Eligibility
Customer, workload, data, identity, device, and region requirements.
Environments / Secure Enclave
Isolated capacity for sensitive workloads
A reference architecture for private connectivity, approved services, attested compute, enhanced evidence, and sponsor- or customer-defined operating conditions.
Reference design
Evidence matrix
Secure Enclave control profile
| Dimension | Planned behavior |
|---|---|
| Boundary | Dedicated or strongly isolated network and identity plane. |
| Attestation | Only approved hardware and software state remains eligible. |
| Services | A deliberately restricted catalog reduces uncontrolled dependencies. |
| Evidence | Identity, configuration, policy, access, and outcome remain replayable. |
Capability set
Every deployment declares
Isolation
Physical, network, identity, key, operator, and governance boundaries.
Connectivity
Permitted links, private paths, offline behavior, and synchronization.
Availability
Services, configurations, quantities, dates, dependencies, and exceptions.
Next decision
Compare the complete environment set
The right environment is the least restrictive boundary that still satisfies every mission, legal, security, data, resilience, and operating requirement.