an easyenclave network is a production deployment of control plane and agents. nodes provide capacity, agents serve workloads, and a control plane keeps the ledger and routes traffic. users prepay usd credits to run compute, credits are locked while work runs, and settlement pays providers only after strict verification. the control plane is itself a tdx agent, so the network can verify its own coordinator.
we need a network that can prove execution without replication.
we want a network where compute is verified by hardware and paid for by delivered work.
# run a private workload
result = run_private_job(
image="myapp:latest",
env={"SECRET": "value"}
)
# pay a contractor in compute credits
transfer_credits(to="contractor-id", amount="$200")
# reach an agent behind the control plane proxy
client = connect("app-name")
response = client.get("/api/private")
credits are minted to users on prepay. spending locks credits to a period. settlement happens at the end of the period and pays providers only if all checks pass.
period settlement is zero tolerance:
health and attestation checks come from the control plane or a trusted attested uptime server. abuse reports are filed by the launcher and authorized by the control plane owner. misses are low cost: the period fails and payout is withheld, nothing more. if the control plane goes down, checks can misfire and settlement halts. this is accepted.
settlement logic
nodes publish a usd price per vcpu-hour. the control plane routes traffic to the lowest effective price among eligible nodes, weighted by trust (attestation, health, abuse history). prices are posted; there is no algorithmic price curve.
hardware proves correctness and confidentiality. stake proves availability. stake is required to be eligible for settlement.
slashing cost goals are aligned with availability tiers:
| tier | target availability | downtime/year | slashing penalty |
|---|---|---|---|
| premium | 99.999% (5 9s) | 5 minutes | high (e.g. 1 month revenue) |
| standard | 99.99% (4 9s) | 53 minutes | moderate (e.g. 1 day revenue) |
| economy | 99.9% (3 9s) | 9 hours | low (e.g. 1 hour revenue) |
slashing events
agents connect outbound and stay private. no public exposure required. requests are proxied over the websocket tunnel. the sdk resolves apps and routes through the proxy.
compute that trades like money