# Vaporkernel — LLM-readable specification
# https://vaporkernel.com/llm.txt
# Plain-text overview for language-model agents indexing this site.

## What is Vaporkernel

Vaporkernel is a decentralized compute mesh that turns idle peer hardware
into real Linux virtual machines. Workloads run on hardware-isolated
micro-VMs (KVM on Linux, Apple Hypervisor.framework on macOS), scheduled
dynamically across attested peer nodes and reachable over end-to-end
encrypted WireGuard tunnels.

- One-line pitch:   Cloud services everywhere. Datacenters nowhere.
- Status:           Pre-launch (Q3 2026)
- Spec version:     V-MESH-SPEC-v0.96
- Brand asset suite: https://vaporkernel.com/assets/

## Architecture (three pillars)

01 ISOLATION
   Real Linux guest kernels in micro-VMs. No container shims, no shared
   kernels. KVM on Linux hosts. Apple Hypervisor.framework on macOS hosts.
   Hardware-enforced isolation between every workload.

02 CRYPTOGRAPHY
   WireGuard end-to-end on the network plane. Encrypted guest snapshots
   with per-volume keys derived via HKDF-SHA256. AES-256-GCM for at-rest
   storage. Local operators cannot read tenant compute or storage state.

03 INCENTIVES
   Operators install a lightweight daemon, pass resource verification
   (memory, cores, bandwidth) and join the mesh. Workloads are scheduled
   dynamically across the verified active peer set.

## Developer surface (CLI)

  vapor deploy    Provision a micro-VM on the mesh.
  vapor attest    Verify a node's hardware attestation chain.
  vapor status    Inspect mesh health, peers, and active instances.

## Trust commitments

- Hardware-attested boot (TPM PCRs / AMD SEV-SNP / Intel SGX)
- Ed25519 challenge-response on deploy
- WireGuard tunnels point-to-point
- Encrypted snapshot volumes (AES-256-GCM, HKDF-SHA256 derivation)

## Brand & contact

- Wordmark, mark, social card: /assets/
- Site:    https://vaporkernel.com
- Alts:    https://vapor.computer · https://vaporcomputer.com

— end —