Get started

Deploy

Enclave on AKS

NHIM sidecar in your cluster with Enclave node metering — customer PVC vault, audit-first enforcement.

View as Markdown
Start platform evalBook a pilotStep 0 — NHIM audit →

Eval tracks

Track 0

NHIM audit

npx @blekline/nhim-audit audit --profile generic --plain --json

Track 01

Kubernetes fleet

helm upgrade --install sidecar blekline-ingress -n blekline

Track 02

Docker sidecar

docker pull ghcr.io/blekline/sidecar:0.2.1-nhim

Track 03

MCP self-serve

npx -y @blekline/mcp-server

Engineered for regulated verticals

01Runtime agent governance

NHIM lineage, runtime intent validation, and human-in-the-loop kill switches for AIUC-1 aligned programs.

02Threat mitigation

Defense against LLM01 prompt injection, LLM02 insecure output handling, and LLM06 sensitive information disclosure.

03Data sovereignty & audit

Stateful PII tokenization at the pod boundary and immutable execution logs for transparency workflows.

04AI management controls

Technical safeguards, audit logging, and data masking requirements for ISO 42001 certification audits.

05Risk management

Enforcement layer mapping to NIST AI RMF Govern, Map, Measure, and Protect functions.

When to use: Platform teams shipping agent workloads in Kubernetes who need in-cluster mask, mandatory-hop policy, and metadata-only audit — without Blekline-hosted /api/mask for production agents.

See Choose your path for plan boundaries. Subscribe to Redact or start a platform eval from in-app Billing.

Architecture

flowchart TB
  Agent[Agent pod] --> Sidecar[NHIM sidecar ClusterIP]
  Sidecar --> Vault[PVC vault customer keys]
  Sidecar --> CP[SaaS control plane policy + audit]
  Admission[Mutating webhook] --> Agent
  Sidecar --> HB[Enclave heartbeat /api/enclave/heartbeat]

Production masking runs in-cluster (maskBackend: sidecar). Blekline cannot hydrate hosted masks on Redact production paths. Guarded tokens are not metered on the Enclave ingress path — nodes are.

Prerequisites

Install

npx @blekline/init --path redact
kubectl create namespace blekline
# See Helm values in deploy/k8s/sidecar/values-production.yaml
helm upgrade --install sidecar blekline-ingress -n blekline -f sidecar/values-production.yaml

Agent env: BLEKLINE_SIDECAR_URL=http://<release>-blekline-ingress:8787 — never expose port 8787 on public Ingress.

For injected sidecar (mutating webhook):

metadata:
  annotations:
    blekline.com/inject-sidecar: enabled

Sidecars POST /api/enclave/heartbeat every 15 minutes for node metering.

Verify

  1. /health on sidecar returns 200 with auth token
  2. Heartbeat accepted — check Usage for active Enclave nodes
  3. Upload [NHIM audit](/docs/get-started/nhim-audit-quickstart) JSON to Deployment hub
  4. First allow/mask/block event in Operations → Activity
  5. Optional: issue probe token and run nhim-audit --probe for bypass resistance

Operate

StageBehavior
Audit (default)Log would-deny; no block — Pilot banner
EnforceDual-control activation; values-enforce-profile.yaml, mandatory-hop NP
Hosted maskDisabled on Enclave path — sidecar only
Node billing5 nodes included; min 3 billable when active; $125/node overage

See Coverage & residuals for Windows hooks-only and QUIC egress honesty.

Topology reference

Standalone sidecar

Platform team runs one sidecar Deployment; agent pods call it over ClusterIP.

Injected sidecar

Mutating webhook adds blekline-sidecar; agents use http://127.0.0.1:8787.

Mandatory-hop NetworkPolicy

Agent pods must route tool and model traffic through the sidecar — no 0.0.0.0/0:443 bypass (NHIM-014).

Images

ghcr.io/blekline/sidecar:0.2.1-nhim
ghcr.io/blekline/admission:0.2.1-nhim

Next steps