Signed provenance for every agent action

Name: Salanor Aegis
Brand: Salanor

Aegis by Salanor: provenance and liability coverage for AI agents.

Cryptographically signed, append-only records. One SDK, no changes to agent logic. Built for teams that need evidence before they scale autonomy.

Admissibility depends on jurisdiction and counsel. Aegis supports evidentiary workflows; it does not guarantee court outcomes.

Aegis is the managed control plane for APS-1 events: ingest, policy, human approvals, witness batches, transparency proofs, and compliance exports, scoped per organization.

View pricing →Request design partner access View on GitHub

Platform

Where Aegis sits

Salanor

Platform

Provenance, identity, and liability coverage for production agent systems.

AegisDesign partner · 2026

Provenance & audit

Signed APS-1 ledger, policy engine, human approvals, compliance exports.

AetherResearch · 2027

Intelligence & risk

Anomaly detection, risk scoring, and insurer-ready telemetry on the same ledger.

APS-1

Open standard

Event format and verifier CLI. Auditable without Salanor online.

Capabilities

What Aegis delivers

<5msPolicy p50
Median policy latency
Block-before-call proxy path
RFC 6962Transparency
Public tamper-evident log
External verifier, no Salanor trust
BYOKSigning
You hold the signing keys
AWS KMS, GCP KMS, Vault
OTelSIEM export
OpenTelemetry to your stack
Splunk, Datadog, Sentinel

Feature set

Shipped scope

APS-1 open standard with Ed25519 signed events
BYOK: register customer public keys + optional AWS/GCP KMS sign
Hash-chained append-only ledger with Merkle witness batches
Policy engine with human approvals (email, Slack, PagerDuty, SMS)
Compliance export bundles with SOC 2 / EU AI Act control mapping
n8n Workflow Bridge + TypeScript, Python & Go SDKs

Developer experience

One line. Full provenance.

aegis.wrap() instruments your entire agent without touching business logic.

TypeScriptPythonGoLangGraphCrewAIMCP

agent.ts

import { evaluatePolicyViaApi, signAndIngest } from "@salanor/aegis";

// BYOK: private key stays in your runtime — register public key in Console
const decision = await evaluatePolicyViaApi(
  "https://api.salanor.com/v1/aegis",
  process.env.AEGIS_INGEST_TOKEN!,
  {
    organization_id: "org_…",
    agent_id: "agt_…",
    tool_name: "app.payments.transfer",
    payload: { amount_usd: 2500, recipient: "vendor@example.com" },
  },
);

if (decision.decision === "allow_with_obligation") {
  // Pause until human approves in Console
}

Compliance coverage

Every regulation. One export.

SOC 2 Type IIExport mapping · audit target Q4 2026

EU AI ActArt. 12, 14, 19, 26 mapping

NIST AI RMFGovern · Map · Manage exports

HIPAABYOC path · roadmap

FedRAMP Mod.Architecture path · Q2 2027

ISO 42001AI management mapping