2/ Intel SGX was a dead end. AWS Nitro Enclaves worked but needed excessive custom plumbing. Azure's confidential VMs seemed to be the sweet spot. An AMD SEV-SNP runs Barkd unmodified—the CPU encrypts every page of guest memory so the hypervisor only sees ciphertext.
1 likes 1 replies
?