Containers

Parma adds less than one percent overhead beyond the underlying TEE while ensuring a security invariant over all reachable states of the container group.

Lift-and-shift deployment of unmodified containers with strong security guarantees, using VM-level isolation and attested execution policies.