AEREDIUM

How AEREDIUM Achieves Structural Decentralisation Without Anonymous Governance

1. Introduction: A New Model of Decentralisation

The blockchain industry has long operated under a false dichotomy: either a network is decentralised through anonymous validators and token governance, or it is centralised under a single operator. AEREDIUM rejects this binary framing.

We have developed an architecture that achieves genuine decentralisation—not through anonymous actors or speculative token voting—but through the immutable properties of hardware isolation and cryptographic proof. We call this approach Verifiable Infrastructure.

This document explains how AEREDIUM achieves decentralisation through physics and mathematics rather than social coordination, and why this model provides stronger guarantees than traditional approaches while maintaining the accountability that institutional users require.

2. The Technical Foundation

2.1 Machine Validators in Trusted Execution Environments

AEREDIUM validators are not humans staking tokens. They are machine processes running in Trusted Execution Environments (TEEs) across three major cloud providers: AWS Nitro Enclaves, Azure SEV-SNP, and Google Cloud Confidential Space.

Each validator consists of two components:

• Parent Compute Instance: Handles networking, transaction mempool, smart contract execution via Geth EVM, storage, RPC requests, and logging.
• TEE Component: A cryptographically isolated environment that handles security-critical operations—private key storage, block signing, consensus vote signing, and attestation document generation.

The TEE provides hardware-level isolation with these properties:

• No persistent storage, no interactive access, no external networking—the enclave is completely isolated.
• Memory encryption—all TEE memory is encrypted with keys inaccessible to cloud provider personnel or other processes.
• Cryptographic attestation—proves the validator is running expected code on genuine TEE hardware.

2.2 Multi-Cloud Distribution

The validator set is distributed across three independent cloud providers: