English | 中文
Resource Broker Service (RBS) securely releases keys, certificates, and other sensitive resources to workloads that pass remote attestation through the Global Trust Authority.
This repository is a Rust workspace for policy-driven trusted resource delivery. It combines remote attestation, access policy evaluation, protected resource retrieval, operator tooling, and deployable service packaging for confidential computing and zero-trust environments.
It includes:
rbs— Broker service that verifies workload trust, evaluates access policies, and releases protected resources only to authorized attested clients.rbc— Client SDK and optional command-line client that helps applications submit attestation evidence, manage sessions, and retrieve keys, certificates, or other protected resources from RBS.rbs-cli— Operator tool for managing broker users, policies, resources, certificates, tokens, and client-side verification workflows from scripts or an interactive shell.
For a step-by-step setup, build, test, run, and service verification, see Quick start in docs/build/build_and_install.md.
| Topic | Location |
|---|---|
| AI agent onboarding | AGENTS.md |
| System architecture | architecture.md |
| Build, run, test | build_and_install.md |
| RPM installation | rpm.md |
| RBC client CLI usage | rbc.md |
| rbs-cli usage | rbs_cli.md |
| Container deployment | docker/ |
| REST API | YAML · MD · HTML |
| Test suite | README.md |
| Sample config | rbs.yaml |
| Developer tooling | Further reading |
| Contributing | CONTRIBUTING.md |
Licensed under the Mulan Permissive Software License, v2 (Mulan PSL v2) — see LICENSE.