Skip to content

docs: fix hardware provider framing, remove em dashes #265

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
imran-siddique merged 1 commit into from
Jun 8, 2026
Merged

docs: fix hardware provider framing, remove em dashes #265

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 14 additions & 13 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
<img src="docs/assets/icon.svg" width="96" height="96" alt="cMCP"/>
</p>

# cMCP — Confidential MCP Gateway
# cMCP: Confidential MCP Gateway

[![CI](https://github.com/agentrust-io/cmcp/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/agentrust-io/cmcp/actions/workflows/ci.yml) [![License: MIT](https://img.shields.io/badge/license-MIT-blue)](LICENSE) [![PyPI](https://img.shields.io/pypi/v/cmcp-gateway)](https://pypi.org/project/cmcp-gateway/) [![Python 3.11+](https://img.shields.io/badge/python-3.11%2B-blue)](https://www.python.org/) [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/agentrust-io/cmcp/badge)](https://scorecard.dev/viewer/?uri=github.com/agentrust-io/cmcp)

Expand All @@ -15,7 +15,7 @@ pip install cmcp-gateway
```yaml
# cmcp-config.yaml
attestation:
provider: tpm # auto-detects: tpm -> sev-snp -> tdx -> opaque
provider: tpm # auto-detects: sev-snp -> tdx -> tpm -> software (opaque is explicit opt-in via OPAQUE_ATTESTATION_URL)
enforcement_mode: advisory
cmcp start --config cmcp-config.yaml
```
Expand All @@ -27,16 +27,16 @@ pip install cmcp-gateway
CMCP_DEV_MODE=1 cmcp start --config cmcp-config.yaml
```

See [docs/quickstart.md](docs/quickstart.md) for a full walkthrough: Cedar policy, tool catalog, first TRACE Claim, and verification — no hardware TEE required.
See [docs/quickstart.md](docs/quickstart.md) for a full walkthrough: Cedar policy, tool catalog, first TRACE Claim, and verification (no hardware TEE required).

## Why TEE

| Threat | Software Governance | cMCP |
|--------|--------------------|----|
| Rogue admin replaces Cedar policy on disk | Undetected — hash chain runs in compromised OS | Policy hash measured by hardware before code runs |
| Supply chain CVE flips allow/deny signal | Undetected — evaluator in attacker's address space | Evaluator in isolated enclave memory |
| Admin regenerates audit log post-breach | Undetected — any party with signing key can reconstruct | Signing key hardware-sealed — new valid signatures are impossible |
| Permissive policy loaded at evaluation time | Undetected — comparator runs in mutable process | Policy bundle measured at enclave startup |
| Rogue admin replaces Cedar policy on disk | Undetected: hash chain runs in compromised OS | Policy hash measured by hardware before code runs |
| Supply chain CVE flips allow/deny signal | Undetected: evaluator in attacker's address space | Evaluator in isolated enclave memory |
| Admin regenerates audit log post-breach | Undetected: any party with signing key can reconstruct | Signing key hardware-sealed; new valid signatures are impossible |
| Permissive policy loaded at evaluation time | Undetected: comparator runs in mutable process | Policy bundle measured at enclave startup |

## Architecture

Expand All @@ -54,12 +54,13 @@ Agent -> cMCP Gateway -> Cedar Policy Engine (TEE) -> Tool

## Hardware Providers

| Provider | Hardware | Assurance |
|----------|----------|-----------|
| `tpm` | TPM 2.0 / vTPM (any Azure/AWS/GCP VM with Trusted Launch) | Medium |
| `sev-snp` | AMD SEV-SNP (Azure DCasv5, AWS C6a Nitro) | High |
| `tdx` | Intel TDX (Azure DCedsv5, GCP C3) | High |
| `opaque` | Opaque Managed Runtime | Highest | ⚠️ stub — `detect()` returns `False`, attestation not yet implemented |
| Provider | Hardware | Assurance | Attestation Service |
|----------|----------|-----------|---------------------|
| `tpm` | TPM 2.0 / vTPM (any Azure/AWS/GCP VM with Trusted Launch) | Medium | Local TPM quote |
| `sev-snp` | AMD SEV-SNP (Azure DCasv5, AWS C6a Nitro) | High | AMD KDS |
| `tdx` | Intel TDX (Azure DCedsv5, GCP C3) | High | Intel PCS |
| `gpu-cc` _(v0.2)_ | NVIDIA H100/H200/Blackwell (CC mode) | High | NVIDIA Remote Attestation Service (NRAS) |
| `opaque` _(explicit opt-in)_ | Opaque Managed Runtime | High (explicit opt-in) | Opaque KMS |

## Status

Expand Down
Loading