Confidential Computing

The ideas behind Parma, explained like we’re sitting at a bar and you asked me what I’d been working on.

Parma adds less than one percent overhead beyond the underlying TEE while ensuring a security invariant over all reachable states of the container group.

Lift-and-shift deployment of unmodified containers with strong security guarantees, using VM-level isolation and attested execution policies.