{"privacy_tier":"A (encrypted at rest) + attested-enclave foundation; Tier B (operator-blind dreaming) in progress","encryption_at_rest":{"scheme":"AES-256-GCM under a per-owner DEK; Cloud KMS wraps the DEK. Revoking the KMS key version crypto-shreds every owner.","kms_key":"projects/withzero/locations/us-central1/keyRings/memory/cryptoKeys/content-dek","embeddings":"cleartext (pgvector computes distance on plaintext vectors) — a topic-level side-channel until Tier B+ moves search in-enclave"},"enclave":{"status":"verify workload proven on hardware (ENCLAVE-VERIFY: SUCCESS on AMD SEV, STABLE Confidential Space); the in-enclave dream pass is the next slice","bound_image_digest":"sha256:bd9857490d1061f2185308c798420e1f6403777dd423c61672d4d0b6c08a9e69","workload_identity_pool":"projects/542149601442/locations/global/workloadIdentityPools/memory-enclave","kms_grant":"roles/cloudkms.cryptoKeyDecrypter on projects/withzero/locations/us-central1/keyRings/memory/cryptoKeys/content-dek to principalSet://iam.googleapis.com/projects/542149601442/locations/global/workloadIdentityPools/memory-enclave/attribute.image_digest/<bound_image_digest> — no other identity except the service's own runtime SA can unwrap DEKs"},"residual_risks":["dreaming (server-managed consolidation) currently decrypts content in the Cloud Run process — operator-readable transiently until the Tier B enclave dream pass ships","recall decrypts in-process to serve you plaintext over TLS (inherent to the API shape; Tier B+ narrows it)","embedding vectors are cleartext at rest (topic-level side-channel)"],"verify":["gcloud kms keys get-iam-policy content-dek --keyring=memory --location=us-central1 --project=withzero — confirm the Decrypter grant is bound to exactly the digest above","gcloud iam workload-identity-pools providers describe cs-provider --workload-identity-pool=memory-enclave --location=global --project=withzero — confirm the provider requires swname CONFIDENTIAL_SPACE and STABLE","source + design: capabilities/memory/enclave/README.md and docs/memory-tee-privacy-design.md in github.com/piedotorg/withzero"]}