Guides clean-room Keystone TEE implementation in native Zig for clarigggz. Use when working on keystone-zig architecture, clarigggz integration, threat model, boot chain, or deciding what to port from upstream Keystone.
Integrates keystone-zig TEE with clarigggz OS smart-glasses microkernel. Use when connecting clarigggz kernel to SM, spawning secure enclaves for camera/crypto/wallet, or planning adapter isolation.
Configures RISC-V Physical Memory Protection in keystone-zig using comptime validation. Use when adding memory regions, PMP entries, NAPOT encoding, or debugging isolation failures.
Implements Keystone SBI extension calls in keystone-zig. Use when adding SBI functions, ecall wrappers, error codes, or clarigggz kernel enclave API.
Develops the M-mode Security Monitor in keystone-zig. Use when editing sm/, trap handlers, SBI dispatch, enclave create/destroy/run, or M-mode boot.