Skip to content

feat(patterns): add TEE-based privacy pattern - #44

Merged
oskarth merged 1 commit into
masterfrom
feature/pr-004-tee-privacy-pattern
Jan 14, 2026
Merged

oskarth merged 1 commit into
masterfrom
feature/pr-004-tee-privacy-pattern

Conversation

@oskarth

@oskarth oskarth commented Jan 14, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Add foundational pattern-tee-based-privacy.md documenting TEE trust models and failure modes
  • Cover Intel SGX, AMD SEV-SNP, AWS Nitro, Azure Confidential Computing
  • Include upgrade paths to MPC/ZK alternatives

Details

Field Value
Status draft
Maturity pilot
Layer offchain
Size 149 lines

Key sections:

  • Trust Model table (who must be trusted + mitigations)
  • Failure Modes table (6 attack vectors)
  • When TEEs Are Appropriate (use case fit)
  • Upgrade Paths (TEE → MPC/ZK)

Test plan

  • node scripts/validate-patterns.js passes
  • All required sections present
  • Links to related patterns (TEE Key Manager, TEE+ZK Settlement, MPC Custody)

Closes #28
Implements PR-004 from PRD Sprint 1.

- Document trust model for SGX, SEV-SNP, Nitro, Azure CC
- Include failure modes table (supply chain, side-channel, rollback)
- Add upgrade paths to MPC/ZK alternatives

Closes #28
@oskarth
oskarth requested review from Meyanis95 and mojalil January 14, 2026 06:34
@Meyanis95

Copy link
Copy Markdown
Contributor

LGTM!

@oskarth
oskarth merged commit afe5e82 into master Jan 14, 2026
3 checks passed
@oskarth
oskarth deleted the feature/pr-004-tee-privacy-pattern branch January 14, 2026 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: document TEE-based privacy patterns and their failure modes

2 participants