Introduction to TERE

Updated May 17, 20255 min read

TERE (Trusted Execution Runtime Environment) is a secure framework for confidential computing that leverages hardware-based Trusted Execution Environments (TEEs) like AMD SEV, SEV-SNP, and Intel TDX. The system allows secure deployment and execution of code in isolated enclaves with cryptographic attestation for verification.

What is TERE?

TERE provides a secure computing environment for running sensitive workloads with hardware-backed security guarantees. It's designed as a modern alternative to blockchain smart contracts, oracles, agentic systems, and other sensitive compute platforms that require high levels of security and verifiability.

The core components of TERE include:

  • Runtime Engine: A secure WebAssembly (WASM) runtime that executes code within a hardware-protected environment
  • Attestation System: Cryptographic proof mechanism that verifies the authenticity and integrity of the execution environment
  • State Management: Encrypted persistent storage for maintaining state across executions
  • Service Layer: API interfaces for interacting with TERE instances

Key Features

Hardware-Backed Security

TERE utilizes CPU-level security features to create hardware-isolated environments. This provides memory encryption, secure boot, and other protections that ensure your code and data remain confidential even from the infrastructure provider.

Cryptographic Attestation

Every TERE instance provides cryptographic evidence that it's running the correct code in a genuine Trusted Execution Environment with the expected security properties. This evidence can be verified by external parties to establish trust.

Secure State Management

All persistent data in TERE is encrypted both at rest and in transit. Fine-grained access controls ensure that only authorized code can access sensitive information.

Developer-Friendly

TERE supports WebAssembly, allowing you to write code in your preferred language that compiles to WASM. The system provides comprehensive APIs and SDKs for seamless integration.

Getting Started

The fastest way to get started with TERE is to install the CLI and create your first secure application:

bash
1# Install the TERE CLI
2npm install -g @tere/cli
3
4# Initialize a new TERE project
5tere init my-secure-app
6
7# Navigate to the project directory
8cd my-secure-app
9
10# Build and deploy to a local development TEE
11tere build
12tere deploy --dev

This will create a local development environment with a simulated TEE for testing. For production deployments, you'll need to configure a cloud provider that supports confidential computing.

Next Steps