Interstellar Developer Documentation

website·Indexed 30 days ago

https://interstellar-docs-tech.pages.dev/developers/

Documentation for Interstellar, a next-generation wallet infrastructure featuring a decentralized, mobile-first authentication model. It includes technical details on Visual Cryptography Authentication (VCA), the TAVP protocol, and PoHI (Proof of Human Intent). The docs provide milestone-based guides (M1-M5) for running the full stack locally via Docker, integrating Substrate nodes, Integritee TEE workers, and IPFS, as well as deploying the Android Demo App.

Tokens
55.5K
Snippets
101
Records
392
Agent score
73%

What's inside Interstellar

  1. Overview of the Extended Recovery Pallet

    The Extended Recovery Pallet is a TEE-native runtime module that governs Interstellar’s decentralized, threshold-based account recovery. It extends the standard Polkadot recovery pallet (which relies on trusted accounts/majority signatures) by adding support for multi-item recovery, biometric-first flows, and hardware-bound validation. Key features include:

    • Item-Based Recovery: Uses item account IDs (NFC tags, VCA token files, etc.) instead of just trusted accounts.
    • Threshold Logic: Supports configurable M-of-N recovery policies (e.g., 2-of-3).
    • TEE-Only Verification: Logic executes within a trusted Integritee enclave to verify item IDs, biometric unlocks, and SE-signed challenges.
    • Biometric-First Initiation: Recovery requests must be triggered by biometric confirmation on a mobile device to prevent programmatic replays.
    • Account Rotation: Successful recovery generates a new SE-based mobile proxy keypair and delegates the root account to it.
  2. Overview of the Asset Distribution Manager (ADM)

    The Asset Distribution Manager (ADM) is a bot-resistant distribution framework designed for digital asset campaigns. Unlike heavyweight proof-of-personhood systems, ADM focuses on raising the operational cost and reducing the scalability of abuse (such as scripted claiming and farming) while maintaining a low-friction onboarding experience compatible with wallet-native flows like deep links. It is intended to be a cost-raising distribution model rather than a global Sybil-resistance system.
  3. Overview of Interstellar Secure Web3 Account Framework (M1)

    The Interstellar secure Web3 account framework provides a decentralized, Substrate-based architecture designed for mobile-first users. It implements account abstraction and transaction control to support regulatory-grade standards such as DSP-SCA and WebAuthn/FIDO2. Key capabilities include:

    • Passwordless Onboarding: Instant user entry into the ecosystem.
    • Secure Authentication: Trusted authentication leveraging Secure Elements (SE).
    • Attested Transaction Validation: Ensuring transactions are validated through attested means.
    • Multi-option Recovery: Secure recovery mechanisms including cloud backup via garbled circuits and mobile-friendly recovery via NFC.
  4. Overview of the Interstellar Security Model

    Interstellar employs a strong adversarial model assuming the mobile operating system may be compromised. Instead of relying on malware detection, it uses cryptographic assurances anchored in hardware to create a secure enclave for authentication and transaction signing. The core philosophy is that security must be verifiable, hardware-anchored, and human-auditable.
  5. Overview of Trusted Action Links (TAL)

    Trusted Action Links (TAL) are an Interstellar architecture designed to turn low-friction links into secure entry points for wallet-native actions. Unlike standard redirects, a TAL acts as a contextual action surface that brings a user directly into a specific wallet state with the necessary action context, policy requirements, and validation flows.

    Key design principles include:

    • Entry Point: The link is an entry point into a flow, not the action itself.
    • Context Carrier: It carries information such as action type, target assets, value constraints, and validity windows.
    • Policy-Aware Trigger: It triggers the appropriate validation logic based on the sensitivity of the action.

    In the current M4 implementation, this is primarily delivered as campaign-scoped link handling within the Asset Distribution Manager (ADM) via app-native deep-link routing.

  6. Overview of Interstellar's Zero-Trust Security Architecture

    Interstellar is a security framework designed to protect sensitive transactions and authentication events on compromised devices where traditional wallet security (including MPC services and hardware wallets) may fail due to rootkits, overlay attacks, or app impersonation. Instead of attempting to detect malware, Interstellar employs a zero-trust decentralized architecture that renders malware useless by combining secure hardware, decentralized key orchestration, and human-auditable dynamic visual cryptography.
  7. Overview of Interstellar Web3 Account Features and Delivery

    Interstellar is developing advanced secure Web3 account features. These features will be delivered in two phases: first via a dedicated mobile wallet application, and subsequently via a mobile SDK to allow third-party wallet providers and decentralized applications (dApps) to integrate these capabilities on mobile platforms.
  8. Overview of Interstellar's Layered Architecture

    Interstellar uses a modular, composable architecture to handle secure transaction infrastructure across multiple blockchains. The system is designed with defined interfaces for each layer to allow for secure upgrades and the substitution of back-end components (such as signing schemes or enclave types) without affecting the overall system logic. The architecture ensures a strict separation between transaction intent, user validation, and signature execution.
  9. Overview of Interstellar Instant Onboarding

    Interstellar provides a seamless wallet creation process that removes traditional Web3 friction by eliminating the need for passphrases and seed backup during setup. It leverages mobile-native secure hardware and decentralized authentication to allow users to create a secure wallet instantly, improving conversion rates and user retention for Dapps and wallets while maintaining institution-grade security.
  10. Overview of Interstellar Recovery Architecture

    Interstellar uses a non-custodial, threshold-based recovery system executed within a Trusted Execution Environment (TEE). This architecture eliminates the need for mnemonic seed phrases, centralized custody, or external KYC providers. It supports biometric-first, multi-factor, and hardware-anchored workflows to ensure secure account restoration while maintaining self-custody.
  11. Overview of Interstellar Milestone 1 Features

    Milestone 1 of Interstellar's testnet development implements secure Web3 account features for mobile-first, self-custodial environments, aligned with DSP-SCA requirements. Key capabilities include:

    • Passwordless onboarding (no seed phrases or passwords).
    • Biometric unlock and Secure Element (SE) attestation for authentication.
    • SE-based signature confirmation for transaction and sensitive action validation.
    • Account recovery via secure cloud file backups and NFC tag-based recovery items.
  12. Overview of Interstellar Mobile Security and Visual Authentication

    Interstellar implements a security architecture focused on mobile-first authentication and phishing resistance. Key components include:

    • Mobile Security Innovations: Utilization of Secure Elements, biometric unlocking, and trusted execution environments to protect user identity and actions.
    • Visual Cryptographic Authentication (VCA): A system employing randomized keypads and dynamic message displays to prevent phishing and ensure regulatory alignment.