How an SMB uses Constellation

1. Step 1
   Open Constellation

   You are on the SMB Pilot workspace. The application layer is built for real organizations; the blockchain layer stays in Testnet Preview until a real mainnet exists.

2. Step 2
   Start on Free — no bank account

   POST /api/v1/onboarding with { "orgName": "Your Company", "plan": "free" }. No credit card. You get real workspace, projects, members, and limited AI/automation quotas.

3. Step 3
   Sign in with Galaxia ID

   Use a Galaxia ID access token (Bearer) against /api/v1 routes. Organization roles never come from the token — membership in our database is authoritative.

4. Step 4
   Create your organization

   POST /api/v1/orgs with { "name": "Your Company" }. You become the owner. Every project, audit event, and API key is scoped to that organization.

5. Step 5
   Invite your team

   Owners and admins invite members with least-privilege roles: owner, admin, member, or viewer. Revoked members lose access immediately.

6. Step 6
   Work only on your data

   Projects, usage, and audit logs are tenant-isolated with PostgreSQL Row Level Security. Cross-organization access returns 403.

7. Step 7
   Expect honest status

   If a provider is unavailable you will see NOT_CONFIGURED or DEGRADED — never fake balances, fake validators, or fabricated mainnet activity.

What you will never see

• Another organization's projects or audit trail
• Fake TPS, fake validators, or invented mainnet confirmations
• Silent fallback to in-memory production data
• Client-trusted organization IDs or forged JWT roles