Documentation
Documentation for the Confidential AI platform — the c8s Confidential Kubernetes platform, the Confidential Agents API, attested builds, and the concepts and research behind confidential computing.
Confidential AI runs AI workloads — inference, agents, training, and more — inside hardware-backed Trusted Execution Environments, so prompts, responses, and credentials stay encrypted end to end and model weights stay hardware-isolated on the GPU, invisible even to the infrastructure operator.
From zero to verified, in four steps
Bring up a Kubernetes cluster on confidential (TEE) hardware — managed in the cloud or your own host.
One CLI command sets up the attestation root of trust, the encrypted service mesh, and image-policy enforcement.
One annotation makes a Deployment confidential — an attested CVM with a TEE-bound certificate.
Any client — even a browser — cryptographically verifies the enclave.
Start here
Your first confidential cluster
One sitting, start to finish: an AKS cluster on a confidential node pool, c8s installed, and the result verified.
Introduction to TEEs
New to confidential computing? What a Trusted Execution Environment is, and what it actually guarantees.
Do a specific thing
c8s how-to guides
Install, run a confidential workload, manage the allowlist, use secrets and encrypted volumes, verify, troubleshoot.
Confidential Agents API
Provision a per-organization confidential-VM agent instance over a REST API.
Inference API
Call an OpenAI-compatible confidential inference API and verify its hardware evidence.
Look something up
c8s CLI reference
Every flag of every subcommand, kept in sync with the source by CI.
Workload annotations
Every pod annotation the webhook reads, and the container and volume names c8s reserves.
Helm values
The chart values you set by hand — measurement pinning, operator keys, the front door.
Understand how it works
c8s concepts
The architecture, the two trust boundaries, the trust root, the allowlist model, and the honest limitations.
Confidential Computing Primer
The full technical deep-dive: threat model, hardware foundations, memory integrity, attestation, and measurement.
Attested builds
Verifiable software provenance — what attested builds are, how they work, and the guarantees they provide.
Research
The c8s and Kettle design papers — the architecture and the why behind the platform.