Isolated Hardware Enclaves.
Execute code where neither cloud providers, hypervisors, nor host administrators can inspect memory or alter state.
What is an Execution Enclave?
Traditional cloud applications run on shared operating systems where cloud administrators and hypervisors possess root access to memory. In high-value commercial commerce, AI agent trading, and proprietary algorithms, this architecture creates catastrophic counterparty and host vulnerability.
Corbel leverages Intel Trust Domain Extensions (TDX) and AMD SEV-SNP to instantiate isolated execution environments enforced directly by CPU silicon. Cryptographic memory encryption keys are generated randomly by the processor and never leave the hardware die.
Attestation Quotes (MRENCLAVE)
Before any sensitive transaction is dispatched, the hardware produces a cryptographic signature (Quote) proving that the exact, untampered binary code is loaded inside genuine silicon.
Per-Session Child Keys
Every client connection receives a single-use ephemeral session key bound directly to the hardware quote. Even if a host machine reboots, previous sessions cannot be inspected or decrypted.
Ready to Deploy Your First Hardware Enclave?
Test your code in the Corbel Developer Sandbox with 100,000 free monthly requests.
CLAIM SANDBOX API KEY →