CEVELL Developer Guide & API Reference
Zero-trust, end-to-end encrypted AI inference running inside hardware-isolated Confidential Virtual Machines (CVMs) backed by Intel TDX, AMD SEV-SNP, and NVIDIA Hopper H100 SPDM hardware security engines.
Zero-Trust Architecture
CEVELL eliminates intermediary trust assumptions. Neither network gateways, cloud hypervisors, nor platform operators can observe prompts, weights, or token completions.
- Hardware Silicon Attestation: The client fetches the hardware attestation document (
GET /attestation) and verifies the hardware quote signed by silicon manufacturer root certificates (Intel, AMD, NVIDIA).
- Cryptographic Key Binding: Ephemeral HPKE public keys are bound to the hardware quote's 64-byte
REPORT_DATA envelope.
- End-to-End Encryption (RFC 9180 HPKE): Prompts are sealed client-side using standard RFC 9180 HPKE (
DHKEM-X25519-HKDF-SHA256 + AES-256-GCM).
- Tenant Authority Ingress: Requests are authenticated using canonical Ed25519 request signatures (
Authorization: Cevell-Ed25519 ...).
- Streaming Frame Decryption: Streaming tokens are decrypted frame-by-frame on the client in volatile memory.
Authentication
All API requests require a canonical Ed25519 signature generated with your tenant authority key:
Authorization: Cevell-Ed25519 key="<pubkey_hex>",sig="<signature_hex>",ts="<unix_timestamp>",nonce="<random_nonce>",req="<request_id>"
Base URLs & Endpoints
- CVM Gateway:
https://cvm.cevell.com/<target_ip>/v1
- Direct Enclave Address:
https://<target_ip>:443/v1
- Attestation Endpoint:
https://cvm.cevell.com/<target_ip>/attestation
- Fleet Orchestrator:
https://ox.cevell.com/v1
Pricing & Compute Model
CEVELL operates on a pure Bring Your Own Cloud (BYOC) model. Platform access during Developer Preview is 100% Free ($0/mo) with zero platform margin on your cloud infrastructure.
Chat Completions
POST https://cvm.cevell.com/<target_ip>/v1/chat/completions
{
"model": "Qwen/Qwen2.5-3B-Instruct-AWQ",
"messages": [
{"role": "system", "content": "You are a confidential AI assistant."},
{"role": "user", "content": "Explain zero-trust confidential computing."}
],
"stream": true,
"max_tokens": 512,
"temperature": 0.7
}
Error Codes
- 400 Bad Request: Malformed JSON or invalid parameters
- 401 Unauthorized: Invalid Ed25519 signature or timestamp skew
- 403 Forbidden: Tenant authority key mismatch
- 422 Unprocessable Entity: Silicon attestation quote verification failed
- 429 Too Many Requests: Enclave concurrency saturated
- 502 Bad Gateway: CVM runtime unreachable or offline
Code Example: Python (cevell)
import os
from cevell import CVMClient
# 1. Initialize client with target CVM endpoint and tenant private authority key
client = CVMClient(
base_url="https://cvm.cevell.com/<target_ip>/v1",
auth_key=os.environ.get("CEVELL_PROVISION_KEY"),
verify_attestation=True,
)
# 2. Audit hardware silicon attestation (Intel TDX / NVIDIA H100 SPDM)
attestation = client.audit_and_bind_attestation()
# 3. Stream encrypted completions (prompt encrypted client-side with RFC 9180 HPKE)
stream = client.chat.completions.create(
model="Qwen/Qwen2.5-3B-Instruct-AWQ",
messages=[{"role": "user", "content": "Hello confidential AI!"}],
stream=True,
)
for chunk in stream:
print(chunk.choices[0].delta.content or "", end="", flush=True)
Code Example: TypeScript (@cevell/sdk)
import { CVMClient } from "@cevell/sdk";
const client = new CVMClient({
baseUrl: "https://cvm.cevell.com/<target_ip>/v1",
authKey: process.env.CEVELL_PROVISION_KEY,
verifyAttestation: true,
});
await client.auditAndBindAttestation();
const stream = await client.chat.completions.create({
model: "Qwen/Qwen2.5-3B-Instruct-AWQ",
messages: [{ role: "user", content: "Hello confidential AI!" }],
stream: true,
});
for await (const chunk of stream) {
process.stdout.write(chunk.choices[0]?.delta?.content || "");
}