Patterns

McpProtocolMessage -> McpProtocolMessage

Expose an MCP-compliant endpoint over HTTPS that bridges local MCP clients to cloud-hosted agent tools using bearer tokens.

ResponsePayload, RolePermissions -> MaskedResponsePayload

Filter and mask sensitive schema columns in outgoing API response payloads based on the caller's role-based access rights.

APIRequest, Script -> APIRequest

Execute sandboxed scripts during pre- and post-processing phases of an API request lifecycle to mutate payloads or apply custom validation.

UserCredentials -> ImpersonatedSecurityContext

Proxy execution requests to cluster managers and storage using the end-user's identity rather than the gateway's system user.

WebAssemblyModule -> ValidatedWebAssemblyModule

Validate WebAssembly module type-safety, boundaries, and instruction validity against the spec before instantiation.

TokenStream -> TokenStream

Execute procedural code inside a sandboxed WebAssembly interpreter by passing serialized token streams across the boundary.

TransactionContext & KeysetName -> Boolean

Restrict code block execution paths to only proceed when a registered cryptographic keyset signature or scoped capability is active in the transaction context.

(EthereumTransaction, EthereumAccount) -> Data

Generate a cryptographically signed raw transaction payload using a private key accessed through a secure key storage protocol.

Address -> AuthorizedState

Assert that the transaction sender matches a state-stored owner address to guard administrative actions.

CSVFile<Allocation> -> MerkleProofs

Generate a Merkle tree and individual membership proofs from a CSV list of allocations to facilitate trustless on-chain claim verification.

(TokenID, FromAddress, ToAddress) -> UpdatedOwnership

Intercept token transfers to revert any transactions where both the sender and receiver are non-zero addresses.

(CampaignID, ClaimerAddress, ECDSA_Signature) -> MintedToken

Verify an off-chain backend's ECDSA signature to authorize a user's on-chain token/NFT claim.

TransactionPayload + AdminAuth -> ExecutedTransaction

Execute an arbitrary action on behalf of an account by validating the caller against a privileged system-level administrator group.

TransactionProposal + ApprovalList -> ExecutedTransaction

Accumulate cryptographic approvals from designated accounts for a proposed transaction payload and execute it once the threshold is satisfied.

ProcessConfig -> IsolatedProcess

Execute a process inside a dedicated Linux network namespace to isolate its network stack and routing tables.

PromptMetadata -> PortablePromptMetadata

Replace human-readable file names of resources in prompt metadata with their SHA256 hashes to guarantee stable resource tracking.

Array<NodeMeasurement> -> ClusterTrustState

Aggregate individual hardware attestation states of distributed nodes to construct a unified validation proof for the entire compute cluster.

UnencryptedObjectPayload -> EncryptedObjectPayload

Intercept object storage operations to encrypt payloads before transit to untrusted cloud storage and decrypt them upon retrieval within the secure boundary.

HardwareAttestationReport -> NodeAccessCredential

Verify a booting virtual machine's hardware-rooted confidential attestation report against pre-configured golden measurements before releasing cryptographic cluster keys.

RtpPacket -> SrtpPacket

Encrypt payload data of outgoing RTP media packets using negotiated cryptographic keys.

CiphertextTensor -> Tensor<Float>

Decrypt FHE output ciphertexts and apply reciprocal scaling to transform integer results back to float predictions.

CiphertextTensor -> CiphertextTensor

Evaluate a compiled homomorphic circuit directly on input ciphertext to produce encrypted outputs without accessing the underlying cleartext.