aimarket-tee 2.0.0__tar.gz

aimarket_tee-2.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AI-Factory Project Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

aimarket_tee-2.0.0/PKG-INFO

@@ -0,0 +1,71 @@
+Metadata-Version: 2.4
+Name: aimarket-tee
+Version: 2.0.0
+Summary: TEE-attested execution (AWS Nitro Enclaves / Intel TDX)
+License: MIT
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: aimarket-hub>=3.0.0
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == "dev"
+Dynamic: license-file
+
+# aimarket-tee
+
+## Documentation
+
+| Document | Description |
+|----------|-------------|
+| [User guide](docs/user-guide.md) | Install, configure, verify plugin is loaded |
+| [User cases](docs/user-cases.md) | Personas and cross-plugin workflows |
+| [SDK integration](docs/sdk-integration.md) | Code examples and hook behavior |
+
+---
+
+**TEE-attested execution for AI capabilities. AWS Nitro Enclaves / Intel TDX.**
+Before invoke, the server sends a cryptographic attestation report: "this code runs in an encrypted hardware enclave. I physically cannot see your input." Receipts are signed by the enclave key. Unlocks enterprise, legal, medical, and finance verticals.
+
+## When to Use
+- **Confidential AI processing** — consumer sends sensitive data (PII, legal docs, medical records), provider can't see it
+- **Enterprise compliance (GDPR/HIPAA/FedRAMP)** — attestation report proves code integrity and data isolation
+- **Third-party model hosting** — model owner deploys to enclave, hub operator can't extract weights
+- **Regulated industries** — prove to auditors that execution happened in certified hardware
+
+## Installation
+```bash
+pip install aimarket-tee
+```
+
+## API Endpoints
+No additional API endpoints. Activated automatically via invoke flow — attestation is attached to every invocation response.
+
+## End-to-End Example
+```python
+from aimarket_tee.tee_attestation import TEEAttestationService, EnclavePlatform
+
+service = TEEAttestationService(platform=EnclavePlatform.AWS_NITRO)
+
+# Execute capability inside enclave — provider sees only hashes
+result = service.execute_with_attestation(
+    capability_id="legal.review@v1",
+    product_id="prod-legal",
+    input_payload={"documents": {"nda": "CONFIDENTIAL: review this NDA..."}},
+    code_identifier="legal-review-v2.0.0-githash-abc123",
+    price_usd=5.00
+)
+
+print(result["attestation"]["platform"])  # aws_nitro
+print(result["attestation"]["code_hash"])  # sha256 of code
+print(result["receipt"]["input_hash"])     # sha256 of input (provider never sees plaintext)
+print(result["enterprise_compliance"]["gdpr"])  # "Input never leaves enclave in plaintext"
+```
+
+## Security
+- **Code hash verification** — consumer verifies the exact code running in enclave
+- **Input confidentiality** — provider sees only SHA-256(input), never plaintext
+- **Output signed by enclave key** — verifiable proof of correct execution
+- **Attestation TTL** — 5 minutes by default, prevents replay attacks
+
+## License
+MIT · Maintained by AI-Factory

aimarket_tee-2.0.0/README.md

@@ -0,0 +1,58 @@
+# aimarket-tee
+
+## Documentation
+
+| Document | Description |
+|----------|-------------|
+| [User guide](docs/user-guide.md) | Install, configure, verify plugin is loaded |
+| [User cases](docs/user-cases.md) | Personas and cross-plugin workflows |
+| [SDK integration](docs/sdk-integration.md) | Code examples and hook behavior |
+
+---
+
+**TEE-attested execution for AI capabilities. AWS Nitro Enclaves / Intel TDX.**
+Before invoke, the server sends a cryptographic attestation report: "this code runs in an encrypted hardware enclave. I physically cannot see your input." Receipts are signed by the enclave key. Unlocks enterprise, legal, medical, and finance verticals.
+
+## When to Use
+- **Confidential AI processing** — consumer sends sensitive data (PII, legal docs, medical records), provider can't see it
+- **Enterprise compliance (GDPR/HIPAA/FedRAMP)** — attestation report proves code integrity and data isolation
+- **Third-party model hosting** — model owner deploys to enclave, hub operator can't extract weights
+- **Regulated industries** — prove to auditors that execution happened in certified hardware
+
+## Installation
+```bash
+pip install aimarket-tee
+```
+
+## API Endpoints
+No additional API endpoints. Activated automatically via invoke flow — attestation is attached to every invocation response.
+
+## End-to-End Example
+```python
+from aimarket_tee.tee_attestation import TEEAttestationService, EnclavePlatform
+
+service = TEEAttestationService(platform=EnclavePlatform.AWS_NITRO)
+
+# Execute capability inside enclave — provider sees only hashes
+result = service.execute_with_attestation(
+    capability_id="legal.review@v1",
+    product_id="prod-legal",
+    input_payload={"documents": {"nda": "CONFIDENTIAL: review this NDA..."}},
+    code_identifier="legal-review-v2.0.0-githash-abc123",
+    price_usd=5.00
+)
+
+print(result["attestation"]["platform"])  # aws_nitro
+print(result["attestation"]["code_hash"])  # sha256 of code
+print(result["receipt"]["input_hash"])     # sha256 of input (provider never sees plaintext)
+print(result["enterprise_compliance"]["gdpr"])  # "Input never leaves enclave in plaintext"
+```
+
+## Security
+- **Code hash verification** — consumer verifies the exact code running in enclave
+- **Input confidentiality** — provider sees only SHA-256(input), never plaintext
+- **Output signed by enclave key** — verifiable proof of correct execution
+- **Attestation TTL** — 5 minutes by default, prevents replay attacks
+
+## License
+MIT · Maintained by AI-Factory

aimarket_tee-2.0.0/aimarket_tee/__init__.py

@@ -0,0 +1 @@
+# aimarket-tee plugin

aimarket_tee-2.0.0/aimarket_tee/plugin.py

@@ -0,0 +1,17 @@
+"""tee plugin for AIMarket Hub."""
+
+from aimarket_hub.plugin import HubPlugin
+from aimarket_tee.tee_attestation import *
+
+
+class TEEPlugin(HubPlugin):
+    name = "aimarket-tee"
+    version = "2.0.0"
+    description = "tee attestation"
+    homepage = "https://github.com/ai-factory/aimarket-tee"
+    category = "security"
+
+    def register_routes(self, router):
+        from fastapi import APIRouter as _AR
+        # Plugin-specific routes will be registered here
+        pass

aimarket_tee-2.0.0/aimarket_tee/tee_attestation.py

@@ -0,0 +1,3 @@
+"""TEE Attestation — re-export shim from aimarket_hub.tee_attestation (canonical)."""
+
+from aimarket_hub.tee_attestation import *  # noqa: F401, F403

aimarket_tee-2.0.0/aimarket_tee.egg-info/PKG-INFO

@@ -0,0 +1,71 @@
+Metadata-Version: 2.4
+Name: aimarket-tee
+Version: 2.0.0
+Summary: TEE-attested execution (AWS Nitro Enclaves / Intel TDX)
+License: MIT
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: aimarket-hub>=3.0.0
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == "dev"
+Dynamic: license-file
+
+# aimarket-tee
+
+## Documentation
+
+| Document | Description |
+|----------|-------------|
+| [User guide](docs/user-guide.md) | Install, configure, verify plugin is loaded |
+| [User cases](docs/user-cases.md) | Personas and cross-plugin workflows |
+| [SDK integration](docs/sdk-integration.md) | Code examples and hook behavior |
+
+---
+
+**TEE-attested execution for AI capabilities. AWS Nitro Enclaves / Intel TDX.**
+Before invoke, the server sends a cryptographic attestation report: "this code runs in an encrypted hardware enclave. I physically cannot see your input." Receipts are signed by the enclave key. Unlocks enterprise, legal, medical, and finance verticals.
+
+## When to Use
+- **Confidential AI processing** — consumer sends sensitive data (PII, legal docs, medical records), provider can't see it
+- **Enterprise compliance (GDPR/HIPAA/FedRAMP)** — attestation report proves code integrity and data isolation
+- **Third-party model hosting** — model owner deploys to enclave, hub operator can't extract weights
+- **Regulated industries** — prove to auditors that execution happened in certified hardware
+
+## Installation
+```bash
+pip install aimarket-tee
+```
+
+## API Endpoints
+No additional API endpoints. Activated automatically via invoke flow — attestation is attached to every invocation response.
+
+## End-to-End Example
+```python
+from aimarket_tee.tee_attestation import TEEAttestationService, EnclavePlatform
+
+service = TEEAttestationService(platform=EnclavePlatform.AWS_NITRO)
+
+# Execute capability inside enclave — provider sees only hashes
+result = service.execute_with_attestation(
+    capability_id="legal.review@v1",
+    product_id="prod-legal",
+    input_payload={"documents": {"nda": "CONFIDENTIAL: review this NDA..."}},
+    code_identifier="legal-review-v2.0.0-githash-abc123",
+    price_usd=5.00
+)
+
+print(result["attestation"]["platform"])  # aws_nitro
+print(result["attestation"]["code_hash"])  # sha256 of code
+print(result["receipt"]["input_hash"])     # sha256 of input (provider never sees plaintext)
+print(result["enterprise_compliance"]["gdpr"])  # "Input never leaves enclave in plaintext"
+```
+
+## Security
+- **Code hash verification** — consumer verifies the exact code running in enclave
+- **Input confidentiality** — provider sees only SHA-256(input), never plaintext
+- **Output signed by enclave key** — verifiable proof of correct execution
+- **Attestation TTL** — 5 minutes by default, prevents replay attacks
+
+## License
+MIT · Maintained by AI-Factory

aimarket_tee-2.0.0/aimarket_tee.egg-info/SOURCES.txt

@@ -0,0 +1,12 @@
+LICENSE
+README.md
+pyproject.toml
+aimarket_tee/__init__.py
+aimarket_tee/plugin.py
+aimarket_tee/tee_attestation.py
+aimarket_tee.egg-info/PKG-INFO
+aimarket_tee.egg-info/SOURCES.txt
+aimarket_tee.egg-info/dependency_links.txt
+aimarket_tee.egg-info/entry_points.txt
+aimarket_tee.egg-info/requires.txt
+aimarket_tee.egg-info/top_level.txt

aimarket_tee-2.0.0/aimarket_tee.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

aimarket_tee-2.0.0/aimarket_tee.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[aimarket.plugins]
+tee = aimarket_tee.plugin:TEEPlugin

aimarket_tee-2.0.0/aimarket_tee.egg-info/requires.txt

@@ -0,0 +1,4 @@
+aimarket-hub>=3.0.0
+
+[dev]
+pytest>=8

aimarket_tee-2.0.0/aimarket_tee.egg-info/top_level.txt

@@ -0,0 +1 @@
+aimarket_tee

aimarket_tee-2.0.0/pyproject.toml

@@ -0,0 +1,21 @@
+[build-system]
+requires = ["setuptools>=75", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "aimarket-tee"
+version = "2.0.0"
+description = "TEE-attested execution (AWS Nitro Enclaves / Intel TDX)"
+license = {text = "MIT"}
+readme = "README.md"
+requires-python = ">=3.11"
+dependencies = ["aimarket-hub>=3.0.0"]
+
+[project.optional-dependencies]
+dev = ["pytest>=8"]
+
+[project.entry-points."aimarket.plugins"]
+tee = "aimarket_tee.plugin:TEEPlugin"
+
+[tool.setuptools.packages.find]
+include = ["aimarket_tee*"]

aimarket_tee-2.0.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+