Your code runs where no one can see it — and Monad verifies exactly which code ran.
Monad had no TEE infrastructure. Now it does.
Run this and get a real result back, live from Monad testnet right now — a read against the already-deployed registry, verified by a Solidity contract on-chain.
No key, no AWS account. Deploying your own app into an enclave needs your own AWS setup — see the README for the full walkthrough.
AWS hardware signs the exact code measurement running inside.
A hinted P-384 construction makes the check fit under Monad's 30M gas cap.
That key is authorized for that code image on Monad, and no other.
Any Monad contract can now trust what the enclave signs.
Sealed-bid auctions, private order flow, confidential AI agents — anything on Monad where someone currently has to be trusted not to peek.
The code cannot lie about what it is.
Change one line. Rebuild.
The measurement changes.
Monad rejects it.
Real enclave, real AWS attestation, real Solidity registry — deployed and verified on Monad testnet.
COBALT