Hardware‑based secure enclave that runs code with memory isolation and remote attestation, used for oracles, rollups, and privacy‑preserving apps.