Trust
Platform status
Honest view of what works in production today for design partners. Updated with each release.
13 capabilities live · 1 in pilot · remainder on roadmap. Security whitepaper · FedRAMP path
| Feature | Status | Notes |
|---|---|---|
| APS-1 Ed25519 signed events | Live | Every ingested event verified against agent public key. |
| BYOK — customer-held signing keys | Live | Register public keys via Console (Agents → Register BYOK key). Private key never sent to Salanor. Sign with your KMS or local HSM. |
| BYOK — AWS KMS server sign | Live | Optional kms_provider=aws + kms_key_arn for bridge/human-approval paths. Salanor calls kms:Sign; no raw private key stored. |
| BYOK — GCP Cloud KMS server sign | Pilot | Requires GCP_KMS_ACCESS_TOKEN on API service. Customer grants asymmetricSign on key version. |
| Policy engine (allow / deny / require approval) | Live | Multiple active policies merged at evaluation. Amount min/max rules supported. |
| Human approvals + email / Slack / PagerDuty / SMS | Live | Configurable TTL per org. Branded HTML approval emails. |
| n8n Workflow Bridge | Live | Community node published. Check Policy + Record Run smoke test documented. |
| Interactive trace reconstruction | Live | Console rebuilds signed causal chain in milliseconds. Click any step; side-effectful tools marked local_rerun. |
| Merkle witness batching (60s cadence) | Live | witness:worker on Railway (60s). Batches pending events + transparency log. History in Platform Ops → Workers. |
| Compliance export bundles (SOC 2 / EU AI Act mapping) | Live | One-time ZIP download. Control mapping in bundle; not a certification. |
| Monthly scheduled exports | Live | Daily cron: compliance:worker + COMPLIANCE_EXPORT_DIR volume. Run history in Platform Ops → Workers. |
| OTLP logs to Splunk / Datadog / Sentinel | Live | Configure in Console → Settings → Integrations. Fires on each ingested event. |
| LangGraph integration | Live | wrapLangGraphTool() in @salanor/aegis SDK + integration guide. |
| CrewAI integration | Live | governed_tool() decorator in salanor-aegis-ledger + integration guide. |
| SOC 2 Type II certification | Roadmap | Export mapping available now. Formal audit target Q4 2026. |
| FedRAMP Moderate | Roadmap | Architecture path documented. Target Q2 2027. |
Production ops checklist
pnpm witness:worker— Merkle batches every 60s (WITNESS_INTERVAL_MS)pnpm compliance:worker— daily pending exports + monthly schedulespnpm maintenance:housekeeping— hourly approval expiry + stale tracesCOMPLIANCE_EXPORT_DIR— persistent volume for export ZIPsAEGIS_SIGNING_KEY_FILEor customer KMS ARN for server-side signing paths