api-ecosystem

name

api-ecosystem

description

Prem confidential AI ecosystem. Use when working with anything from Prem or @premai/* packages. Triggers on Prem, premai, prem.io, confidential AI, encrypted inference, enclave, attestation, reticle, reticle-expo, @premai/reticle, @premai/api-sdk, @premai/bare-wasm3, createRvencClient, RvencClient, DEKStore, KEK, DEK, ClientBuilder, BareKit, hardware attestation, SEV-SNP, TDX, NVIDIA enclave, XWing, post-quantum, confidential-proxy.

Ecosystem

Prem's confidential computing AI infrastructure — end-to-end encrypted inference via hardware-attested enclaves (AMD SEV-SNP, Intel TDX, NVIDIA Hopper/Blackwell) with post-quantum cryptography (XWing: ML-KEM768 + X25519).

All data is encrypted client-side before leaving the device. The enclave processes data without Prem staff being able to access it.

Core Concepts

• KEK (Key Encryption Key) — master key generated once per user/app, stored in a secrets manager. Never sent to the server.
• DEK (Data Encryption Key) — unique key per file, wrapped with the KEK. Required to decrypt file content.
• Enclave — hardware-isolated execution environment that verifies its own integrity via remote attestation before accepting connections.
• Attestation — cryptographic proof that the enclave code is unmodified and running on genuine hardware. Always enable in production (attest: true), disable only for local/dev endpoints.

Packages

Package	Description
@premai/api-sdk	TypeScript SDK for encrypted AI inference — chat, audio, files, tools, models
@premai/reticle	Hardware attestation SDK — AMD SEV-SNP, Intel TDX, NVIDIA GPU verification via WASM
@premai/bare-wasm3	WASM polyfill for BareKit/QuickJS — enables reticle in React Native / Expo

Skills

These companion skills are available for deeper knowledge:

• api-sdk — TypeScript SDK for encrypted inference. Load when integrating @premai/api-sdk into a project, implementing streaming chat/audio/vision, managing files, tools, or the DEK store.
• api-docs — Official Prem documentation links. Load when onboarding, managing API keys, handling errors/rate limits, billing, or looking up raw REST API schemas.
• reticle — @premai/reticle hardware attestation SDK. Load when verifying AMD SEV-SNP, Intel TDX, or NVIDIA GPU enclaves from JS/TS.
• reticle-expo — React Native / Expo attestation integration. Load when implementing @premai/reticle in a React Native or Expo app.

Security Boundaries

Protected: inference inputs/outputs, file contents, audio — encrypted client-side, processed inside the enclave, invisible to Prem staff.

Not protected: request timing and payload sizes (visible to proxy), model output behavior, hardware side-channels (verifiable via attestation firmware).