Members, roles, and billing
Who can design, export, Start Run, and review, and where Deploy, Operate, and Verify are purchased.
Last updated September 28, 2026
Roles
- Owner — organization settings, billing, GitHub App connection, Deploy and Operate for a repo.
- Designer — Build, Validate, Simulate. Compile download still requires Deploy.
- Reviewer — a person assigned to a Human Review Task. Reviewer is not a nav room. Reviews is the room.
- Operator — Start Run and Run history. Requires Operate on that live Deploy.
Operate includes unlimited seats on the paid repo. A Designer without Operate cannot Start Run or submit Review decisions.
Members
Invite members on the Canon organization, then assign work on the flow. A Human Review Task is not actionable until the Blueprint resolves a real principal. @code-owner is not a member.
Native PR Approve still happens on GitHub. The GitHub user who approves the candidate SHA must be allowed to review that pull request.
Billing
| SKU | Where it applies |
|---|---|
| Check / Design | Free on the org |
| Verify | $995, separate intake, one automated report per repo |
| Deploy | $499/month, one repo, download and upkeep |
| Operate | +$1,000/month on a live Deploy, unlocks Run and Review |
Change plans in Canon. There is no per-repo Stripe customer portal. Cancel Deploy stops GitHub workflows for that install and drops Operate.
Homepage comparison is Deploy $499 versus Deploy + Operate $1,499. Verify is a footnote, not a runtime plan.