CoreLink

Shared content-addressable cache for builds, packages, and ML.

A shared content-addressable cache, finally built for multi-tenant teams.

CoreLink deduplicates and audits the blobs your CI, your registries, and your model store re-upload a hundred times a day — across regions, across workloads, across teams — with cryptographic tenant isolation and an append-only Merkle audit chain.

No card required to start · Free tier with R2 zero-egress

See it in 90 seconds

Demo coming soon

A 90-second walkthrough: point your build cache at CoreLink, watch a cold build go warm, and read the signed audit trail.

Tenant isolation, modelled in TLA+.

The difference between marketing-language multi-tenant and actually-multi-tenant is a formal proof. CoreLink keeps a TLA+ specification of cross-tenant byte non-leakage and runs it in CI on every change. If the safety property regresses, the build fails. We don't trust ourselves to get this right by code review alone.

  • BLAKE3 + SHA-256 content addressing
  • Per-tenant CAS namespace, isolation-by-construction
  • Tenant boundary verified in CI on every commit

Audit you can actually prove.

Every CAS read and write appends to a per-tenant append-only Merkle log. Each entry is Ed25519-signed. The full log is replayable. You can answer the auditor's question — what happened on this artefact, when, and has anything been retro-edited? — with a cryptographic proof, not a vendor's word.

  • Append-only Merkle log per tenant
  • Ed25519 signatures on every entry
  • Replayable from any verified anchor

Four regions. Residency you control.

Active in US-East, EU-West, AP-Southeast, and AU-East on Cloudflare R2 + Workers + D1. Reads route locally; writes converge globally; residency policies are enforced per tenant — not assumed and not opt-in. EU bytes stay in EU. AU bytes stay in AU.

  • 4 active regions on Cloudflare's edge
  • Per-tenant residency policy (region-pin or replicate)
  • Schrems-II-aware routing

Stop re-uploading the same bytes. Start with CoreLink.