Go SDK version 1.18.0 adds Confidential Workflows support. A new TEE runtime (cre.TeeRuntime) and cre.HandlerInTee let you run workflow logic inside a secure enclave, keeping secrets, sensitive inputs, and computation confidential from node operators during execution.