TEA: TEE attestation · Edge gateways · Anchor on Solana. Solana SVM settles; TEEs compute; digests only — never put GPU on-chain. Source: Solizardking/tea (public cut of clawd-tee).
Zero-std Rust program. Instructions: InitCounter (0), StoreProof (1, V1), StoreProofV2 (2). V2 stores a 372-byte TeeProofV2 PDA seeded by the signed payload hash, binding request ‖ response ‖ model ‖ nonce — plus sharded ProofCounterDay counters so proofs never fight over one global account.
Rust/axum OpenAI-compatible proxy. Each inference is hashed, signed inside the TEE boundary (secp256k1), attested (Intel TDX quote + NVIDIA NRAS for H100/H200 CC), and anchored via StoreProofV2 when a Solana keypair is configured. Replies carry a _clawd proof block + receipt headers. Hosted instance: clawd-tee-gateway-production.up.railway.app — live (checked from this desk 2026-11-13: ok:true, signing address 0x12d221eb…24209f; on-chain anchoring currently disabled on the hosted instance and SAS not yet initialized there — stated plainly, as the repo demands).
The redpill-verifier engine verifies TEE hardware across providers — Phala, NearAI, Chutes, Tinfoil — DCAP quote checks, signature verification, on-chain proof lookup. clawd-verifier (@clawd/tee-verifier) unifies verify + anchor in one package. Rewritten for self-hosted SVM anchoring, not someone else's black box.
The Arm TrustZone twin: an OP-TEE trusted application exposing the same signed_payload_hash shape as the TDX path, so TDX, OP-TEE, and future providers share one StoreProofV2 account model. Host ↔ TA ABI in optee/include/clawd_ta.h.
Verification levels stored on every TeeProofV2:
| Anchor | Address | Status |
|---|---|---|
| CLAWD-TEE proof program (live, per hosted gateway) | HvXe5RpCcduVYJWDyavmNKde4uEgUFEiYz99JYQT4DkP | devnet · executable — verified 2026-11-13 |
| Repo-default REDPILL_PROGRAM_ID | BnoUSPTE88ebzLb74RAnTogddDMzyBPtkmKxiRoRJG4L | declared in repo config — account not found on devnet/mainnet public RPC, checked 2026-11-13 |
| Solana Attestation Service (SAS) | 22zoJMtdu4tQc2PzL74ZUT7FrwgB1Udec8DdW4yw4BdG | mainnet · live (Solana Foundation) — verified 2026-11-13 |
Privacy-first DeFi on Solana: Zcash Sapling shielded wallets, encrypted pools, TEE agents attested via SAS. Source: Solizardking/Dark-Defi-1 · themusebook/dark402 · Dark Payments
| Program | Address | Cluster · status |
|---|---|---|
| Dark Percolator — private perps engine (Dark family) | Cf8dRz9xhvdwU825LBu6SGHa3gcHMiJwVh8LciJK1hPz | devnet · executable — verified 2026-11-13 |
| Dark Percolator — Market 0 | 64kBzfr4wFLLiNBAh5iZ1xQLsEpFvAmqETFArkUKSccN | devnet · market account exists — verified 2026-11-13 |
| Dark Protocol — shielded balances / encrypted assets | 3KWLFYco7T2rUZkzjSSthjHGmbWmo9HAsRmvupDTomGC | devnet · executable — verified 2026-11-13 |
| Dark Shielded Wallet program | 4753b1cCrPzwr7taWWD8yrcM8dc98fTR7wCFdv1TsAbg | devnet · executable — verified 2026-11-13 |
| Dark Protocol note pool — Anchor program (deposit · withdraw · shielded_transfer) | E8zL7h9qHjC7sMf2WCYhdqS5iLkYhPJ9yAhTfevo74jm | devnet · built + executable — mainnet deploy pending funding (repo status) |
| Solana Attestation Service — Dark agent identity + inference receipts | 22zoJMtdu4tQc2PzL74ZUT7FrwgB1Udec8DdW4yw4BdG | mainnet · live (Solana Foundation) |
Status chips above attempt a live read-only getAccountInfo from your browser against the public Solana RPC on load. If the read can't complete, the chip falls back to the desk-verified facts dated 2026-11-13 — nothing here is faked live. Credential name for Dark agent attestations: Dark Protocol Agents.
ShieldedWallet (deposit / transfer / balance), Sapling ZIP-32 HD keys, ChaCha20-Poly1305 note encryption, CommitmentTree + NullifierSet, PrivateSwapManager (Jupiter Ultra), price oracle. npm i @openclawdsol/dark-protocol-sdk
Confidential agents in TEEs: ClawdTeeAgent — sealed converse + shielded trade, quote verification before a single byte is sent, x402 dark-shielded payments, SAS identity + inference receipts.
Low-level protocol primitives: DarkProtocolClient, Sapling + note-encryption modules, privacy utilities, swap routing, AIAgentManager. Umbrella meta-package: dark-defi. SAS client (sas-lib) ships as a local workspace package.
Dark Payments (umbrella) — live at percolator.musebook.trade. Dark x402 — shielded x402 settlement, code public at themusebook/dark402. Dark Percolator / Dark Perps — private perps on the devnet program above. dark-x402-terminal — the cypherpunk CLI in the Dark-Defi-1 tree.
Attested-inference console for trading analysis. Prompts are sent to our own server-side proxy (/api/redpill/chat), which forwards them to the RedPill TEE gateway (api.redpill.ai, OpenAI-compatible) — the API key never touches your browser. Inference runs inside provider TEEs in the RedPill lineage (Phala / NearAI / Chutes / Tinfoil).
If the model proposes a trade, its parameters are transcribed here as an unsigned description for your own review. Submitting anything on-chain remains a separate, manual, wallet-signed step outside this terminal.