ORBIT is a rotating savings & credit association (ROSCA — locally known as "Ajo") built on Stellar Soroban, with staked collateral and member-voted default slashing to make trustless group savings viable on-chain.

A group of members ("an orbit") each contribute a fixed amount every round; each round, the full pot is paid out to one member, until everyone has been paid once. ORBIT adds two things a plain ROSCA doesn't have: collateral staked upfront (so a member can't walk away after receiving their payout without also losing something), and on-chain dispute resolution where the group itself votes to slash a defaulter's stake.

                 ┌────────────────────┐
  create_orbit → │   orbit-factory     │  deploys one orbit-contract
                 │  (one per protocol) │  instance per group, tracks
                 └─────────┬──────────┘  all deployed addresses
                            │ deploy_v2
                            ▼
                 ┌────────────────────┐
                 │   orbit-contract    │  one instance per savings
                 │  (one per group)    │  group: membership, stake,
                 └─────────┬──────────┘  contributions, payouts, disputes
                            │ getEvents (poll)
                            ▼
                 ┌────────────────────┐
                 │   orbit-backend     │  indexes events → Postgres,
                 │ (indexer + API +ws) │  serves REST reads, builds
                 └─────────┬──────────┘  unsigned tx XDR (non-custodial)
                            │ (not yet wired)
                            ▼
                 ┌────────────────────┐
                 │   orbit-frontend    │  member app + admin portal
                 │  (fully simulated)  │  — currently faked client-side
                 └────────────────────┘

Current status: contracts and backend are deployed and tested end-to-end against Stellar testnet. The frontend is a complete UI/UX simulation that has not yet been wired to either, though its Dashboard surfaces the real testnet contract addresses as verifiable links rather than hiding them behind a simulated layer — see each repo's README for exact status. For the fullest write-up — all three repos explained together plus a step-by-step, [LIVE]/[SIMULATED]-tagged walkthrough of the whole protocol — see orbit-frontend/ARCHITECTURE.md.

1. orbit-factory.create_orbit — anyone can deploy a new group, configuring token, contribution amount, frequency, payout order (Fixed / Random / Auction), stake percentage, round count, and grace period.
2. add_member (admin) — seats members at rotation slots while the group is Pending.
3. lock_stake (member) — each member posts their collateral (contribution_amount × stake_bps) upfront, before the group can go live. This is what makes slashing meaningful even against a member who defaults on round 1.
4. activate (admin) — once every slot is filled and staked, the group goes Active and round 1 starts.
5. contribute (member, every round) — once every active member has contributed, the round auto-settles in the same transaction: the pot is paid to that round's recipient (fixed order, weighted-random, or lowest auction bid, depending on config).
6. propose_dispute → vote_slash / finalize_dispute — if a member misses the grace period, any other member can raise a dispute; the group votes, and an approved dispute slashes the defaulter's stake into the pot and marks the round settled so the cycle isn't stuck.

Full method-level detail, testnet contract addresses, and build/deploy instructions live in orbit-contracts.

Each repo is independently runnable — see its README:

• orbit-contracts — Rust + stellar CLI
• orbit-backend — Docker Postgres + Node
• orbit-frontend — Node, no env vars required

All three repos are MIT licensed.