The answer to my question seems to be something called "enclaves".
https://blog.opensecret.cloud/opensecret-technicals/
Enclaves seem to be something like a Virtual Machine that has its memory and resources protected from prying eyes at the hardware level, even from the hypervisor running the VM.
However, even if you offer reproducible builds of these enclaves, how can anyone be certain that the current running enclave really is that same build?
kpr797 /
npub1as…rt7pd
2025-05-20 18:30:44
in reply to nevent1q…2k3c
Author Public Key
npub1asqr6hh9zqgpnudm33vxa9j54kafz0huzmczq5wrjavxjnmshmxs5rt7pdPublished at
2025-05-20 18:30:44Event JSON
{
"id": "bb51a0903350877af4166802cf895f79b3eb072e13a60a08e5caa8cb6a3f93ef",
"pubkey": "ec003d5ee5101019f1bb8c586e9654adba913efc16f02051c39758694f70becd",
"created_at": 1747765844,
"kind": 1,
"tags": [
[
"e",
"24bc5b8c60f5095bc9efb5efb994681f4e13cb5c43b93013037c8bce9b4e1e35",
"",
"root"
],
[
"e",
"a7d1e0a9a2fdd62daea3bc31595b8f6100019401c49df885c8618e2c1a5348d0",
"",
"reply"
],
[
"p",
"7dc38be721c89e9fd382d12555f45aa17efea3c89e9130c81c320f5b4f44066d"
],
[
"p",
"ec003d5ee5101019f1bb8c586e9654adba913efc16f02051c39758694f70becd"
],
[
"r",
"https://blog.opensecret.cloud/opensecret-technicals/"
]
],
"content": "The answer to my question seems to be something called \"enclaves\".\n\nhttps://blog.opensecret.cloud/opensecret-technicals/\n\nEnclaves seem to be something like a Virtual Machine that has its memory and resources protected from prying eyes at the hardware level, even from the hypervisor running the VM.\n\nHowever, even if you offer reproducible builds of these enclaves, how can anyone be certain that the current running enclave really is that same build?",
"sig": "1def26623562338277d221d6932c6c8d27d93f38ec05b87b0be9895ed7210542534bcc529feaedf69377857926539375ae5d6c7a15070b5a5ce832cc5a0960fa"
}