CloudTaser — Wrapper Interactive Demo

CLAIM DEMONSTRATED

Not on request. Not under the CLOUD Act. Not under court order.

steps passed

probes passed

🔐

memfd_secret pages

Secret lives only in sealed kernel memory. No file, no tmpfs, no /proc.

🛡

Runtime enforcement

Kernel protections + PSA restricted policy block /proc/mem, /proc/environ, and core dumps. eBPF LSM adds cross-container enforcement.

🔒

Confidential Compute

AMD SEV encrypts VM memory. The cloud operator sees ciphertext.

🇪🇺

Sovereign EU key store

Keys never leave EU jurisdiction. No CLOUD Act, no FISA 702.

Demo improvements in progress