coreason-enclave
Project description
coreason-enclave
Privacy-Preserving Compute Layer for Federated Learning
coreason-enclave is the "Embassy" / Secure Compute Wrapper of the CoReason AI ecosystem. It acts as the privacy-preserving compute layer, allowing orchestration of training jobs across distributed nodes (e.g., multiple hospitals or partner pharma companies) without accessing their raw data. It combines Federated Learning, Confidential Computing (TEEs), and Differential Privacy to ensure a mathematical guarantee of privacy.
Core Philosophy: "Move the Model to the Data. Never move the Data. Encrypt the RAM."
🚀 Features
- Federated Learning (FL): Orchestrate training across distributed nodes using NVIDIA FLARE. Only weight updates (gradients) are shared, never raw data. Supports FedAvg, FedProx, and SCAFFOLD strategies.
- Confidential Computing: Designed to run inside hardware-encrypted Trusted Execution Environments (TEEs) (e.g., NVIDIA H100 Confidential Compute, Intel SGX). This ensures memory is encrypted at the CPU level, protecting against cloud provider inspection. Includes Remote Attestation to cryptographically prove code integrity.
- Differential Privacy (DP): Integrated with Opacus to inject Gaussian noise into gradients, strictly enforcing a privacy budget ($\epsilon$).
- The "Sightless" Surgeon: The AI learns from data it never "sees."
- Data Sentry: An "Airlock" mechanism that validates input data and strictly sanitizes output, ensuring no sensitive information leaks via logs or return payloads.
🛠️ Installation
pip install coreason-enclave
💻 Usage
The coreason-enclave agent typically runs as a service managed by an orchestrator, but can be invoked directly or integrated into custom workflows.
Basic Initialization
from coreason_enclave.federation.executor import CoreasonExecutor
from coreason_enclave.schemas import FederationJob
# Initialize the Executor
executor = CoreasonExecutor(
training_task_name="train",
aggregation_task_name="aggregate"
)
# Note: In production, this is handled automatically by the NVFlare runtime.
# The executor listens for tasks from the Federation Overseer.
Running the Agent (CLI)
To start the agent as a standalone client connecting to a federation:
# Secure Mode (Requires TEE Hardware)
python -m coreason_enclave.main \
--workspace /tmp/workspace \
--conf config/client_config.json
# Simulation Mode (For Development/Testing)
python -m coreason_enclave.main \
--workspace /tmp/workspace \
--conf config/client_config.json \
--simulation
For more detailed requirements and architecture, please refer to the Product Requirements Document.
📜 License
This project is licensed under the Prosperity Public License 3.0. See the LICENSE file for details.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file coreason_enclave-0.2.1.tar.gz.
File metadata
- Download URL: coreason_enclave-0.2.1.tar.gz
- Upload date:
- Size: 25.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
c00dc11b2e7d07a6773fae796581981359d7ae49b7fd93af95f9d2065f04a56b
|
|
| MD5 |
2d3535df98ecf95e754994e402940c3a
|
|
| BLAKE2b-256 |
ffcb13635a959d5f84d6b173902c9b6f02044d90c2afd48956e2f298dd574a03
|
Provenance
The following attestation bundles were made for coreason_enclave-0.2.1.tar.gz:
Publisher:
publish.yml on CoReason-AI/coreason-enclave
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
coreason_enclave-0.2.1.tar.gz -
Subject digest:
c00dc11b2e7d07a6773fae796581981359d7ae49b7fd93af95f9d2065f04a56b - Sigstore transparency entry: 868691536
- Sigstore integration time:
-
Permalink:
CoReason-AI/coreason-enclave@9972572ac5714fbcc2d51a2e0ba65c74099d8644 -
Branch / Tag:
refs/tags/v0.2.1 - Owner: https://github.com/CoReason-AI
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@9972572ac5714fbcc2d51a2e0ba65c74099d8644 -
Trigger Event:
release
-
Statement type:
File details
Details for the file coreason_enclave-0.2.1-py3-none-any.whl.
File metadata
- Download URL: coreason_enclave-0.2.1-py3-none-any.whl
- Upload date:
- Size: 36.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
0ee12ae84903bb1e1e0f930e595a5c97b40d5adcf43ae2e8871d6125460b8110
|
|
| MD5 |
b7cafc945d87b052f025738cd5b43e95
|
|
| BLAKE2b-256 |
43187ecbe2127bf512e35e1d5ef7fed553afd29b7a8974e5c061f089f8538682
|
Provenance
The following attestation bundles were made for coreason_enclave-0.2.1-py3-none-any.whl:
Publisher:
publish.yml on CoReason-AI/coreason-enclave
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
coreason_enclave-0.2.1-py3-none-any.whl -
Subject digest:
0ee12ae84903bb1e1e0f930e595a5c97b40d5adcf43ae2e8871d6125460b8110 - Sigstore transparency entry: 868691540
- Sigstore integration time:
-
Permalink:
CoReason-AI/coreason-enclave@9972572ac5714fbcc2d51a2e0ba65c74099d8644 -
Branch / Tag:
refs/tags/v0.2.1 - Owner: https://github.com/CoReason-AI
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@9972572ac5714fbcc2d51a2e0ba65c74099d8644 -
Trigger Event:
release
-
Statement type: