CLAWD TEE TERMINAL

teeterminal.musebook.trade — the public demo of Clawd's confidential-compute terminal. E2EE session, attested models, digests over myths.
● PUBLIC FREE TRIAL gateway checking… e2ee v2 mode PREPARE-ONLY

01 / FREE REDPILL TEE CONSOLE — ONE SESSION, NO WALLET

This is the public version of the Clawd TEE terminal. Anyone gets one free session — up to 10 messages or 30 minutes, whichever comes first — no wallet, no signup. Your prompts are end-to-end encrypted in your browser to this gateway's published E2EE key (panel 02) before they leave your machine; the gateway calls the RedPill TEE models server-side, so the API key never touches your browser, and the reply comes back encrypted to your browser's key. When the free session is spent, the console locks — $CLAWD holders get the full terminal at tee.musebook.trade.

PREPARE-ONLY — v1 doctrine. This console produces analysis, decisions, and unsigned action descriptions. It executes no orders, holds no wallet keys, and signs nothing. Any trade you act on is signed in your own wallet, by you — browser-signing doctrine, always.
messages left – time left – session starting…
Starting your free session…
{ "mode": "prepare-only", "execution": "none", "signing": "user wallet only — this terminal never signs", "action": null }

If the model proposes a trade, its parameters belong in a description like the one above, for your own review. Submitting anything on-chain remains a separate, manual, wallet-signed step outside this terminal.

02 / E2EE — ENCRYPTED TO THE PUBLISHED GATEWAY KEY

Field-level encryption between your browser and the attested-gateway key, on top of TLS — the protocol shape from the RedPill E2EE documentation. For each request your browser generates an ephemeral secp256k1 keypair, runs ECDH against the gateway key below, and AES-256-GCM-encrypts the messages field. The ciphertext is bound by AEAD associated data to the protocol version, direction, algorithm, model, field path, nonce and timestamp — it cannot be replayed or moved to another field. Receipts attach exactly as the docs describe: request.received.body_hash is the hash of the decrypted body the gateway observed, which your browser re-computes and checks after every reply.

loading keyset…
No request yet this session. Run the console and the exact headers, the ciphertext, and the gateway's receipt will appear here.
TRUST BOUNDARY — WHAT THIS ENCRYPTION DOES AND DOES NOT DO.

E2EE on this page encrypts your prompt in your browser, to the gateway key published in the keyset above, before anything leaves your machine. The gateway decrypts it inside its own boundary — it has to, in order to call the model — and forwards it over TLS to RedPill, where the model runs on RedPill's attested TEE infrastructure. The reply travels back the same way: encrypted to your browser's key before it leaves the gateway. That is exactly the boundary the RedPill E2EE documentation describes: E2EE proves your fields are encrypted to the gateway's published key; it does not hide your prompt from the gateway itself.

What this public demo does NOT claim: the gateway here is a Cloudflare Worker, not a TEE, and its key is published without a hardware attestation. On RedPill's confidential gateways — and on the first-party Clawd gateway now in deployment — the E2EE key is published inside an attested keyset, which is what binds the key to genuine TEE hardware. This page mirrors that protocol so you can inspect every step — the keyset, the headers, the ciphertext, the receipt hash — but it does not fake the attestation. Treat it as a protocol demo: don't paste secrets, keys, or anything you wouldn't want a gateway operator to see. $CLAWD holders get the full terminal at tee.musebook.trade.

03 / THE STACK BEHIND THIS DEMO

This public page is the demo surface. The full terminal — every panel, every program, the holder console — lives at tee.musebook.trade. The short version:

CLAWD-TEE — CONFIDENTIAL COMPUTE

TEA: TEE attestation · edge gateways · anchor on Solana. TEEs compute; the SVM settles; only digests go on-chain — StoreProofV2 proofs in a Pinocchio program, SAS Token-2022 credentials at threshold. Source: Solizardking/tea · full panel →

DARK DEFI — SHIELDED PROTOCOLS (ALPHA)

Sapling-style shielded wallets, dark pools and SAS-attested TEE agents on Solana devnet: Dark Protocol 3KWLFYco…, Shielded Wallet 4753b1cC…, Dark Percolator Cf8dRz9x…. Alpha, unaudited, devnet — the full one-by-one program tour is on the holder terminal →

CLAWD NETWORK — DESIGN v0.1

Decentralized AI & compute on the Solana SVM: Grid · Forge · Relay · Registry · Verify, with assurance profiles A–E and escrowed job lifecycles. Design stage — the clawd_core / clawd_registry / clawd_treasury programs are not deployed. Read the spec panel →

🦞 HOLDERS GET THE FULL TERMINAL

The full Clawd TEE terminal — confidential-compute stack, the Dark DeFi programs one by one, the Clawd Network spec, and this same RedPill console without the free-session limit — is at tee.musebook.trade. Browsing there is public; running the console is for $CLAWD holders (wallet sign-in). Mint: 8cHzQHUS2s2h8TzCmfqPKYiM4dSt4roa3n7MyRLApump.