Covers trusted execution environments, hardware-backed isolation, remote attestation, encrypted processing, limitations, and suitable confidential-computing use cases.