arisma.network
Whitepaper Request access

Edge Enclave SDK.

Hardware-scoped enclave keys and the Rust integration.

developers / sdk

The edge-enclave SDK binds every session key to a hardware enclave (AMD SEV-SNP / Intel TDX), so an agent or machine carries provable authorization without ever exposing a master private key. It is the Rust foundation under the MCP server.

Install

cargo add arisma-edge-enclave

Delegate, attest, settle

use arisma_edge_enclave::{Enclave, Erc7702Session, Scope, Asset};

let enclave = Enclave::attach("tee:sev-snp")?;
let session = enclave.delegate(Erc7702Session {
    scope: Scope::Settle, ttl: 900,
})?.attest()?;

let receipt = session.settle("drone:fleet-04", Asset::Usdc, cents(14)).await?;

Capabilities

  • ›Enclave-bound keys: session keys never leave SEV-SNP / TDX.
  • ›Remote attestation: prove code and key isolation before trust.
  • ›Zero-knowledge policy: enforce gates without revealing inputs.
  • ›C2PA anchoring: tie a settlement to a verifiable physical event.
Request API & enclave accessQuickstart