Asphodel
asphodel.ai
Verifiable agent memory

Any model. Provably unaltered.


Asphodel gives an agent memory that is hash-chained and signed on every write, so you can prove afterwards that a record was not altered or removed. It sits beside the model over MCP rather than inside it, which is why it works the same with Claude, GPT, Llama or a local model — and why moving models does not cost you what your agent knows. Self-hosted, per install, never per seat.

Plans

Memory

The base. Per-tenant, hash-chained, SoulKey-signed memory your agent reads and writes over MCP — on your disk, verifiable by you.

$99

per month
  • Hash-chained store, signed on every write
  • Per-tenant isolation, one file per tenant
  • Works with any model, over MCP
  • Verified offline — no phone-home
  • No Sovereign tenancy

Sovereign

Everything in Memory, plus constitution-bound tenancy — the gated upgrade that lets an install provision SHI sovereign tenants of its own.

$299

per month
  • Sovereign tenancy provisioning
  • Constitution-bound tenants, halt semantics enforced
  • Memory included — read and write
  • Offline licence check, no phone-home
  • Unlimited installs under one licence term
Hosted Memory is withdrawn. A fourth card stood here offering Memory "operated by us" at $249 a month, $2,490 a year, and said the price was real. There is no hosted Asphodel rung and there is not going to be one: Saluca sells software you run in your own environment and does not run the tool for anyone. The rung was retired on 2026-09-12 and both its prices were archived in Stripe the same day; the card should have come down then and did not.

Nobody could ever have bought it here. There was no Buy button and no plan behind it, only an invitation to write to sales, so nobody subscribed, there is nothing to refund and there is no account to move. Memory at $99 above is the same store and the same hash chain, licensed for you to run; if you want someone else to operate it, run it wherever you already operate software rather than waiting for us to.
The Security Council bundle is withdrawn. It was sold here at $299 a month as a hosted service. It is no longer for sale, it cannot be bought anywhere, and it is not coming back. Council only ever worked hosted, because the corpora it convenes are not in the self-hosted image; the host that ran it was retired on 2026-08-26 when Saluca decided it does not operate services for customers. We should have taken the card down that day and did not. Nobody ever subscribed, so there is nothing to refund and no account to move.

The security knowledge it bundled is unaffected and is sold by the corpus on mindsets.asphodel.ai: the CISO, CISSP and CCSP corpora are live there today, and the Security Suite tier carries all three plus NIST 800-53 and Compliance for less than Council cost. Cross-corpus fan-out is part of that product and is not charged for separately.
Annual is ten months. Two months free, the same terms as the rest of the Saluca family. Prices are USD list; the price at checkout governs.

What "provably unaltered" means here

Not a promise about our conduct — a property you can check without us.

ClaimWhat actually enforces it
UnalteredEvery write extends a hash chain. Change or remove an earlier record and every later hash stops matching. Detection does not depend on our logs, or on us.
AttributableEach entry is signed by the tenant's own SoulKey, so the record carries who wrote it, not just what was written.
YoursSelf-hosted. One SQLite file per tenant, on your disk, in your backups. We cannot read it and cannot lose it for you.
Any modelIt is an MCP server beside the model, not a fine-tune inside one. Switching models keeps the memory; a fine-tune does not survive the base model it was trained on.
OfflineThe licence is an Ed25519 JWT verified against a key baked into the image. The product makes no outbound call to run.
If you are keeping records under SEC 17a-4 or FINRA 4511, the relevant words are "a complete time-stamped audit trail" covering modifications and deletions, and being able to download a record and its audit trail. That is close to a description of what this stores. We are giving you the mechanism, not a compliance opinion — take the design to your own counsel.

What happens after you pay

StepHow it works
1. PayCard, monthly or annual. Stripe takes the payment; we never see the card.
2. LicenceMinted automatically and emailed to the address you pay with, in seconds. It is an Ed25519 JWT your install verifies offline — no phone-home.
3. PullThe same licence is your registry credential. docker login registry.saluca.com with it, then pull salucallc/asphodel and run it with ASPHODEL_LICENSE.

If the email does not arrive, write to sales@saluca.com with the address you paid with. Nothing is lost — an undelivered licence is re-sent, it is not silently written off. Full instructions: docs.asphodel.ai/self-host.html.

What the licence controls

CapabilityMemorySovereign
Memory (read and write)YesYes
Sovereign tenancy provisioning-Yes
Pull from registry.saluca.comYesYes

The licence is checked offline against a public key baked into the build. Asphodel never calls home — and it refuses a licence issued for any other product in the family, so this one is only good here.

Support window

Once a version carries a support window it receives fixes while it is the current minor version or the one before it, and for 12 months from its release date, of which the final 3 months are security fixes only. A new minor version is never published less than six months after the previous one, which is what keeps those 12 months honest.

The window starts at Asphodel 1.0, which is not published yet. Every Asphodel version published so far is a 0.x and is outside it. Your purchase entitles you to every version published during your paid term, including the first one that carries the window.

The full policy, and it is the only place these terms are written, is at legal.saluca.com/version-support. Reaching a human about anything else is support.saluca.com.