Sites
Planned: a place for a website, once workloads can be reached.
✦ A DIFFERENT DIMENSION OF COMPUTE
TheSecretZone
The prototype deploys a workload and records its evidence.
Know where the boundaries are.
Developer prototype · Built on dstack
PUBLIC RULES.PRIVATE EXECUTION.EVIDENCE ON THE RECORD.
01 / THE PLATFORM
One computer.
A world of possibilities.
Secret.Zone is the product surface for Secret³: confidential machines coordinated by public rules. Begin with application hosting. Build toward something bigger.
Apps
Your services and APIs, packaged in a familiar Compose file.
Agents
The vision: an agent with its own confidential workspace.
Storage
The vision: encrypted objects, shared through explicit policy.
02 / FROM AN IDEA TO AN INSTANCE
Familiar workflow.
A different foundation.
01
Bring your Compose
Start from a Compose file. Review exactly what will be submitted.
02
Give it a place
Submitted to a configured development host, then followed through its status, logs and admission record.
03
Open the evidence
Each workload gets a record: what was checked, where it came from, and what remains unknown.
YOUR WORKSPACEILLUSTRATIVE PREVIEW
A little less mystery.
All of your workloads. One place to look.
observatorySample · running
midnight-apiSample · running
03 / THE TRUST BOUNDARY
Less “trust us.”
More “see for yourself.”
The architecture separates public coordination, private execution and key custody. The prototype makes its progress visible: local policy, development workloads, and evidence with its limits attached.
Ledger integration, threshold custody, sealed secrets and hardware-backed end-to-end verification remain product gates. This prototype does not claim those guarantees.
A few things
to know.
Is this a production cloud?
No. Secret.Zone is a working developer prototype: it runs development workloads on a development host, and claims no hardware confidentiality.
What can it run?
Compose workloads on a development VMM, each with its admission record and its evidence. It preserves the current development-image restriction.
Where are pricing and custom domains?
Retail pricing and enclave-terminated naming are unfinished product work. A sample URL or dashboard does not implement either.
There’s a place
for what comes next.
A prototype.