Document 05

Technical Brief

CrystalCore as Multiplanetary Intelligence Layer

Design Premise

Multiplanetary operations impose constraints that Earth-centric intelligence architectures handle poorly: high and variable latency, intermittent or contested connectivity, long periods of isolation, and the need for local decision-making that remains coherent with human intent and continuity.

CrystalCore is designed from first principles for this regime.

Core Properties

Local-First

Primary intelligence and memory reside on the local substrate. Continuous external dependency is not required for core function.

Fail-Safe Isolation

When external links degrade or are compromised, the system defaults to local isolation rather than fail-open behaviour.

Consent-Native

Significant actions and modifications to continuity-critical memory require valid, current consent tokens.

Continuity-Preserving

Continuity of decision-making, memory, and agency is treated as a hard constraint.

Auditable

Decision paths and memory operations remain inspectable by the authorised human operator.

Distance-as-Normal

High latency is assumed as the operating condition, not treated as an error state.

Orchestration: Behavior Trees over Finite State Machines

For the control and orchestration of agent behaviours and synthetic decision processes, CrystalCore prefers Behavior Tree (BT) architecture over legacy Finite State Machine (FSM) frameworks.

Rationale:

Design implication: orchestration layers should be structured so that consent gates, continuity checks, and fail-safe isolations can be added or refined as modular subtrees, keeping the architecture adaptable while preserving the hard constraints defined in the First Principles.

Comparison — Two Families, One Gap

The existing landscape splits into two families. Neither occupies the position this architecture targets.

Family 1 — Contemporary agent frameworks

LangGraph, CrewAI, Microsoft Agent Framework (formerly AutoGen), SuperAGI and their peers solve orchestration: graph-structured or role-structured coordination of multiple agents, model-agnostic at the interface. Their shared assumptions are the problem here, not their quality:

Framework churn is itself a continuity risk worth naming: AutoGen has moved into maintenance and merged into Microsoft Agent Framework 1.0 (GA April 2026), and SuperAGI — 17.6k stars, MIT licensed — last saw a commit to main in January 2025. Architectures intended to carry continuity across decades cannot rest on a layer with that half-life.

Family 2 — Flight software and spacecraft autonomy

This family already operates under the conditions in question, and does so successfully.

What this family does not attempt: general adaptive reasoning, and the preservation of a human operator's memory, agency, and continuity as a protected property. These systems are deterministic and mission-specific by design. That is a strength for their purpose, not a deficiency — but it leaves the intelligence layer unfilled.

Family 3 — Local-first open-source stacks

The closest existing work to this architecture, and the most direct challenge to any novelty claim it makes. Ettore Di Giacinto's projects, all Go, all open source, all actively maintained:

Taken together these already supply local inference without external dependency, persistent agent memory, token-gated peer transport, and an immutable edge substrate. That is most of the physical stack this brief describes.

The honest position. This is candidate substrate, not competition. Building a parallel implementation of what LocalAI already does well would be reinvention of precisely the kind rejected above. The layer that remains genuinely unfilled is narrower than "a local-first intelligence system," and is better stated narrowly — consent as an enforced runtime primitive rather than a privacy posture; continuity as a hard architectural constraint with explicit guarantees rather than a feature that happens to persist; and fail-safe semantics defined as specified, tested isolation rather than an emergent consequence of running locally. Local-first is a precondition for these. These projects supply it. It is not by itself the contribution.

The gap

Local-first / fail-safe Adaptive reasoning Consent & continuity as hard constraints
Agent frameworksNoYesNo
Flight software / autonomyYesLimited by designNot their purpose
Local-first open-source stacksLocal-first yes; isolation semantics unspecifiedYesPartial — privacy posture, not enforced primitive
CrystalCoreYesYesYes

The operating condition is not hypothetical: Mars round-trip light time runs roughly 8 to 48 minutes depending on orbital geometry, and a Uranus mission faces about 5.5 hours two-way. Under those constraints an architecture that treats link loss as an error state is mismatched to the domain.

Stated honestly

F Prime and cFS are flight-proven. CrystalCore is not. The claim here is architectural fit, not flight heritage, and the distinction matters.

The corollary is that where these families already solve a problem well, the correct move is adoption rather than reinvention. F Prime's component decomposition and MEXEC's planner/executive coupling are considerably closer to the Behavior Tree orchestration described above than anything in the contemporary LLM agent stack — and are the more useful prior art for this work.

The same applies to Family 3 more sharply still. The realistic path is CrystalCore's consent, continuity and isolation semantics implemented on a local-first substrate that already exists and is maintained, rather than a parallel stack built to reach the same starting line.

Role in the Larger Architecture

CrystalCore is the intelligence counterpart to geographic and industrial redundancy. Where the southern node supplies physical recovery, feedstock, and energy capacity, CrystalCore supplies the decision and continuity layer that remains functional when links are thin or broken.

The preference for Behavior Tree-style orchestration directly supports the requirement that ethical and continuity constraints remain enforceable and extensible without system-wide fragility.

← Proposal