A layer that lets an ordinary application run inside an enclave without being rewritten.
Enclaves cannot make system calls directly. A library operating system sits inside the enclave and provides what the application expects. Gramine, Occlum and SCONE are examples.
The benefit is speed: an existing database or model server runs protected within days. The cost is size. The library operating system is inside the boundary, so it is part of the TCB and part of the measurement.
A manifest lists which files and settings are trusted. That manifest decides what attestation proves. Change one trusted file and the measurement changes, which is the moment to attest again.
Attested cloud workloadsAttested AI
Working on re-attestation for your product? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.