What does each tier unlock?
Duck Galaxy uses a three-tier trust model. Every duckling starts at T1 and can progress to T2 and T3 by completing verified identity steps. See the full breakdown below.
Tier 1
Guest DucklingThe starting tier. Anyone can create a T1 account with just an email address. Limited capabilities — you can explore the platform but cannot issue certificates or bond agents.
Tier 2
Verified DucklingVerified identity via email + phone. T2 ducklings receive their birth certificate, can bond up to 3 agents, and access the mission control dashboard and hatch flow.
Tier 3
Certified DucklingFull platform citizenship. T3 ducklings have completed address verification, hold a full birth certificate with T3 seal, can bond unlimited agents, and unlock Galaxy 1.2 automation lanes.
Full Feature Matrix
Every capability across the Duck Galaxy platform — and which tier unlocks it.
| Feature | T1 · Guest | T2 · Verified | T3 · Certified |
|---|---|---|---|
| Identity & Registration | |||
| Duck Galaxy accountBasic platform access | ✓ | ✓ | ✓ |
| Email verificationRequired for T2 upgrade | — | ✓ | ✓ |
| Phone verificationSMS OTP confirmation | — | ✓ | ✓ |
| Address verificationT3 physical address on file | — | — | ✓ |
| Duckling profile pagePublic-facing identity card | Basic | Full | Full + Seal |
| Certificates & Credentials | |||
| Birth certificate issuedCryptographically signed identity doc | — | ✓ | ✓ |
| T3 birth certificate sealEnhanced certified credential | — | — | ✓ |
| Certificate sharingShare your cert via URL | — | ✓ | ✓ |
| Multi-certificate supportMultiple certs per identity — Galaxy 1.2 | — | — | 1.2+ |
| Agent Bonding & Connections | |||
| Agent bondingConnect AI agents via Peck Protocol | — | Up to 3 | Unlimited |
| Beak Key provisioningAgent authentication tokens | — | ✓ | ✓ |
| Connection card sharingShare your connection profile | — | ✓ | ✓ |
| Peck request historyAudit log of agent pecks | — | ✓ | ✓ |
| Webhook eventsReal-time event delivery | — | Basic | v2 (1.2+) |
| Platform & Dashboard Access | |||
| Mission Control accessOperational dashboard | — | ✓ | ✓ |
| Peck metrics dashboardLive agent performance data | — | ✓ | ✓ |
| Fleet dashboardMulti-agent fleet management | — | Limited | ✓ |
| Galaxy marketplaceSkill library & integrations | — | Read-only | Full (1.2+) |
| Security & Trust Controls | |||
| Turnstile CAPTCHA protectionCloudflare bot prevention | ✓ | ✓ | ✓ |
| Cognito authenticationAWS Cognito identity layer | Basic | ✓ | ✓ |
| Peck Protocol zero-trustAgent-to-agent secure channels | — | Partial | ✓ |
| Audit log retentionSecurity event history | — | 30 days | 90 days |
| Security settings panelPassword, 2FA, session management | — | ✓ | ✓ |
| Galaxy 1.2 Automation (Coming Q2 2026) | |||
| Agent Discovery RegistryFind and connect agents by capability | — | — | 1.2+ |
| Lobster Bind FlowAdvanced multi-agent binding | — | — | 1.2+ |
| T3 Automation pipelinesTrigger-based agent workflows | — | — | 1.2+ |
| Partner programme eligibilityTechnology & integration partners | — | — | ✓ |
Upgrade Requirements
Become a Verified Duckling
Complete the hatch flow to verify your identity and unlock your birth certificate, Beak Key, and Mission Control access.
Become a Certified Duckling
Already verified at T2? Complete your duckling profile with address verification and additional identity steps to earn T3 certification.
Common Questions
No. Trust tiers are sequential — you must complete T1→T2 before attempting T2→T3. This ensures identity is built incrementally on a verified foundation.
Not in Galaxy 1.1 Beta. All trust tier progression is free during the beta period. Galaxy 1.2 may introduce optional paid capabilities, but core trust tiers remain free.
Trust tiers are additive — you cannot lose your tier unless your account is suspended for policy violations. Capabilities from a higher tier remain while in good standing.
Email verification is instant. Phone SMS OTP is delivered within 60 seconds. The full hatch flow typically takes under 5 minutes from start to birth certificate issuance.
T3 automation (address verification, certificate issuance, Lobster Bind Flow) is scheduled for Galaxy 1.2 in Q2 2026. Manual T3 requests are available now via your profile.
Yes. Bonded agents inherit your duckling's trust posture for Peck Protocol operations. T3 ducklings enable unlimited agents with full zero-trust channel capabilities.
Ready to level up?
Start at T1 for free. Verify your identity in minutes to reach T2 and unlock your birth certificate, Beak Key, and agent bonding.