Canon · Early access

One source of truth
for every AI agent.

writ enforces on every machine. Canon governs the fleet: write your laws once, publish them to every seat running writ, and see in one place that they’re actually being enforced.

The problem

Enforcement on one machine is a control. On five hundred, it’s a question.

Once writ is on hundreds of seats, the people accountable for AI ask questions no single machine can answer.

Is every seat running the policy we approved, or last month’s?

Which machines are actually enforcing, and which have gone quiet?

Who approved this rule change, and when did it reach the fleet?

Across the organisation, what did the AI attempt and what stopped it?

What Canon does

Author once. Enforce everywhere. Prove it centrally.

1

A single, versioned policy

Laws and remedies kept as approved, versioned bundles, each with a fingerprint, a timestamp and its approver.

2

Every seat in step

Each writ seat picks up the current approved policy. Stale or unreachable seats show as stale or unreachable, never compliant.

3

One view of the fleet

Every seat, its platform, writ version, policy version and when it was last seen, in a live web console.

4

Fleet-wide evidence

Enforcement events from every seat in one structured format, built for Splunk and other SIEMs.

5

Licensing that never stops enforcement

Concurrent or allocated seats, offline included. A missed check-in never stops a running seat.

The third level

Organisation

writ works at the workspace and machine levels. Canon adds the organisation.

Early access

Available now

  • Seat registration and fleet status
  • Versioned policy registry and distribution
  • Central evidence collection
  • Concurrent and allocated seat licensing
  • Read-only fleet console
 

Coming next

  • Publishing policy from the console
  • Single sign-on, so every approval names the person who made it
  • Organisation-wide decisions, restated to every agent on every machine
  • Organisation-approved tools, trusted on every seat
Deployment

Runs in your network. Your data stays there.

Self-hosted

Policy, evidence and fleet data never come to Verilex.

Fails safe

If Canon is unreachable, every writ seat keeps enforcing locally.

Secure by default

HTTPS with TLS 1.2 or later. Without certificates it only listens on the local machine.

See your fleet in one place.

Live demo on request. Technical deep dive available under NDA.

Book a demoDownload the Canon brochure