Canvas
Describe what to build — Canvas generates a governed app, derives the handoff docs, and ships it into your infrastructure.
An enterprise AI product engineering studio for teams that need governed app generation, reviewable delivery artifacts, and controlled handoff into company infrastructure — from a live React workspace to GitHub PRs or your own cloud.
The problem it solves
Teams want to go from idea to working app fast, but enterprises cannot accept ungoverned generation with no reviewable artifacts, no isolation, and no controlled path into their infrastructure. Generic AI builders produce a preview and nothing an architect can sign off on. Speed without governance, evidence, and a clean handoff never makes it past review.
What Canvas is
Canvas is an enterprise AI product engineering studio. You describe what you want to build; Canvas generates an interactive React app workspace, derives the handoff documents (PRD, TRD, Engineering Plan), validates the result in a sandbox, and prepares it for enterprise delivery flows such as GitHub PRs, Azure, AWS, GCP, Kubernetes/OpenShift, or private cloud. Its default posture is enterprise-controlled: private projects, governed model and provider configuration, company brand assets, approval-aware tool execution, sandbox validation, and deployment into customer-managed environments.
The solution
A governed studio for the whole delivery loop.
Canvas runs generate, review, validate, and hand off without leaving an enterprise-controlled workflow. A server-authoritative agentic loop calls structured tools while a live workspace renders in a sandboxed preview; the PRD, TRD, and Engineering Plan are derived from the real project context, not boilerplate. Enterprise layers — data, model governance, brand controls, isolation, observability — are off by default and activate only when you supply the credentials, so nothing leaves your boundary unless you allow it.
Key capabilities
Live, sandboxed preview
Each generated workspace renders in real time inside an isolated iframe — desktop, tablet, and mobile viewports at a click, with execution isolated from the Canvas shell.
Conversational delivery loop
Describe product changes, constraints, or deployment questions in plain English. Use @prd, @trd, or @plan to target governed documents; responses stream live.
Derived handoff documents
Canvas derives the PRD, TRD, and Engineering Plan directly from the app and project context — built for enterprise review, architecture handoff, and approval flows.
Annotation overlay
Pin feedback directly onto app elements, filter by Issue, Idea, or Question, and export annotations for team review, sprint planning, or approval evidence.
Resizable workspace
Drag the divider to balance chat, docs, code, runtime, and preview — or collapse chat for full-canvas focus. Workspace state persists across panel resizes.
Structured agent tool calls
The model calls structured tools through a server-authoritative loop. Write tools update the workspace; exec-class tools stay guarded by allowlists, approval, and sandbox policy.
Enterprise trust
Security, governance, and auditability — by construction.
Hardened runtime isolation
Every sandbox is created with no host bind mounts and deny-by-default egress. Exec-class commands are guarded by allowlists and approval policy; disabling isolation requires an explicit, loudly logged flag.
Encrypted, fail-closed secrets
Secrets are encrypted at rest with AES-256-GCM. In production Canvas refuses to generate a key into the database it protects — boot requires a KMS- or environment-provided key.
Identity & governance
Microsoft Agent 365 governed observability with optional per-agent Entra Agent ID mapping, and agent-to-agent auth scoped by tenant, audience, scopes, and app roles.
Model-provider governance
An admin-managed catalog routes across providers by policy, with keys configured through settings or the environment — and brought by you, not forced onto Erup infrastructure.
Customer-managed deployment
Run Canvas behind your own ingress in Azure, AWS, GCP, Kubernetes/OpenShift, or private cloud. Nothing is sent to a public preview host by default.
How Canvas works
- 01
Describe
Describe the app in plain English — workflows, constraints, and the handoff docs you need.
- 02
Generate
Canvas generates a live, interactive React app workspace, served in a sandboxed preview.
- 03
Derive & validate
It derives the PRD, TRD, and Engineering Plan, then validates runtime/build readiness in a sandbox.
- 04
Hand off
Ships via GitHub PRs or enterprise targets — Azure, AWS, GCP, Kubernetes/OpenShift, or private cloud.
Where it’s used
Internal operational tools
Stand up dashboards and line-of-business apps with role-based workflows and audit-ready handoff docs, ready for engineering review.
Enterprise POCs that survive review
Move from idea to a working, governed prototype fast — with the PRD, TRD, and Engineering Plan that get it through architecture and approval.
Branded app generation
Inject company design-system settings, approved images, fonts, and icons so generated apps look like they belong in your portfolio.
Governed handoff to engineering
Hand off through GitHub PRs with rollback metadata, or into your cloud, treating generated apps as reviewed artifacts that pass your release controls.
In the Erup portfolio
How Canvas fits into Erup AI
Canvas is the front of the Erup build loop — where intent becomes a governed, reviewable app and its delivery artifacts. It shares Erup’s enterprise-controlled posture with CoBolt and Mira, and feeds CoBolt directly: what Canvas generates and documents can flow straight into CoBolt’s governed build-and-release lifecycle.
At a glance
- Delivery targets
- GitHub PRs · Azure · AWS · GCP · K8s/OpenShift · Private cloud
- Artifacts
- PRD · TRD · Engineering Plan
- Encryption
- AES-256-GCM, KMS-provided keys
- Validation
- Sandbox runtime/build checks
- Posture
- Enterprise-controlled by default
See Canvas in your environment.
Start with a scoped pilot on a real workflow — governance and evidence enabled from day one. Talk to the team that builds the product.
- SaaS, self-hosted, or air-gapped
- Evidence & audit trail included
- Built for regulated operations