0G Tapp eliminates SSH access, enforces API-only interactions

0G Tapp: 0G Tapp is a Trusted Application Platform designed for secure application deployment and execution inside Trusted Execution Environments such as TDX, SEV, and SGX. It features runtime cryptographic measurements, remote attestation, Docker Compose integration, and an EVM-compatible gRPC API for lifecycle management with signature-based authentication and on-chain registration. In this news, it eliminates traditional SSH access to TEE instances by enforcing all interactions through the restricted API, enabling a malicious deployer security model where even the operator cannot access application secrets or modify running code undetected. Alibaba Cloud: Alibaba Cloud is a major cloud provider that offers confidential computing instances with hardware-based TEE support. The news details its use for hosting 0G Tapp via custom confidential images imported to ECS instances in regions like Beijing, with specific instance types and configuration steps required for TEE operation. This positions Alibaba Cloud as the recommended infrastructure backbone for running the platform's attested, measured workloads. API Design: Management occurs exclusively via a gRPC API with EVM signature authentication instead of shell access, ensuring all operations are measured and auditable. Infrastructure: Deployment relies on cloud confidential computing instances equipped for TEEs, with encrypted per-app data volumes managed through KMS integration. Security Model: 0G Tapp adopts a malicious deployer model that cryptographically isolates applications from their deployers through runtime measurements and attestation.