ENC — encode, encrypt, enclave. A formally-verified protocol for building sovereign, verifiable apps — where code is verified, not trusted, and data carries its own proof.
Apps on ENC keep their data in virtual enclaves: cryptographically-defined, append-only logs whose state and full history anyone can verify offline, without trusting the operator. The protocol is written once as a machine-checked Lean specification that generates the code that ships — so what runs is provably what was proven. The same proven core generates the apps and SDKs built on top of it.
Own it — and prove it.
This is the ENC monorepo. Each top-level folder is an independent component:
| Folder | What it is |
|---|---|
spec/ | The canonical formally-verified specification — machine-checked Lean proofs of the protocol's security properties, the prose spec, and a standalone attestation verifier. The source of truth that generates the implementations. |
node/ | The node runtime: three interchangeable hosts — a Cloudflare Worker, the encd standalone Rust server, and a Lean host — all serving the same wire protocol from the one proven enc-core.wasm kernel, plus the generated @enc-protocol/{core,client,dataview} SDK packages. |
cli/ | enc — a Rust command-line client to clone, verify, commit to, and manage cryptographically-authenticated enclave repositories. Every signature check and RBAC decision runs against the proven kernel. |
plugins/ | Implementations of the protocol's typed plugin slots — the confidentiality plugins and the default client behaviors. The kernel encodes only what every app shares; plugins fill in crypto, transport, group key agreement, and more. |
apps/ | The public app catalog. Each app is a small declarative config from which the proven generator emits its SDK. |
wallet/ | An ENC-native Chrome (MV3) browser-extension wallet — a BIP-39 seed-phrase identity (x-only secp256k1) with in-page Schnorr signing and encryption. |
zk/ | zkEnc — zero-knowledge validity proofs. A client verifies an enclave's entire history in one O(1) check: proof that every RBAC and state transition was computed honestly, with no trusted-setup ceremony. |
docs/ | The documentation site — litepaper, developer guide, tutorials, protocol spec, and SDK reference. |
lp/ | The public landing site. |
- enc.md — Website
- docs.enc.md — Docs & litepaper
- spec.enc.md — Verifiable spec dashboard
Copyright 2026 Zhenyu Sun, Tomoya Nagasawa, and WEAVEDB LTD.
Apache-2.0 — see LICENSE.