CLUSTER ONLINE
REGION UAE
NET TESTNET
DURABILITY 16/48
Deploy
Dragon 1 · DDC infrastructure · Cere testnet

The first DDC cluster.

Dragon 1 hosts your vaults and runs the compute on them, under on-chain commitments validators inspect. The cluster sees ciphertext. You hold the keys.

Agent compute on testnet since Sep 2025 · storage on DDC mainnet since 2024● designed for zero data loss · 16/48 erasure
0d 00h 00m 00s
dragon@uae · ~/agent
# deploy an agent to the cluster$ npm i @cef-ai/vault-sdk$ cef agent deploy --cluster dragon1  resolving manifest CID ............ ok  binding vault (16/48 shards) ...... ok  spawning V8 isolate ............... ok  cubby ready ....................... <10ms live on Dragon 1 testnet 
16/48
Erasure shards per file
20
Replication peers
3
Activated clusters · testnet
1,000
Test $CERE bond minimum · on-chain
99.9%
Availability target · hot tier
The compute engine

Sovereign GPU. Off the hyperscalers.

Dragon 1 runs real AI workloads on its own GPU fleet, in-jurisdiction, next to your encrypted data. Not rented from a hyperscaler. Not shipped to someone else's region.

Hyperscaler GPU
  • Your data sits in someone else's region
  • Metered black box, trust the dashboard
  • Sovereignty is a contract clause
Dragon 1
  • Ciphertext in the jurisdiction you chose
  • Bonded on-chain, verified by validators
  • Sovereignty is cryptography
Hardware

H100-class GPU nodes

Running on Zettabyte infrastructure, wrapped as elastic GPU for inference and training.

Locality

Compute next to the vault

Inference runs on the same nodes that hold your ciphertext. Your data never leaves the cluster to be computed on.

Editions

Dragon 1 & 2

Dragon 1 for enterprise with custom components, Dragon 2 for the community. One codebase, separate repos.

// Real workloads run on this fleet today. Pricing and capacity by request.

Cluster topology

One node fleet. Storage and compute together.

Content-addressed shards on the same nodes that run the compute. Ember computes, cyan stores and verifies. Everything client-keyed.

DRAGON 1 · UAE · TESTNET vault sealed runtime V8 · live inference GPU replicate ×20 isolate DAC audit ⟶ Cere Protocol
It holds because the math holds

Durability you can verify. Commitments you can slash.

Durability
16/48

Every file splits into 48 erasure-coded shards, replicated to 20 peers. Lose 32 and it still reconstructs. Content-addressed by CID.

Cubby read latency · p95 design target
<10ms
Runtime

V8 isolates

Agents execute next to the data, with Cubby memory that persists across sessions.

Real-time

NATS JetStream

Events are the single ingress shape, over NATS JetStream and Redis Streams. Deployed via Ansible to K3s.

Privacy

Ciphertext only

Data is encrypted and client-keyed. The cluster never holds the keys.

Durability, visualized

One object. Forty-eight shards.

Reed-Solomon erasure coding splits every object into 48 shards across the cluster, replicated to 20 peers. Any 16 reconstruct the whole. Lose 32 and your data is still intact.

Reed-Solomon · one object → 48 shards ● any 16 reconstruct · highlighted set illustrative
object CID split + encode
any 16 rebuild the object up to 32 can be lost replicated to 20 peers · content-addressed by CID
Jurisdiction

Sovereign by geography

Dragon 1 runs in the UAE on Zettabyte hardware. Dragon 2 and 3 follow in other countries, so data stays where the law fits.

D1 · UAE · TESTNET D2 · PLANNED D3 · PLANNED SCHEMATIC · NOT TO SCALE
What runs here
vaultWallet-keyed data root + event dispatchbase
agent-runtimeAgent code in V8 isolatesbase
cubbyPersistent agent memory, per-agent SQLitebase
inferenceModel serving on NVIDIA Tritongpu
dacData Activity Capture, audited by validatorsbase
On-chain commitments

Typed, bonded, slashable.

Obligations are typed records on Cere Protocol, backed by $CERE bonds and verified by validator swarms. Not marketing language. Usage settles in $CERE per era; unattested activity never pays.

CommitmentWhat it guaranteesEnforced by
01data availabilityStored shards stay retrievable within latency bands.DA checks
02compute integrityAgent code runs as published, on the inputs given.audits
03SLA conformanceUptime and latency targets per tier.bonds + slashing
04transparencyCluster state and usage are observable and reconcilable.DAC + settle

// SLA targets are governance parameters and may evolve. User refunds are a marketplace-layer concern, not Dragon 1.

Get on the cluster

Two ways in.

BUILD

Developers

Deploy agents with @cef-ai/vault-sdk and pay per execution that touches storage or compute.

OPERATE · DRAGON 2 PROVIDERS

Node operators

Bond a 3090/4090-class GPU to Dragon 2, Cere’s EU production cluster. Join on-chain through the ddc-staking and ddc-nodes pallets, and earn $CERE for validated work.

FAQ

Questions.

01What is Dragon 1? +
The first DDC infrastructure cluster, run by the Cere team in UAE jurisdiction. The production existence proof that the SCP model works end to end.
02Can the cluster read my data? +
No. Data is encrypted and client-keyed. The cluster stores and computes on ciphertext.
03Is it live? +
Storage runs on DDC mainnet (since 2024). Agent compute runs on testnet and devnet today, connected to Cere Network.
04What does $CERE do here? +
Three jobs: it meters and settles usage per era, it bonds operators and the cluster to declared SLAs (breach slashes the bond), and it votes in protocol governance. Every payout traces to validator-attested usage, so the token's utility is auditable end to end.
05Who can run a node? +
Anyone who stakes $CERE and is admitted to the cluster on-chain. Node operators earn a share of usage.