01
Establish identity and scope
Identify field edge compute, Service Endlets, approved workloads, data sources; validate participating Endlets before admission.
Military & Defense
Confidential edge services · Architecture
Map the service path for confidential edge services.
Run approved field services on governed Service Endlets while keeping workload identity, network access, and lifecycle under policy.
Primary capability
Trusted Execution
How it works
Trace the protected service path from admission to evidence.
Run selected services near field operations while retaining centralized identity, access, and lifecycle control.
02
Build the protected service path
validated Service Endlet → approved workload profile → local execution or confidential environment → policy-controlled fabric path → command or cloud service
03
Capture decision evidence
Review attestation, workload identity, key release, execution state, service reachability with the responsible teams.
Architecture flow
Trace the protected service path and its control points.
validated Service Endlet
approved workload profile
local execution or confidential environment
policy-controlled fabric path
command or cloud service
Inputs
field edge compute, Service Endlets, approved workloads, data sources, key services, command or cloud services
Path
validated Service Endlet → approved workload profile → local execution or confidential environment → policy-controlled fabric path → command or cloud service
Evidence
attestation, workload identity, key release, execution state, service reachability, path state, and revocation behavior
Quick answers
Confidential edge services FAQs
Which technical path should the team review?+
validated Service Endlet → approved workload profile → local execution or confidential environment → policy-controlled fabric path → command or cloud service
Which evidence should reviewers collect?+
attestation, workload identity, key release, execution state, service reachability, path state, and revocation behavior
Who should review the architecture?+
mission system owners, platform engineering, cyber defense, data owners
Continue the evaluation path
Evaluate confidential edge services with a representative scope.
Determine whether the selected workload can run at the field edge with the required access policy, observability, and revocation controls.
Continue to Evaluation
