Eclipseal docs

Eclipseal runs AI workloads inside trusted execution environments (TEEs): confidential virtual machines whose memory is encrypted by the processor, with keys that never leave the chip. The host operating system, the hypervisor and the cloud operator all stay outside. The chip also signs a report of exactly what was loaded, so every run comes with a proof you can check yourself.

$ECLS is the project token. It launches on Pons, the launchpad on Robinhood Chain, and sets your tier in the console. Eclipseal is an independent project and is not affiliated with Robinhood Markets, Inc.

The path to production: run workloads on TDX hosts with an open TEE runtime such as dstack, verify quotes with Intel DCAP and NVIDIA NRAS, deploy the attestation registry contract on Robinhood Chain, and release vault keys only to workloads that pass verification.

1. 01

   Open the console

   The enclave map, network stats and live event stream are public. Nothing to install.
2. 02

   Connect a wallet

   Robinhood Wallet, MetaMask, Rabby or any EVM wallet. The console adds Robinhood Chain (4663) if your wallet does not have it.
3. 03

   Sign in for free

   You sign a short message (EIP-4361). No transaction, no gas, nothing is moved or locked. The session lasts 7 days.
4. 04

   Deploy a workload

   In Agents, paste a docker-compose file, pick a TEE profile, add sealed environment variables and watch the boot log stream.
5. 05

   Verify its quote

   Open Attestations, pick the report, and paste your compose file: the verifier compares its hash with what was measured.
6. 06

   Ask a sealed model

   Use the Private LLM playground or the demo on the home page. Edit one word of the answer and the signature check fails.

1. 01

   Deploy

   You send a docker-compose file and sealed environment variables. The compose file is hashed into the composeHash.
2. 02

   Measured boot

   The confidential VM boots a known OS image while the hardware records measurements: MRTD for the image, RTMR0to RTMR2 for firmware, kernel and boot configuration, RTMR3 for your app (its app id and compose hash).
3. 03

   Quote

   The enclave issues a report with those measurements and a fresh nonce bound into REPORTDATA, then signs it.
4. 04

   Verify

   Anyone can check the signature, the signer, the TCB status, the image allowlist, the RTMR3 replay and the key binding, and compare the compose hash with their own file.
5. 05

   Anchor

   Simulated on devnet

   The report digest is written to Robinhood Chain so the record outlives any server. On devnet the transaction is computed, not sent.

A report is VERIFIED when no check fails. Run it in the console under Attestations, or call the API (see the attestation quickstart).

Mitigations: the verifier rejects out-of-date TCBs and unknown images, operators will bond $ECLS that bad quotes can slash, and production hardware runs in vetted data centers. On your side: keep secrets in the vault, pin images by digest, and compare the compose hash before you trust an output.

Base URL https://eclipseal.xyz. The REST API lives under /api and the OpenAI-compatible gateway under /v1. Responses are JSON; errors look like { "error": "..." }, and validation errors add an issues list.

Rate limits per IP: 600 requests a minute on /api, 120 on /v1, 40 on /v1/chat, 30 on /api/auth. Responses carry standard RateLimit headers.

import os
from openai import OpenAI

client = OpenAI(base_url="https://eclipseal.xyz/v1", api_key=os.environ["ECLS_API_KEY"])
reply = client.chat.completions.create(
    model="deepseek/deepseek-v4.1-flash",
    messages=[{"role": "user", "content": "Hello from the dark"}],
)
print(reply.choices[0].message.content)

curl https://eclipseal.xyz/v1/chat/completions \
  -H "Authorization: Bearer $ECLS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"model":"deepseek/deepseek-v4.1-flash","messages":[{"role":"user","content":"Hello"}]}'

Every reply carries a receipt: the eclipseal field in the body (the last chunk when streaming) with chat_id, request_hash, response_hash and signature, plus the headers x-eclipseal-signature and x-eclipseal-attestation. With a key, x-ecls-quota-limit and x-ecls-quota-remaining show your daily quota.

curl https://eclipseal.xyz/api/signatures/verify-chat \
  -H "Content-Type: application/json" \
  -d '{"model":"<model>","request_hash":"<request_hash>","response":"<the reply text>","signature":"<signature>"}'
# {"valid": true, "response_hash": "..."}

curl "https://eclipseal.xyz/api/attestations?limit=5"

curl https://eclipseal.xyz/api/attestations/<id>

curl https://eclipseal.xyz/api/attestations/verify \
  -H "Content-Type: application/json" \
  -d '{"reportId":"<id>","compose":"<contents of docker-compose.yml>"}'
# {"valid": true, "verdict": "VERIFIED", "digest": "...", "checks": [...]}

You can also send the whole report as report instead of reportId, which is how you check a report someone handed you. Devnet keeps the latest 400 reports.

1. 01

   Get ETH on Robinhood Chain

   Bridge ETH from Ethereum or another network. See the bridging guide.
2. 02

   Open Pons

   Go to ponsfamily.com and connect your wallet.
3. 03

   Paste the official address

   Search by contract address, never by name or ticker.
4. 04

   Swap and sign in

   Swap ETH for $ECLS, then sign in to the console with the same wallet to unlock your tier.