Trust
Platform status
Honest view of what works in production today for design partners. Updated with each release.
14 capabilities live · 1 in pilot · remainder on roadmap. Security whitepaper · FedRAMP path · Enterprise & invoicing
Certifications & billing (honest status)
- SOC 2 Type II: not certified. Export mapping + readiness report in compliance ZIP. Audit target Q4 2026.
- FedRAMP Moderate: architecture path only. Not authorized. Target Q2 2027.
- Stripe self-serve: when Salanor can register Stripe in a supported country. Until then, Team and Enterprise via invoice (Platform Ops or contact sales).
| Feature | Status | Notes |
|---|---|---|
| APS-1 Ed25519 signed events | Live | Every ingested event verified against agent public key. |
| BYOK (customer-held signing keys) | Live | Register public keys via Console (Agents → Register BYOK key). Private key never sent to Salanor. Sign with your KMS or local HSM. |
| BYOK (AWS KMS server sign) | Live | Optional kms_provider=aws + kms_key_arn for bridge/human-approval paths. Salanor calls kms:Sign; no raw private key stored. |
| BYOK (GCP Cloud KMS server sign) | Pilot | Requires GCP_KMS_ACCESS_TOKEN on API service. Customer grants asymmetricSign on key version. |
| Policy engine (allow / deny / require approval) | Live | Multiple active policies merged at evaluation. Amount min/max rules supported. |
| Human approvals + email / Slack / PagerDuty / SMS | Live | Configurable TTL per org. Branded HTML approval emails. |
| n8n Workflow Bridge | Live | Community node published. Check Policy + Record Run smoke test documented. |
| Interactive trace reconstruction | Live | Console rebuilds signed causal chain in milliseconds. Click any step; side-effectful tools marked local_rerun. |
| Merkle witness batching (60s cadence) | Live | witness:worker on Railway (60s). Batches pending events + transparency log. History in Platform Ops → Workers. |
| Compliance export bundles (SOC 2 / EU AI Act mapping) | Live | One-time ZIP download. Control mapping in bundle; not a certification. |
| Monthly scheduled exports | Live | Daily cron: compliance:worker + COMPLIANCE_EXPORT_DIR volume. Run history in Platform Ops → Workers. |
| OTLP logs to Splunk / Datadog / Sentinel | Live | Configure in Console → Settings → Integrations. Fires on each ingested event. |
| LangGraph integration | Live | wrapLangGraphTool() in @salanor/aegis SDK + integration guide. |
| CrewAI integration | Live | governed_tool() decorator in salanor-aegis-ledger + integration guide. |
| Invoice billing (Team / Enterprise) | Live | Platform Ops records pending invoice → mark paid. Use when Stripe is unavailable in Salanor's country. |
| Stripe self-serve checkout | Roadmap | Requires Stripe account in a supported country. Until then, Team/Enterprise via invoice. |
| SOC 2 Type II certification | Roadmap | Export bundle includes control-mapping-soc2.json and soc2-type1-report.json. Formal Salanor audit target Q4 2026. |
| FedRAMP Moderate | Roadmap | Architecture path documented. Target Q2 2027. |
Production ops checklist
pnpm witness:worker: Merkle batches every 60s (WITNESS_INTERVAL_MS)pnpm compliance:worker: daily pending exports + monthly schedulespnpm maintenance:housekeeping: hourly approval expiry + stale tracesCOMPLIANCE_EXPORT_DIR: persistent volume for export ZIPsAEGIS_SIGNING_KEY_FILEor customer KMS ARN for server-side signing paths