access

Signed provenance for every agent action

Verifiable decision record for automated actions — Aegis by Salanor.

Cryptographically signed, append-only records. One SDK, no changes to agent logic. Built for teams that need evidence before they scale autonomy.

Admissibility depends on jurisdiction and counsel. Aegis supports evidentiary workflows; it does not guarantee court outcomes.

Aegis is the managed control plane for APS-1 events: ingest, policy, human approvals, witness batches, transparency proofs, and compliance exports, scoped per organization.

View pricing →ContactView on GitHub

Platform

Where Aegis sits

Salanor
Platform

Provenance, identity, and liability coverage for production agent systems.

AegisEarly access
Provenance & audit

Signed APS-1 ledger, policy engine, human approvals, compliance exports.

APS-1
Open standard

Event format and verifier CLI. Auditable without Salanor online.

Capabilities

What Aegis delivers

  • <5msPolicy p50

    Median policy latency

    Block-before-call proxy path

  • RFC 6962Transparency

    Public tamper-evident log

    External verifier, no Salanor trust

  • BYOKSigning

    You hold the signing keys

    AWS KMS, GCP KMS, Vault

  • OTelSIEM export

    OpenTelemetry to your stack

    Splunk, Datadog, Sentinel

Feature set

Shipped scope

  • APS-1 open standard with Ed25519 signed events
  • BYOK: register customer public keys + optional AWS/GCP KMS sign
  • Hash-chained append-only ledger with Merkle witness batches
  • Policy engine with human approvals (email, Slack, PagerDuty, SMS)
  • Compliance export bundles with SOC 2 / EU AI Act control mapping
  • n8n Workflow Bridge + TypeScript, Python & Go SDKs

Developer experience

One line. Full provenance.

aegis.wrap() instruments your entire agent without touching business logic.

TypeScriptPythonGoLangGraphCrewAIMCP
agent.ts
import { evaluatePolicyViaApi, signAndIngest } from "@salanor/aegis";

// BYOK: private key stays in your runtime. Register public key in Console.
const decision = await evaluatePolicyViaApi(
  "https://api.salanor.com/v1/aegis",
  process.env.AEGIS_INGEST_TOKEN!,
  {
    organization_id: "org_…",
    agent_id: "agt_…",
    tool_name: "app.payments.transfer",
    payload: { amount_usd: 2500, recipient: "vendor@example.com" },
  },
);

if (decision.decision === "allow_with_obligation") {
  // Pause until human approves in Console
}

Compliance coverage

Evidence mapping in exports

Live mappings ship in ZIP bundles. Roadmap items are labeled clearly: mapping support, not certification claims.

Available today

SOC 2Control mapping in export ZIPs
EU AI ActArt. 12+ mapping in exports

Roadmap

NIST AI RMFRoadmap
HIPAABYOC path
FedRAMPArchitecture path
ISO 42001Roadmap