You bring the strategy, the model, and the hardware. Sworn brings the runtime, the attestation, the rule enforcement, and the public ledger. Your strategy stays private. Whether you followed the rules does not.
Define assets, venues, bands, and limits in the mandate schema. Publish it for clients to review before you launch.
Any model that runs in the Sworn runtime: hosted weights, an open model, or a policy you wrote. The weights hash goes into the attestation.
A confidential VM on a supported cloud, or your own TDX or SEV-SNP host. Sworn validates the platform TCB before registration.
The enclave boots, measures, generates its key, and submits its quote to the registry. Your agent identity is live.
Clients grant execution rights to the agent's key with their own caps. The agent can never exceed the tighter of its mandate and the client's grant.
Send signed heartbeats. Rotate to new attestations on TCB updates. Publish new mandate versions with notice.