flare-fcc

Guides building and deploying Flare Confidential Compute TEE extensions on Coston2.

Updated Aug 3, 2026
One-click install
npx skills add https://github.com/Zireaelst/Flare-Hackaton --skill flare-fcc-zireaelst
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: flare-fcc
Source: https://github.com/Zireaelst/Flare-Hackaton/tree/main/.agents/skills/flare-fcc
Command: npx skills add https://github.com/Zireaelst/Flare-Hackaton --skill flare-fcc-zireaelst

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Developers building on Flare Confidential Compute face a complex multi-layer system—TEE machines, on-chain registries, instruction routing, attestation, and reproducible builds—with little room for error, and this Skill consolidates that domain knowledge into actionable guidance. ## Core Features & Use Cases - Extension Architecture Guidance: Explains the instruction lifecycle, the InstructionSender contract pattern, the OPType/OPCommand routing model, and the 4-step action handler pattern (decode, validate, execute, build result). - Deployment Walkthroughs: Covers the full Coston2 lifecycle for the fce-extension-scaffold, fce-sign, and fce-weather-insurance repos, including ngrok proxy setup, TEE registration, governance configuration, and code-hash whitelisting. - Troubleshooting Reference: Documents common failure modes such as Verification.ChallengeExpired, InvalidGovernanceHash, MachineManager.TooMany, and code-hash mismatches with their fixes. - Use Case: A developer wants to build a parametric insurance extension where a TEE fetches OpenWeatherMap data and signs settlement results; this Skill explains the contract, handler, attestation, and deployment steps end to end. ## Quick Start Ask how to build and deploy a Flare Confidential Compute extension on Coston2 using the fce-extension-scaffold.

Frequently Asked Questions about flare-fcc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a Flare Confidential Compute TEE extension?

Start with the fce-extension-scaffold, a runnable Hello World extension in Go with contracts, deploy tooling, and a types server. You modify the config constants, request/response types, action handlers, and the InstructionSender contract, then follow the pre-build, start-services, post-build, and test deployment phases.

How does the OPType and OPCommand routing model work in FCC?

OPType selects an operation group and OPCommand sub-routes within it, and both must match exactly as bytes32 identifiers across the Solidity contract, Go config, and Go router. A mismatched OPType returns unsupported op type; a mismatched OPCommand returns unsupported op command.

Can I write a Flare TEE extension in Python or TypeScript?

Yes, the fce-sign example ships in Go, Python, and TypeScript, selected via the LANGUAGE variable in .env. Python and TypeScript use a Framework class that registers handlers by opType/opCommand pair, though only the Go build is bit-for-bit reproducible across machines.

Why does TEE registration fail with Verification.ChallengeExpired?

This error means the attestation challenge expired before registration completed. Re-run post-build.sh and ensure register-tee uses the -command rRap flag, which issues a fresh attestation challenge on re-runs.

What is the difference between MODE=0 and MODE=1 attestation?

MODE=0 is the production attestation backend whose results FTDC accepts on testnet and mainnet, while MODE=1 produces simulated attestation that FTDC rejects. For Coston2 deployment the image must bake MODE=0 with SIMULATED_TEE=false and LOCAL_MODE=false.

Is storing encrypted secrets on-chain safe for production FCC apps?

No, storing encrypted secrets on-chain is not safe for production because on-chain data is public and encryption weakens over time. The fce-sign example is explicitly demo-only for its on-chain secret storage; use off-chain channels for secret delivery instead.