Cella Cloud

Current status: planned organization authority plane.

Cloud governs enrolled Installations wherever their Cells run. It distributes signed organization policy, stages rollout, detects drift, inventories the fleet, quarantines installations, and revokes authority. It governs organization Connections, typed Effects, exact approvals, separation of duties, provider health, rotation, and emergency disable.

Durable evidence search, verification, retention, export, incident investigation, shared Workstreams, teammate handoff, and Capsule coordination support teams. Developer machines, on-prem infrastructure, BYOC, and optional managed Dedicated Workers retain the same local cellad enforcement contract. Managed compute is a placement option; Cloud's core role is organization authority.

Cloud sends authenticated intent and policy state. It cannot directly invoke Wall, Gateway, Relay, or the secret boundary, and cannot weaken the installed Security Floor. Credentials remain referenced through Connections, preferably using external secret managers, workload identity, or provider-native identities. Agent-edited policy, prompts, and repository Markdown grant no authority.

Example: a team centrally disables a GitHub Connection for enrolled Installations without transferring its reusable credential into their Agent Cells.

See Cloud authority and eleven use cases.