Caisson documentation
Compliance-grade infrastructure for regulated SaaS, the manual.
Caisson is a composable monorepo library: an audited base substrate plus six persona bundles
(Compliance, AI Production, Local-first AI, Agentic-Dev, Provenance, and Everything), a
create-caisson generator, with dedicated support. Bundles are compositions of the same packages,
never forks.
These docs are the manual: how each package works, how to compose it, and the contract it upholds.
Start here
- Getting started: install the base, wire a tenant, and run the standards gate.
- Base substrate:
auth,tenancy-rls,billing,credits,kernel, and the rest of the table-stakes core, framed under the differentiators. - Compliance:
compliance: the config-as-code module registry and the signed evidence-pack generator. - Provenance:
signing-primitive,audit-worm,field-crypto: the fail-closed data layer and per-tenant evidence signing.
What “fail-closed by construction” means
The guarantees are wired and tested before your first customer, not backfilled after your first audit:
- Tenancy: Postgres row-level security with FORCE. A query with no tenant context returns nothing.
- Evidence: S3 Object-Lock WORM. Evidence cannot be altered or deleted before retention expires.
- Audit: an append-only SHA-256 chain. Tampering breaks the link, and the break is provable.
Agent-readable
Every page is available as raw markdown for your AI agent, see
/llms.txt and /llms-full.txt.