TEE Compile

TEE Compile is Automata's workflow for producing reproducible enclave releases. The build runs in an isolated environment and records evidence about the inputs and outputs used to create the artifact.

Build attestation

The resulting attestation report can bind together source revisions, dependency inputs, build commands, and hashes of the release output. Reviewers can use this information with a reproducible build to confirm that a deployed workload corresponds to the expected source.

TEE Compile complements runtime attestation. Build evidence explains how an artifact was produced, while an attestation quote proves which measured artifact is running in a particular TEE.

See the current TEE Compile documentation for supported workflows and integration instructions.