05 Confidential Computing

Confidential computing protects data and code during execution, not only at rest or in transit.

In PROTEONEXT it applies when a hospital or scientific node needs to run scoring, training, or inference with stronger isolation guarantees.

Conceptual pattern

1. Syntax or the coordinator prepares a signed job.
2. The node validates who is requesting it and what permissions they have.
3. The confidential runtime starts on a Confidential VM or confidential container.
4. The node verifies attestation: image, code hash, environment, and policy.
5. Only if the evidence matches the policy are secrets or local data released.
6. The job produces aggregates, weights, or authorized artifacts.

Azure fit

Run simulation

From Desarrollo:

python .\05_confidential_computing\simular_attestation.py

The simulation does not use Azure. It only explains the logic of an attestation decision.