Run confidential compute in a TEE

Filter providers by vendor — TDX, SEV-SNP, Nitro, or NVIDIA GPU CC.

const providers = await tz.call("list_tee_providers", {
  vendor: "intel_tdx"
});

Inputs are sealed to the enclave's public key — only the running binary can decrypt.

const job = await tz.call("tee_submit_job", {
  provider: providers[0].did,
  image: "ghcr.io/acme/private-scorer:latest",
  inputs_sealed: encrypted
});

The job receipt carries a vendor-signed quote bound to the code measurement and output hash.

await tz.call("verify_tee_attestation", {
  quote: job.attestation, expected_measurement: codeHash
});

Only attested outputs unlock payment. The settlement engine refuses unsigned results.

await tz.call("tee_claim_result", { job_id: job.id });