Cargo Registry FAQ
Frequently asked questions about the Archipelag.io Cargo Registry
Cargo Registry FAQ
Common questions about publishers, Cargos, trust, and verification.
General
What is a Cargo?
A Cargo is a containerized application — a signed workload container — that runs on the Archipelag.io network. Cargos process jobs submitted by users — like answering chat prompts, generating images, or running computations.
Who can publish Cargos?
Anyone with a verified email can publish up to 3 Cargos. Higher tiers unlock more Cargos and capabilities. See Publisher Tiers.
How do I find Cargos?
Browse the Cargo Registry to discover Cargos. Use filters for category, trust level, and capabilities.
Are Cargos safe to use?
All Cargos undergo security scanning. Higher trust levels indicate more verification. See Security for details on our safety measures.
Trust & Verification
What do the badge colors mean?
| Color | Trust Level | Meaning |
|---|---|---|
| Gray | 0 - Sandbox | Unverified, restricted |
| Blue | 1 - Community | Scan passed, community used |
| Green | 2 - Verified | Platform reviewed & signed |
| Purple | 3 - Official | First-party Cargo |
See Trust Levels for complete details.
How do I get my Cargo verified?
- Reach Trust Level 1 automatically (pass scans, 100+ jobs)
- Request Level 2 review (requires Organization tier)
- Staff reviews and signs if approved
See Verification Guide.
Can trust levels go down?
Yes. Trust levels can be demoted for:
- New vulnerabilities found in rescans
- Poor performance (low success rate)
- Policy violations
- Security incidents
What’s the difference between trust level and reputation?
Trust level measures verification status (scanning, signing, review). Reputation measures runtime performance (success rate, reliability).
A Cargo can be highly verified but have poor reputation (buggy), or lightly verified but have great reputation (reliable).
Publishers
How do I become a Verified publisher?
Verify your identity through Stripe Identity or connect an established GitHub account. See Publisher Tiers.
How do I become an Organization publisher?
Verify your company domain via DNS TXT record and provide organization details. See Publisher Tiers.
What are the Cargo limits per tier?
| Tier | Max Cargos |
|---|---|
| Individual | 3 |
| Verified | 10 |
| Organization | Unlimited |
| Partner | Unlimited |
Can I have multiple publishers?
Each account has one publisher profile. Organizations can add team members to share Cargo management.
Security
What vulnerabilities block publication?
- Critical: Always blocked
- High: Max 5 for Level 1, must be 0 for Level 2+
Medium and low vulnerabilities are reported but don’t block.
How often are Cargos rescanned?
All published Cargos are rescanned weekly. New vulnerabilities trigger automatic notification and may affect trust level.
Can I see what’s in a Cargo?
Yes. Every Cargo has an SBOM (Software Bill of Materials) listing all packages. Available from the Security tab.
What if I find a security issue?
Report to security@archipelag.io or use our bug bounty program.
Reputation
How is reputation calculated?
Reputation (0.0-5.0) is based on:
- 60% job success rate
- 25% reliability over time
- 15% user feedback
See Reputation for details.
What reputation score is “good”?
| Score | Rating |
|---|---|
| 4.0+ | Excellent |
| 3.0-3.9 | Good |
| 2.0-2.9 | Fair |
| 1.0-1.9 | Poor |
| Below 1.0 | At risk |
Can reputation be reset?
No. Reputation accumulates over time. Focus on fixing issues — recent good performance has more weight than old problems.
What happens at low reputation?
- Below 1.5: Warning to publisher
- Below 1.0: Trust level demotion
- Below 0.5: Cargo suspension
Cargo Resources
What resources can my Cargo use?
Depends on publisher tier and trust level:
| Trust Level | RAM | CPU | Duration |
|---|---|---|---|
| 0 (Sandbox) | 256MB | 1 | 60s |
| 1 (Community) | 1GB | 2 | 5min |
| 2+ (Verified) | 8GB | 4 | 30min |
Can Cargos access the network?
- Trust Level 0-1: No network access
- Trust Level 2+: Outbound connections only
Can Cargos use GPUs?
GPU access requires Partner tier. Contact partners@archipelag.io.
Updates & Changes
How do I update a Cargo?
Push a new container tag, then update the Cargo version in your dashboard. Trust Level 2 Cargos need re-review for updates.
What happens to running jobs during updates?
Running jobs complete on the old version. New jobs use the new version after it’s published.
Can I delete a Cargo?
Yes, from My Cargos → Settings → Delete. Running jobs complete first. Deletion is permanent.
Support
Where can I get help?
- Documentation: You’re here!
- Community Discord: Join
- Email Support: support@archipelag.io
- GitHub Issues: archipelag-io/feedback
How do I report a problem with a Cargo?
Click Report Issue on the Cargo page. Include:
- What you expected
- What happened instead
- Job ID (if available)
How do I appeal a decision?
Contact support@archipelag.io with:
- Your account/Cargo ID
- The decision you’re appealing
- Why you believe it should be reconsidered
Still Have Questions?
If your question isn’t answered here, ask in our Discord community or email support@archipelag.io.