Blekline Enclave — NHIM sidecar for AKS

Blekline Enclave deploys the NHIM ingress sidecar on Azure Kubernetes Service (AKS). Mask sensitive data, enforce MCP tool policy, and emit metadata-only audit events without sending production prompts to a hosted mask API. Requires an active Blekline Redact subscription (SaaS plan or private offer). The sidecar registers with your Blekline control plane at app.blekline.com. Includes: • CNAB deploy on AKS via Azure Marketplace • In-cluster mask pipeline for production agent traffic • Progressive enforcement: audit → enforce • NetworkPolicy-ready chart; optional admission webhook • 5 Enclave nodes included on Redact; additional nodes billed separately How to get started: 1. Purchase Blekline Redact in Azure portal and activate on the landing page. 2. Deploy Blekline Enclave on your AKS cluster from this Container offer. 3. Enter workspace token (blw_...) and control plane URL https://app.blekline.com during deploy. 4. Verify sidecar heartbeats in Blekline Operations. 5. Point agent ingress at the in-cluster sidecar. Docs: https://app.blekline.com/docs/deploy/enclave-aks Support: enterprise@blekline.com