Enclave attestation
Remote attestation over SEV-SNP / TDX proves code and key isolation before a session is trusted.
Security & attestation.
Hardware-rooted trust, verifiable at every layer.
company / securityEvery delegation is bound to a hardware enclave (AMD SEV-SNP / Intel TDX), so an agent carries provable authorization without ever exposing a master private key. Policies are attested in zero knowledge, and physical telemetry is anchored with C2PA before any value or machinery is released.
Attestation guarantees, threat models, and the economic security analysis are documented in the protocol specification. For audit coordination or a security disclosure, reach the team directly.
Guarantees.
Zero-knowledge policy
Policies verify in zero knowledge, so a gate is enforced without revealing the inputs behind it.
C2PA-anchored telemetry
Physical readings carry a content-provenance hash, so a settlement is tied to a verifiable event.
Responsible disclosure
If you believe you have found a vulnerability in the protocol, an enclave image, or a published package, report it privately before any public disclosure. We acknowledge reports quickly and coordinate a fix and release window with you.
- 01Report privately to security@arisma.network, with steps to reproduce.
- 02Acknowledge within one business day, with a tracking reference.
- 03Coordinate a fix, an enclave re-attestation if needed, and a disclosure date.