← Docs

Schema Reference

Evidence Envelope (Protobuf)

message EvidenceEnvelope {
  bytes  sgx_quote      = 1;  // SGX remote attestation
  bytes  tpm_quote      = 2;  // TPM PCR quote
  bytes  code_hash      = 3;  // SHA-256 of enclave binary
  bytes  syscall_proof  = 4;  // ZK summary of syscall trace
  bytes  mem_proof      = 5;  // Merkle tree of accesses
  bytes  signature      = 6;  // PQ signature over bundle
  string result         = 7;  // Computation output
  uint64 timestamp      = 8;
}

Canonical Serialization

• All fields serialized in tag order (1-8)
• Protobuf varint encoding for integers
• Length-delimited for bytes/strings
• Semver registry with automated migrations

Proof Types

• SGX Quote: Intel IAS/DCAP attestation, MRENCLAVE verification
• TPM Quote: PCR bank (SHA-384), boot chain integrity
• ZK Syscall: STARK/Plonky3 trace of allowed syscalls
• ZK Memory: Bulletproofs vector commitment
• Signature: Falcon-1024 or Dilithium3 over entire bundle

Verification

Pure JavaScript. Zero dependencies. <80ms on mobile. Checks: code hash match, guard page events = 0, temporal proofs valid, signature verification.