← Back

Owner's manual · vol. 2

PROTOCOL

Apollo Cypher runs a local agent, bridges through Solana, and settles daily. No third-party servers. No leaderboards. No leverage. Insert cartridge and press START.

▸ CARTRIDGE SPECS

BrokerSolana
BridgeLocal ↔ Solana API
AgentLocal, sandboxed, offline-first
Ticket1 penny = 1 permanent ticket
SignatureAuthenticode / notarized builds
LicenseSource-available, non-custodial

▸ DATA FLOW

01 · LOCAL
Agent boots on-device

Sandboxed process. Keys never leave the machine. Offline-first — the agent runs whether the mesh is up or not.

02 · BRIDGE
Route through Solana

Orders and ticket proofs relay through your Solana session. No third-party server, no accounts, no telemetry.

03 · SETTLE
Settle on Solana

Confirmed pennies mint a permanent ticket. Ticket balance is the only shared state — everything else stays local.

  [ You ]
    │  hatch ($10)
    ▼
  [ Apollo Agent ] ──bridge──▶ [ Solana ]
    │                            │
    │  daily penny               │  orders
    ▼                            ▼
  [ Solana ] ──ticket──▶ [ Nest Egg ]

▸ LICENSING

ClientSource-available (BSL 1.1 → Apache-2.0 after 4 years)
ProtocolPublic spec, MIT reference
BuildsAuthenticode (win) · Notarized (mac) · Detached sig (linux)
CustodyNon-custodial. Keys stay on device.

▸ TRUST ASSUMPTIONS

What the protocol requires you to trust — and, more importantly, what it does not.

You trust your device

If the device is compromised, the agent is compromised. Hardware wallet support ships behind START+B.

You trust Solana for settlement

Ticket settlement inherits Solana's on-chain guarantees. Apollo does not add another clearing layer.

You do not trust the bridge

The Solana transport is treated as untrusted. Every order is signed and independently verified.

You do not trust Apollo

Reproducible builds. Detached signatures. Ship refuses to load an unsigned update.

READY? INSERT CARTRIDGE.
▶ Download