savagaon

The release today is just a start. We are looking at supporting additional languages and toolchains. Future releases/community contributions should also bring richer POSIX support.

As to refactoring--it is really up to the developer. With sufficient POSIX support, an entire POSIX-compliant app can live inside an enclave. On the other hand, for security reasons, the developer may decide to refactor their application.

Disclaimer: I am from the Asylo team.

You can find an overview of what enclaves are at https://asylo.dev/about/overview.html.

The security model of enclaves is as follows: Enclaves rely on the OS for their resource management/scheduling, however, the OS cannot compromise the enclave.