Mission Canvas
Local-first Open source

AI you can
answer for.

One interface for your email, calendar, files, and client work — connected to AI on your machine. It shares nothing unless you say so.

Download on your computer to get started
macOS / Linux: curl -fsSL https://missioncanvas.ai/install.sh | sh
Windows: irm https://missioncanvas.ai/install.ps1 | iex
Docker Compose: docker compose up
Network calls blocked at the socket.
Every route has a record.
2,506 tests. All passing.
No telemetry. No account.

The model is always
the last step.

Most AI tools send your query straight to a model. MC sorts the work first. Then it gathers evidence, checks the rules, and only then calls a model.

SCAN

Check the input

PII and PHI detected and stripped before classification. If the gate is unsure, it closes.

CLASSIFY

Sort the question

312-node ontology. Keyword → BM25 → LLM fallback. Every route gets a score.

GOVERN

Enforce the boundary

Sensitive domains block external calls. Not a config flag. A structural gate.

RETRIEVE

Gather the evidence

219+ knowledge entries. Freshness scored. Stale entries filtered before REASON.

REASON

Call the model last

Full structured context assembled first. Local or cloud — based on governance, not cost.

Work you cannot paste
into ChatGPT.

LOCAL ONLY MC-LEGAL-004

Legal

A federal court ruled in February 2026 that cloud AI can void privilege. MC routes legal work on your machine. That boundary is code, not a promise.

After United States v. Heppner (SDNY, Feb 2026)
LOCAL ONLY MC-HC-001

Healthcare

HIPAA 2026 takes effect August 2, 2026. PHI decisions need audit trails. MC records the path for every query — automatically, without configuration.

HIPAA 2026 Final Rule — AI audit trails required for PHI decisions
FIDUCIARY LENS MC-FIN-005

Financial services

Fiduciary work starts with the client's facts. MC pulls the client's files and your firm's knowledge before the model reasons.

Conflict detection built into the fiduciary lens
PERSONAL CANVAS FILE MAP

Personal work

Write your doctor. MC uses your medical files and your tone. Health data stays on your machine. You do not configure a workflow.

Your lens learns from your actual patterns

Three things that meet at inference.

MC combines your professional context, your personal patterns, and your actual files at the moment of inference. The boundary decides what can leave your machine.

  • Canvas The rules for your field. Legal, healthcare, personal work. 25 bundled domains.
  • Lens How you work. Your tone, priorities, and sensitive zones. Grows from real use.
  • File map Your folders, not your file contents. MC learns where things live — what should stay put.

Every answer shows its work.

Every answer carries its route. You see the node, model, sources, and whether anything left your machine. No black box. No guessing.

"Draft a response to the Acme escalation using the contract terms from my legal folder."
🔒 LOCAL ONLY MC-LEGAL-004 legal lens 3 sources
mc why Classified as contract review. Client data detected — external routing blocked. Fiduciary lens active. Pulled 3 contract clause entries from knowledge library.
"What's the HIPAA audit trail requirement for AI-assisted PHI decisions?"
🔒 LOCAL ONLY MC-HC-002 clinical lens 5 sources
mc why Classified as compliance assessment. PHI policy domain — blocks_external enforced. Retrieved HIPAA 2026 final rule (Tier 1 source). Confidence 0.91.
"What are the current Fed rate expectations for the next two meetings?"
⬡ EXTERNAL MC-FIN-003 research mode 4 sources
mc why Public market data query. No sensitive content detected. Routed to external research. Query rebuilt from classification — your words replaced by node semantics.

Read the code that governs your data.

Mission Canvas is AGPL-3.0 open source. You can read every rule, route, and gate. You do not have to trust our word.

312 ontology nodes · 219+ knowledge entries · 2,506 tests passing

src/pipeline.py The OS
# No skipping. No shortcuts.
# The pipeline IS the OS.

def run(query):
  query = scan(query)       # gate: PII
  node  = classify(query)  # ontology
  path  = traverse(node)   # graph walk
  kl    = retrieve(node)   # evidence
  ctx   = context(kl)      # assemble

  if node.blocks_external:
    answer = reason_local(ctx)  # ALWAYS
  else:
    answer = reason(ctx)        # model last

  store(answer)  # path record: always
  return answer

From install to first answer
in five minutes.

01

Download MC

One download. No account. No email. A local model downloads. Your first canvas loads.

2 minutes
02

Ask once

The chips show the route, model, and whether anything left your PC.

30 seconds
03

Map your files

MC reads folder names, not file contents. Now it knows where your work lives.

5 minutes
04

Your lens grows

After 50 queries, MC knows your domains, patterns, and sensitive zones.

Weeks 1–4
05

Use the portal

"Draft a response to Acme using the contract terms in my legal folder." One sentence. MC has the context.

Months 2–6

Everything MC knows lives in files you can read, correct, or delete.

Free. Open source. Runs on your machine. No account.

Download on your computer to get started