Aarloven
A live run starts the room when it is off · up to 3 room starts a day, shared by all visitors
Try the sealed room.
Play the buyer: type a small table, pick what to check, and the sealed room in Stockholm, an AWS Nitro Enclave, runs a vendor's tool on it. You get a signed PASS or FAIL receipt and can check it yourself.
The two CRM buttons are live runs of our CRM sample case in the room. Run a sample replays a recorded room run of 5 Oct 2026 in this page, with our sample package.
New to AWS Nitro Enclaves? An enclave is a sealed compartment inside an AWS server, isolated from its parent EC2 instance. Its attestation, signed by AWS, reports the measurement of the enclave image that is running, which you can compare with the published measurement of our room code; the code itself is public to read. More from AWS
Play the buyer: check a vendor's chart tool
A vendor sells you a small tool that turns a table into a bar chart. Type the numbers, pick the points you want checked, and choose the version. The sealed room runs the vendor's tool on your table and sends back each check's result and a signed receipt; this page then shows the chart the checks were run on. Try a negative number with version 2.0.
A live run: if the room is off, this press starts it (one of the 3 starts a day shared by all visitors). Use made-up numbers: customer data comes later, under a data processing agreement. This browser seals your table with the tool and the checks; only the room can open the package, and it deletes its working copy when the run ends. The names and reasons of the checks come back sealed to a key made in this tab. This tab also runs the same published tool and tests on your table, to compare with the room's answer.
Sample result — not your data · sealed room, Stockholm —
Press a button above: Run the vendor's build or Run a buggy build for a live run, Run a sample for a recorded one.
Can we test your delivery on our real data, in a sealed room, before we pay? Hi, Before we accept and pay, we would like your delivery tested against what we agreed, on our real data, in Aarloven's sealed room in Stockholm. Our data stays sealed: only the room can open it. We both get the same PASS or FAIL receipt. See it work in 10 seconds: https://aarloven.com Could we set this up before the next payment?Room build, read from the AWS-signed attestation document and checked in this browser: · PCR0
- PCR0 is the fingerprint of the room's code. The PCR0 that counts is the one above, from the AWS-signed document. The "room code" shown in the steps is what the host reported while streaming.
- "The host tried to open it and AWS refused" is reported by the host, outside what AWS signs; the AWS CloudTrail unlock log is where to check it.
- Check a saved receipt offline: github.com/yu-faye/aarloven-room,
node rerun.mjs. The signed daily public log is in the same repository, under public-log.
Run it on your own data, sealed in this browser
Use test data here; real customer data comes with design-partner terms. Change the data below, or paste your own in the same shape. Your browser makes your key and seals the case: your data, the vendor's build and the agreed tests. Only ciphertext leaves this page. The room opens it with a key AWS KMS releases to the room alone, and its details come back sealed to your key.
Build:
Look at the request in your browser's network panel: only the sealed package goes out. Your key stays in this tab.
Technical details, and how to check it yourself
The room's answer
- Status
- Waiting for a run.
Check it yourself
curl -sO https://aarloven.com/samples/espocrm-1-v1.3.sealed.json curl -s https://aarloven.com/v1/receipt -H 'content-type: application/json' --data-binary @espocrm-1-v1.3.sealed.json git clone https://github.com/yu-faye/aarloven-room && node aarloven-room/rerun.mjs v1.3
The second line asks the room, and works while the room is on (press Run above first). The third runs the same published tests on your machine and prints the same checks and fingerprints as the room's receipt. The case is public at /samples/espocrm-1: the agreed points, the data, the tests and both builds.