Three things. One witness.
When Steve Jobs introduced the iPhone, he took three things you already owned and fused them so cleanly you forgot they were ever separate. A Canary does the same trick — with one twist that makes it harder.
What Jobs actually did
"An iPod, a phone, and an internet communicator. An iPod, a phone… are you getting it? These are not three separate devices. This is one device."— Steve Jobs, Macworld, January 2007
A camera. A notary. A vault.
Each is an object you already understand. Put all three in one calm device and you get something that isn't quite any of them.
A camera
The job Ring and Nest sell you.
A Canary watches a doorway, a lab bench, a driveway. But person-detection runs on the sensor's own chip and only a sentence comes out — package at front door, never a face, a plate, or an identity. On the Vision device, no pixels ever leave the board.
A notary
The job a court stamp or a signature does.
Every event is Ed25519-signed and hash-chained — each record locked to the one before it. Edit the history and the break shows up the moment anyone checks — offline. The promise isn't that tampering is impossible; it's that tampering becomes visible.
A vault
The job a bank vault with two keys does.
The rare raw frame that truly matters is sealed so the device can't read it back. Opening it takes a quorum of trustees — no single person, not even us. Breaking the glass is loud, logged, and on the record.
His three were friends. Ours were enemies.
An iPod, a phone and a browser helped each other. A camera, a notary and a vault fight: a camera that sees you destroys your privacy · privacy destroys the evidence · real evidence means handing it to a stranger's cloud.
So we stopped making you choose. Not three devices — one. And it isn't even a camera.
It's a witness. Witnessing without watching.
Pick two — unless you don't have to
Every camera on the shelf lands in one of the first three boxes. The Canary is engineered to sit in the fourth.
The surveillance camera. Great evidence, full identity archive. Everyone in frame is cataloged.
The camera you trust to forget. Nice in theory; nothing you could ever check or stand behind.
A notarized logbook with no eyes. Honest, and blind.
Sees what happened, proves it wasn't altered, and forgets who you are — because the surveillance code was never written.
Three ideas do all the work
Signed on the device, chained to the record before it, running on your own hardware — How It Works proves each one with a live demo.
Don't take the pitch on faith
The whole product is built so you can check the claim instead of believing it.
SecuraCV is an independent, Apache-2.0, pre-1.0 project (kernel 0.7): version 1 waits until the firmware is hardware-verified. Features still marked design or pending bench validation are exactly that.