> ## Documentation Index
> Fetch the complete documentation index at: https://phalanetwork.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# TDX Technology

> DStack brings confidential computing to everyday development workflows without forcing teams to rewrite code or rethink their toolchains. Here are the features that make secure deployment simple and powerful. 

# Out-of-the-box benefits of using and deploying with dstack

<div className="grid grid-cols-1 sm:grid-cols-2 gap-4 sm:gap-6 my-6">
  <div className="flex flex-col items-center justify-center bg-white px-4 py-6 sm:px-6 sm:py-8 shadow-sm hover:shadow-md transition-shadow rounded-lg w-full max-w-md mx-auto">
    <span className="flex items-center justify-center w-12 h-12 sm:w-14 sm:h-14 md:w-16 md:h-16 rounded-full bg-blue-100 text-blue-600 mb-3 sm:mb-4" title="Hardware-Enforced Isolation">
      <svg xmlns="http://www.w3.org/2000/svg" className="w-7 h-7 sm:w-8 sm:h-8 md:w-9 md:h-9" fill="none" viewBox="0 0 24 24" stroke="currentColor">
        <path d="M12 3l7 4v5c0 5-3.5 9.74-7 11-3.5-1.26-7-6-7-11V7l7-4z" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />
      </svg>
    </span>

    <h3 className="font-semibold text-base sm:text-lg text-center">Hardware-Enforced Isolation</h3>

    <p className="text-center mt-2 text-sm sm:text-base">
      Every workload runs inside a processor-level Trusted Execution Environment (TEE). The CPU encrypts memory on the fly, sealing it off from the operating system, hypervisor, and anyone with physical access.
    </p>
  </div>

  <div className="flex flex-col items-center justify-center bg-white px-4 py-6 sm:px-6 sm:py-8 shadow-sm hover:shadow-md transition-shadow rounded-lg w-full max-w-md mx-auto">
    <span className="flex items-center justify-center w-12 h-12 sm:w-14 sm:h-14 md:w-16 md:h-16 rounded-full bg-green-100 text-green-600 mb-3 sm:mb-4" title="Remote Attestation">
      <svg xmlns="http://www.w3.org/2000/svg" className="w-7 h-7 sm:w-8 sm:h-8 md:w-9 md:h-9" fill="none" viewBox="0 0 24 24" stroke="currentColor">
        <path d="M12 3l7 4v5c0 5-3.5 9.74-7 11-3.5-1.26-7-6-7-11V7l7-4z" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />
      </svg>
    </span>

    <h3 className="font-semibold text-base sm:text-lg text-center">Remote Attestation</h3>

    <p className="text-center mt-2 text-sm sm:text-base">
      DStack exposes a built-in attestation API that packages cryptographic evidence of the exact code, configuration, and TEE firmware your service is running on. Third parties can verify this proof before exchanging secrets or traffic.
    </p>
  </div>

  <div className="flex flex-col items-center justify-center bg-white px-4 py-6 sm:px-6 sm:py-8 shadow-sm hover:shadow-md transition-shadow rounded-lg w-full max-w-md mx-auto">
    <span className="flex items-center justify-center w-12 h-12 sm:w-14 sm:h-14 md:w-16 md:h-16 rounded-full bg-yellow-100 text-yellow-600 mb-3 sm:mb-4" title="Zero-Code-Modification Deployment">
      <svg xmlns="http://www.w3.org/2000/svg" className="w-7 h-7 sm:w-8 sm:h-8 md:w-9 md:h-9" fill="none" viewBox="0 0 24 24" stroke="currentColor">
        <rect x="3" y="7" width="18" height="10" rx="2" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />

        <path d="M16 3v4M8 3v4M3 17v2a2 2 0 002 2h14a2 2 0 002-2v-2" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />
      </svg>
    </span>

    <h3 className="font-semibold text-base sm:text-lg text-center">Zero-Code-Modification Deployment</h3>

    <p className="text-center mt-2 text-sm sm:text-base">
      Container images that work in staging can be deployed directly to DStack with no SDK, no recompilation, no enclave-specific branches. The platform transparently adds the security layer at runtime.
    </p>
  </div>

  <div className="flex flex-col items-center justify-center bg-white px-4 py-6 sm:px-6 sm:py-8 shadow-sm hover:shadow-md transition-shadow rounded-lg w-full max-w-md mx-auto">
    <span className="flex items-center justify-center w-12 h-12 sm:w-14 sm:h-14 md:w-16 md:h-16 rounded-full bg-purple-100 text-purple-600 mb-3 sm:mb-4" title="Decentralized Key Management">
      <svg xmlns="http://www.w3.org/2000/svg" className="w-7 h-7 sm:w-8 sm:h-8 md:w-9 md:h-9" fill="none" viewBox="0 0 24 24" stroke="currentColor">
        <path d="M12 15v2m0-2a3 3 0 100-6 3 3 0 000 6zm0 0v2m6-2a6 6 0 11-12 0 6 6 0 0112 0z" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />

        <path d="M17 16l2 2m0 0l2-2m-2 2v-6" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />
      </svg>
    </span>

    <h3 className="font-semibold text-base sm:text-lg text-center">Decentralized Key Management</h3>

    <p className="text-center mt-2 text-sm sm:text-base">
      Encryption keys are issued, rotated, and retired through a blockchain-backed coordination service. Key custodianship is distributed with no single vault to breach or subpoena.
    </p>
  </div>

  <div className="flex flex-col items-center justify-center bg-white px-4 py-6 sm:px-6 sm:py-8 shadow-sm hover:shadow-md transition-shadow rounded-lg w-full max-w-md mx-auto">
    <span className="flex items-center justify-center w-12 h-12 sm:w-14 sm:h-14 md:w-16 md:h-16 rounded-full bg-pink-100 text-pink-600 mb-3 sm:mb-4" title="Automated Certificate Lifecycle">
      <svg xmlns="http://www.w3.org/2000/svg" className="w-7 h-7 sm:w-8 sm:h-8 md:w-9 md:h-9" fill="none" viewBox="0 0 24 24" stroke="currentColor">
        <rect x="5" y="3" width="14" height="18" rx="2" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />

        <path d="M9 7h6M9 11h6M9 15h2" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />
      </svg>
    </span>

    <h3 className="font-semibold text-base sm:text-lg text-center">Automated Certificate Lifecycle</h3>

    <p className="text-center mt-2 text-sm sm:text-base">
      TLS certificates are automatically generated, bound to specific enclaves, and renewed just-in-time before expiry. End-to-end encrypted channels with zero downtime and no surprise certificate failures.
    </p>
  </div>

  <div className="flex flex-col items-center justify-center bg-white px-4 py-6 sm:px-6 sm:py-8 shadow-sm hover:shadow-md transition-shadow rounded-lg w-full max-w-md mx-auto">
    <span className="flex items-center justify-center w-12 h-12 sm:w-14 sm:h-14 md:w-16 md:h-16 rounded-full bg-indigo-100 text-indigo-600 mb-3 sm:mb-4" title="Intuitive Web Dashboard">
      <svg xmlns="http://www.w3.org/2000/svg" className="w-7 h-7 sm:w-8 sm:h-8 md:w-9 md:h-9" fill="none" viewBox="0 0 24 24" stroke="currentColor">
        <rect x="3" y="3" width="7" height="7" rx="1.5" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />

        <rect x="14" y="3" width="7" height="7" rx="1.5" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />

        <rect x="14" y="14" width="7" height="7" rx="1.5" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />

        <rect x="3" y="14" width="7" height="7" rx="1.5" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" />
      </svg>
    </span>

    <h3 className="font-semibold text-base sm:text-lg text-center">Intuitive Web Dashboard</h3>

    <p className="text-center mt-2 text-sm sm:text-base">
      Replace command-line complexity with a real-time dashboard that shows enclave health, performance counters, and audit trails. Scale, pause, or revoke workloads with a click using role-based access control.
    </p>
  </div>
</div>

dstack lets you push the same containers you run today into CPU-encrypted enclaves, so code and data stay private while hardware-level crypto keeps performance high.
Every deployment is attested for integrity, keys live in a shared on-chain vault, TLS certs renew themselves, and all traffic stays encrypted end to end.

A point-and-click dashboard replaces CLI wrangling, language-agnostic SDKs plug into any stack, and the platform auto-scales, heals, and logs without leaking sensitive info.
You get an immutable audit trail, one-click compliance reports,

and a supply-chain filter that blocks unverified images—secure infrastructure without the rewrite.

dstack is built to be developer-friendly: it takes care of most security challenges and infrastructure dependencies for you. This means you can build scalable, compliant cloud platforms using simple tools and strong security guarantees—without extra hassle. Move fast, stay safe, and keep your existing workflows.