Documentation Core concepts

Link, Engine, and Cloud

Control an enrolled installation remotely while the local Engine remains authoritative.

Product guide · implementation in progress

On this page

Local Engine, remote control, and Cloud

The Cella Engine is the intended account-free open-source trust loop. Cella Link lets an explicitly enrolled device control an Installation by sending authenticated intent to its authoritative cellad; Link does not require Cella Cloud or grant direct Wall access.

Cella Cloud is the planned organization layer for shared policy, Connections, approvals, fleet coordination, continuity, and evidence. Execution can remain local or on customer infrastructure. Cloud does not replace the local execution boundary.

The planned Cloud responsibilities are:

Component	Purpose
Organization Identity and Enrollment	Enroll principals, Projects, Installations, devices, and workload identities
Policy Authority	Validate, sign, distribute, and revoke organization policy bundles
Capability and Approval Service	Coordinate exact approvals, expiry, exceptions, and lease revocation
Connection Governance	Manage approved provider identities, Effect scopes, rotation, and emergency disable
Fleet and Evidence Operations	Inventory Cells, detect drift, coordinate revocation, and retain verifiable evidence
Workstream Coordination Service	Coordinate shared work, handoffs, candidates, retention, and Capsule availability
Dedicated Worker Manager	Optionally provision customer-scoped remote execution under the same Engine contracts