flare-fcc

Explains building and deploying Flare Confidential Compute TEE extensions on Coston2.

Updated Jul 31, 2026
One-click install
npx skills add https://github.com/Rasslonely/NexusXRP --skill flare-fcc-rasslonely
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: flare-fcc
Source: https://github.com/Rasslonely/NexusXRP/tree/main/.agents/skills/flare-fcc
Command: npx skills add https://github.com/Rasslonely/NexusXRP --skill flare-fcc-rasslonely

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Developers building on Flare Confidential Compute face a complex architecture spanning Trusted Execution Environments, on-chain registries, attestation, and reproducible builds, with little consolidated guidance on how the pieces fit together. ## Core Features & Use Cases - Architecture Guidance: Explains the instruction lifecycle, the TeeExtensionRegistry and TeeMachineRegistry contracts, the InstructionSender pattern, and the OPType/OPCommand routing model. - Deployment Walkthroughs: Covers the full Coston2 deployment lifecycle (pre-build, start services, post-build, test) for the fce-extension-scaffold, fce-sign, and fce-weather-insurance reference repos, including attestation and code-hash whitelisting. - Troubleshooting Reference: Documents common failure modes such as Verification.ChallengeExpired, InvalidGovernanceHash, and code hash mismatches with their fixes. - Use Case: A developer wants to build a parametric insurance extension that fetches weather data inside a TEE and settles policies on-chain; this Skill explains the contract, handler, and registration steps end to end. ## Quick Start Ask how to build and deploy a Flare Confidential Compute extension on Coston2 using the fce-extension-scaffold.

Frequently Asked Questions about flare-fcc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a Flare Confidential Compute TEE extension?

Start from the fce-extension-scaffold repo, define matching OPType and OPCommand constants in your Solidity InstructionSender and Go config, implement handlers in internal/extension/extension.go, then deploy on Coston2 using the pre-build, start-services, post-build, and test scripts.

What is the InstructionSender contract in Flare FCC?

The InstructionSender is your own deployed contract and the only address allowed to submit instructions for your extension. It must know its extension ID, call sendInstructions on TeeExtensionRegistry with valid params, be payable to forward the per-instruction fee, and exist before registration.

Can I write a Flare TEE extension in Python or TypeScript?

Yes, the fce-sign example ships in Go, Python, and TypeScript, selected via the LANGUAGE variable. Python and TypeScript use a Framework class that registers handlers by opType and opCommand pair, though only Go achieves bit-for-bit reproducible builds across machines.

Why does TEE registration fail with Verification.ChallengeExpired?

This error means the attestation challenge expired before registration completed. Re-run post-build.sh and ensure register-tee uses the -command rRap flag, which issues a fresh attestation challenge on each run.

What are the limitations of storing secrets on-chain for TEE extensions?

Storing encrypted secrets on-chain is not safe for production because on-chain data is public and encryption weakens over time. The fce-sign example is demo-only for its on-chain secret storage; production systems should deliver secrets through off-chain channels.