Digital-asset markets clear on venues that do not share a settlement layer. To trade on a venue a participant must pre-fund it; capital fragments across venues and principal risk accrues between trade and settlement. Orrery introduces a neutral settlement network: participants settle bilateral and multilateral obligations with delivery-versus-payment finality, without pre-funding each venue.
An obligation binds two legs — a delivery leg (a digital asset) and a payment leg (a stablecoin or tokenised cash). The ledger applies both legs in one atomic transition; partial application is impossible. Obligations entering a common settlement window are netted multilaterally, so each participant exchanges one net position per asset per window.
Keys are held as threshold-signature shares (t-of-n); no single share can sign. A signing request is first evaluated by a policy engine (allow-lists, limits, quorum, time-locks) enforced server-side and on-chain. Shares reside in HSMs operated by the participant or by Orrery on the participant's behalf. Recovery uses an operator-defined quorum.
A window closes deterministically; a settled obligation is irreversible. An obligation whose counter-leg does not arrive before the window closes simply does not settle — no leg is released. There is no state in which one side has delivered and the other has not.
Orrery Devnet is live for design partners. Independent security reviews are scheduled before mainnet beta. There is no token; the network is equity-funded. See the documentation to integrate on devnet.