CELESTIAL

Next generation networks for the future of work.

Celestial provides self-sovereign private networks entirely under your control and ownership.

How it works Configuration options

Celestial Constellations

Putting you in control.

Each network is what we call a 'constellation'. A constellation runs across the devices your people already have. Members hold their own keys, you hold your own authority, and the record of what happened belongs to you rather than to a third party.

How it works

Three properties enabling the self-sovereignty of your network.

You are in complete control.

01

Sovereign membership

You decide who is a member, through an administrator key ring named when your network is created. Every admission, revocation, recovery and policy change is signed, ordered and checkable by anyone holding the records.

02

Client-held encryption

Devices generate their own keys and never hand them over. Payloads live in a store you control, and the log holds only commitments to them. We hold nothing, so we can be compelled to produce nothing.

03

A tamper-evident record

Every device keeps its own hash-chained, signed log. Erasure under your retention policy leaves a signed tombstone, and censorship leaves a gap, so an authorised observer can tell the two apart offline.

Configuration options

Constellations configured on demand.

Everything here is a choice you make when the network is created. Each choice is written into the founding record, signed, and readable by a member before they join.

01

Membership and authority

  • Administrator ring

    Keys you nameandThreshold you set

  • Offline root

    Held by you

  • Re-confirmation

    Any period you set

  • Member recovery

    Administrator aloneorAdministrator plus peers

02

Records, retention and visibility

  • Record classes

    Classes you defineandRetention per classandVisibility per class

  • Payload store

    A store you run

  • Permanent records

    Not permittedorPermitted

  • Erasure reasons

    Reasons you define

  • Key escrow

    NoneorA named holder

03

Cryptography

  • Algorithm suite

    Suite you chooseandChangeable later without abandoning history

04

Devices and network

  • Member devices

    BrowserorNative nodeorBoth

  • Peer discovery

    Local networkorSignaling you hostorBoth

  • Snapshot validity

    How long a snapshot stays currentandWhen a device is stale

  • Attestation

    Frequency you set

  • Monitors

    Devices you designate

05

Economics, exchange and compute

  • Tokens

    NoneorYour own token

  • Contribution

    NoneorYour reward policy

  • Dispatch

    NoneorSigned evidence to named others

  • Device pooling

    NoneorWorkloads on member devices

In production

Already running at consumer scale.

SELF is a Celestial customer and operates the first constellation, a consumer network in production. Its members hold their own keys, and SELF runs the network on its own terms.

Visit SELF

Principles

The architecture follows a few fixed decisions.

These decisions set the limit of Celestial's role, and each one has been used to reject something.

01

We are not an intermediary.

You network runs regardless of Celestial. Every component runs on machines you control, and we stay out of the way.

02

Authority and authenticity are primary.

An organisation controls its own membership, how value is created and how it is exchanged.

03

Verifiable evidence is yours.

Published format, published verifier, reproducible builds, and a record that can be checked without us.

Celestial

Your network. Your keys. Your record.

A private network your organisation owns, configured on demand.

Contact Celestial