Drive the Witness Wall, right here.
The same idea as the Lab, for the living-room screen: a faithful Apple TV emulator you can steer with the arrow keys or the on-screen remote. Switch between three profiles — Home, Business, and Apartment — watch a show and take a doorbell over it, run a heavy monitoring board, or peek at your peephole from the couch. It's a preview of the experience; the app itself is still in design.
And the Wall itself — the real one, whose every on-screen check comes from a verifier actually running, never a hardcoded string — is a web app: open it in your browser. The same app packages for Samsung and LG TVs and casts to a Chromecast.
Demo fleet — not connected to a kernel · connect yours
Drive it like an Apple TV
Hover the screen to engage the keyboard (so arrow keys still scroll the page elsewhere). Then explore the three profiles:
- Home — pick Watch a show, then Ring doorbell: the alert takes over your movie as a picture-in-picture — the "your food's here" moment, no phone needed. View shows a coarse peek; raw video never leaves the device.
- Business — flip Glance → Monitor for the heavy ops board: a live feed you can acknowledge, zone status, open incidents wired to dispute-pack, a shift/hours/compliance banner, and a multi-site rollup.
- Apartment — a battery Canary on the peephole. Hit Knock, then Peek to see who's there from the couch — built for anyone who can't easily get to the door.
Coarse events only — a zone and a time, never a face. Flip it on and an alert slides in over whatever's on screen (try it during the screensaver). On a real Apple TV these show in-app and over the ambient screensaver; a HomeKit bridge carries them over other apps you're watching.
Connect your fleet experimental
This really fetches a kernel over HTTP and shows the Canaries it returns — in place of the demo fleet. Hit Try a live demo kernel to watch it work right here (a real fetch to a live endpoint), or point it at your own kernel's address to see your actual devices. A browser can't scan your LAN by itself, so you give it the address — and it keeps watching the two well-known ones (canary.local:8099, then canary.local — a fresh Canary answers there with no hub at all), so when one shows up you get to flip the switch.
Not connected — showing the demo fleet.
Why can't it just find them automatically?
Browsers deliberately can't do mDNS/Bonjour discovery or scan your network, and a page served over https:// can't reach a device that only speaks http:// on your LAN (mixed-content is blocked). So real discovery works when: your kernel exposes a CORS-enabled endpoint over https, or you open this page on the same LAN over http, or you run the SecuraCV desktop app, which does the mDNS discovery natively and bridges it to the UI. When a kernel answers, your real fleet — names, online state, chain health — replaces the demo data here.
This is a browser emulator of the experience, honestly labeled — a concept in design, not a shipping App Store app. The witness kernel, the signed record, and the camera integrations it depicts are real; the Apple TV app is on the way.
The on-screen remote is a stylized depiction, modeled on the Apple TV remote. Apple, Apple TV, tvOS, Siri, App Store, and TestFlight are trademarks or service marks of Apple Inc., registered in the U.S. and other countries and regions. SecuraCV is an independent project by Errer Labs and is not affiliated with, endorsed, or sponsored by Apple Inc. All other trademarks are the property of their respective owners.