nathfavour/keystone-zig

keystone-zig-architecture

Guides clean-room Keystone TEE implementation in native Zig for clarigggz. Use when working on keystone-zig architecture, clarigggz integration, threat model, boot chain, or deciding what to port from upstream Keystone.

keystone-zig-clarigggz

Integrates keystone-zig TEE with clarigggz OS smart-glasses microkernel. Use when connecting clarigggz kernel to SM, spawning secure enclaves for camera/crypto/wallet, or planning adapter isolation.

keystone-zig-pmp

Configures RISC-V Physical Memory Protection in keystone-zig using comptime validation. Use when adding memory regions, PMP entries, NAPOT encoding, or debugging isolation failures.

keystone-zig-sbi

Implements Keystone SBI extension calls in keystone-zig. Use when adding SBI functions, ecall wrappers, error codes, or clarigggz kernel enclave API.

keystone-zig-sm

Develops the M-mode Security Monitor in keystone-zig. Use when editing sm/, trap handlers, SBI dispatch, enclave create/destroy/run, or M-mode boot.