Inco SVM — Confidential Computing on Solana

Inco Lightning is a confidentiality layer for Solana that enables developers to build applications where sensitive data remains encrypted even during computation. It uses Trusted Execution Environments (TEEs) to deliver verifiable confidential compute — no new chain, no new wallet required.

> Note: Inco SVM is currently in beta on Solana devnet. Features are subject to change.

Overview

Encrypted Types — Euint128 and Ebool handles representing encrypted values stored off-chain

Homomorphic Operations — Arithmetic, comparison, bitwise, and control flow on encrypted data via CPI

Access Control — Allowance PDA system for granting per-handle decryption permissions

Attested Decryption — Ed25519 signature-verified decryption through TEE covalidators

Confidential SPL Token — Privacy-preserving token standard with encrypted balances and transfers

Client SDK — @inco/solana-sdk for encryption, decryption, and utility helpers

Architecture

Client                    Solana Program              Inco Covalidator (TEE)
  │                            │                              │
  ├─ encryptValue() ──────────►│                              │
  │                            ├─ CPI: new_euint128 ─────────►│
  │                            │◄─── handle (u128) ──────────┤
  │                            ├─ CPI: e_add / e_sub / ... ──►│
  │                            │◄─── result handle ──────────┤
  │                            ├─ CPI: allow() ──────────────►│
  │                            │                              │
  ├─ decrypt([handle]) ───────────────────────────────────────►│
  │◄─── plaintext + Ed25519 attestation ──────────────────────┤

Inco Lightning Program ID: 5sjEbPiqgZrYwR31ahR6Uk9wf5awoX61YGg7jExQSwaj

Quick Start

Installation

Rust Crate (on-chain):

Add to your Cargo.toml:
```toml
[dependencies]
inco-lightning = { version = "0.1", f