01 / SOVEREIGN HOOK

Sovereign GPU Infrastructure for Regulated Enterprise.

Cryptographically bound AI agents running on dedicated NVIDIA architecture within Australian borders. Fully hardened to APRA CPS 234 and IRAP standards.

ROOT_OF_TRUST INTEL_TDX
GPU_TARGET NVIDIA_H100_B300
DATA_RESIDENCY AUSTRALIA
AGENT_IDENTITY ED25519_BOUND
02 / ENCLAVE STATE

Live security posture, exposed as evidence.

Terrabox presents enclave integrity as an operational control surface: kernel lockdown, attestation state, audit-chain status, tenant isolation, and credential revocation.

terrabox-a3-tdx-h100 UTC 02:59:01
KERNEL_LOCKDOWN CONFIDENTIALITY (ENFORCED)
ATTESTATION INTEL TDX VERIFIED
AUDIT_LOG HASH_CHAIN_VALID
API_AUTH ARGON2ID_MTLS_READY
KILL_SWITCH AGENT_REVOCATION_TESTED
$ sudo ./scripts/enforce_kernel_lockdown.sh --require
03 / FUNCTIONAL TEMPLATES

Three deployable agent templates.

Built for regulated workflows where identity, auditability, and data isolation are non-negotiable.

fraud_detector

Autonomous Fraud Detection

Financial agent enclaves with hardware-bound transaction limits.

Control
Budget and API-call guardrails
Evidence
Signed execution trail
demand_forecaster

Sovereign Demand Forecasting

Supply chain modeling isolated entirely from platform operator visibility.

Control
Tenant-encrypted data sources
Evidence
Operator plaintext access denied
compliance_monitor

Continuous Compliance Monitoring

Real-time ISM-1486 signed audit trails for automated governance.

Control
Hash-chained audit logger
Evidence
Daily integrity verification
04 / DEVELOPER INTERFACE

A production path a developer team can use in an afternoon.

terrabox-sdk 1.0.0 exposes deployment, execution, revocation, dashboard retrieval, mTLS configuration, and client-side encrypted data-source registration.

pip package: terrabox-sdk==1.0.0 auth: bearer API key + mTLS tenant data: AES-256-GCM before upload
from uuid import UUID
from terrabox_sdk import TerraboxClient

client = TerraboxClient(
    "https://api.terrabox.example",
    api_key="tbx_live_keyid_secret",
    require_https=True,
    client_cert_path="/secure/tenant/client.pem",
    client_key_path="/secure/tenant/client-key.pem",
    ca_cert_path="/secure/tenant/ca.pem",
)

tenant_id = UUID("00000000-0000-0000-0000-000000000001")

agent = client.deploy_agent(
    tenant_id=tenant_id,
    name="fraud-prod",
    template_id="fraud_detector",
)

result = client.execute_agent(
    agent["agent_id"],
    {
        "transaction_id": "txn_001",
        "amount": 1250.0,
        "merchant_country": "AU",
        "device_seen_before": False,
    },
)

dashboard = client.agent_dashboard(agent["agent_id"])
client.revoke_agent(agent["agent_id"], reason="rotation")