Not this

What we are not

Edges so the center is sharp. This page is who and what to bounce.

Quick trust

• Trust

  We never hold update bytes

  Artifacts stay on your side. We are not a CDN and not a package host.

• Trust

  We never hold raw telemetry

  Watching happens on your machines. The control plane sees the outcome signal: update, fleet, rule, decision, result.

• Trust

  Breach of our SaaS cannot ship code

  Updates are signed customer-side. We hold public key material only. Cloud convenience without your robots' data in our cloud.

• Trust

  Fail closed, always off

  Default to the safe action. You pin the policy. Always-on Patchling-off override. Seatbelt, not driver.

Also not this

• Not

  Not an OTA system

  We do not ship bits to your machines. Mender, balena, Uptane, RAUC, SWUpdate: keep them. We embed on the promote path.

• Not

  Not a second fleet platform

  Their CI, OTA, and ops tools stay home. Patchling is the release gate in that workflow: evidence and exceptions, not a place you run the company from.

• Not

  Not “AI decides if the update is safe”

  No model on the evaluate path. You pin a policy (YAML or optional English draft that compiles). Enforcement is deterministic. English is authoring only. We do not wrap inference or sit on the GPU path.

• Not

  Not a dashboard

  You do not hire us so a human can stare at charts harder. Pin the policy. We promote, pause, or roll back with an audit trail.

• Not

  Not autonomy magic

  We do not make L4 cars L5. We make every step toward more capable software provably safer for the fleet that lives with it.

• Not

  Not for Waymo-tier in-house safety orgs

  First-tier AV builds safety supervision as core IP and will not outsource the case to a seed startup. Correct bounce. We are for the fleets right behind them: sidewalk, yard, ag, warehouse, air, ~50 to 5,000 units, no dedicated OTA army.

• Not

  Not a rip-and-replace

  No new update pipeline. No forced agent on day one. Land agentless. Deeper signals are an upgrade, not a tax.

• Not

  Not insurance (not yet)

  We do not underwrite rollouts at seed stage. Long ambition is a risk layer for machines in the real world. Today: expand with a safety net you can show.

• Not

  Not a twin gate (not yet)

  Expand pre-cleared in sim is roadmap, not present-tense product. What ships now is the canary gate on real machines.

What we are: the release gate that proves your new update is just as safe as your last one. For fleets expanding without a giant safety org. Pinned policy. Canary proof. Evidence packs. Days, not quarters.