# blockbox

> Hardware-attested daemonless container execution appliance with silicon-enforced memory encryption and deterministic launch attestation (Intel TDX & AMD SEV-SNP).

Latest version **1.0.0** (published 2026-09-23) · Apache-2.0 license · 0 weekly downloads

## Install

```sh
npm install blockbox
pnpm add blockbox
yarn add blockbox
bun add blockbox
```

Provides the command `blockbox`.

## Health

**Score 65/100 (B)** — status: active.

Positive: has types; esm support; no vulnerabilities; recently updated; high maintenance score.

Warnings: low downloads.

## Facts

| | |
|---|---|
| Version | 1.0.0 |
| Published | 2026-09-23 |
| First published | 2026-09-23 |
| Weekly downloads | 0 |
| License | Apache-2.0 |
| TypeScript types | bundled |
| Module format | ESM + CommonJS |
| Node | >=18 |
| Dependencies | 0 |
| Unpacked size | 40.7 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Author | Corrente Labs, Inc. |
| Maintainers | wdhawkins |
| Keywords | blockbox, confidential-computing, tee, intel-tdx, amd-sev-snp, enclave, daemonless, hardware-attestation, containers, scitt, enterprise |

## Links

- npm: https://www.npmjs.com/package/blockbox
- Repository: https://github.com/corrente-labs/blockbox
- Homepage: https://blockbox.blue
- Issues: https://github.com/corrente-labs/blockbox/issues
- npm.io page: https://npm.io/package/blockbox

## Alternatives

- [@sindresorhus/slugify](https://npm.io/package/@sindresorhus/slugify.md) — 3.7M weekly downloads
- [solid-js](https://npm.io/package/solid-js.md) — 2.7M weekly downloads
- [expo-glass-effect](https://npm.io/package/expo-glass-effect.md) — 2.5M weekly downloads
- [nanoassert](https://npm.io/package/nanoassert.md) — 780.8K weekly downloads
- [@ffmpeg/ffmpeg](https://npm.io/package/@ffmpeg/ffmpeg.md) — 529.5K weekly downloads

## Recent versions

- 1.0.0 (latest) — 2026-09-23

## README

# blockbox

> **Hardware-Attested Daemonless Container Execution Appliance (BlockBox Pods™)**
> Silicon-enforced memory encryption and deterministic launch attestation for enterprise confidential workloads.

[![License: Apache-2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
[![Silicon Attestation](https://img.shields.io/badge/Silicon-Intel%20TDX%20%7C%20AMD%20SEV--SNP-indigo.svg)](https://blockbox.blue)
[![Attested Platform](https://img.shields.io/badge/Console-blockbox.blue-00f5ff.svg)](https://blockbox.blue)

---

## Overview

Traditional container execution environments rely on shared host kernels and plaintext system memory, leaving critical enterprise and AI workloads exposed to host hypervisor vulnerabilities, state tampering, and un-attested runtime drift.

**BlockBox** provides a daemonless container execution appliance rooted directly in enterprise silicon (Intel TDX and AMD SEV-SNP):

- **Hardware-Enforced Confidentiality**: Workloads execute inside dedicated, memory-encrypted enclaves. Host hypervisors and cloud operators have zero access to memory contents.
- **Deterministic Silicon Attestation**: Generates cryptographically verifiable hardware attestation quotes (RTMR measurements) binding container state and output data.
- **Daemonless Execution**: Direct hardware launch with zero persistent root daemon attack surface.
- **Audit-Ready Commitments**: Deterministic output binding with SCITT transparency receipt alignment.

---

## Installation

```bash
npm install blockbox
```

Or run directly via `npx`:

```bash
npx blockbox info
```

---

## Quickstart

```typescript
import { createBlockBoxManifest, BlockBoxPodRunner } from 'blockbox';

// 1. Define immutable pod manifest
const manifest = createBlockBoxManifest({
  podName: 'settlement-risk-pod',
  entrypoint: 'dist/app.js',
  binaryContentOrHash: 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855',
  architecture: 'intel-tdx',
  vCpu: 4,
  memoryMb: 4096,
  allowedEgressHosts: ['api.ashlar.blue']
});

// 2. Instantiate runner inside hardware enclave boundary
const runner = new BlockBoxPodRunner(manifest);

// 3. Execute sensitive workload with deterministic silicon attestation
const result = await runner.runTask({ transactionId: 'TX-90412' }, async (input) => {
  return { approved: true, riskScore: 0 };
});

console.log('Execution Status:', result.status);
console.log('SCITT Digest:', result.quote.scittDigest);
// -> "scitt:quote:sha256:7f9a1..."
```

---

## CLI Usage

```bash
# Display appliance status and silicon runtime parameters
npx blockbox info

# Generate a starter manifest
npx blockbox init my-pod > blockbox-manifest.json

# Validate a manifest file
npx blockbox verify blockbox-manifest.json

# Calculate deterministic RTMR measurements
npx blockbox measure blockbox-manifest.json
```

---

## Documentation & Live Appliance

- **Appliance Console**: [https://blockbox.blue](https://blockbox.blue)
- **Corporate Entity**: Corrente Labs, Inc.
- **Inquiries**: `contact@correntelabs.com`

---

## License

Apache-2.0. Copyright © Corrente Labs, Inc.

---
_Source: https://npm.io/package/blockbox · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._