docs: update TEE guides and command examples for clarity

Le-Caignec · Le-Caignec · commit 3286e455cf70 · 2025-08-21T15:18:30.000+02:00
- Improved phrasing in the "Deploy &amp; Run" sections across multiple TEE guides for better readability.
- Updated command examples to use dynamic workerpool addresses instead of hardcoded values in various advanced iApp documentation.
- Enhanced clarity in the "Access Confidential Assets" guide by adjusting the description formatting.
diff --git a/src/get-started/protocol/tee/intel-sgx.md b/src/get-started/protocol/tee/intel-sgx.md
@@ -142,7 +142,7 @@ graph TD
 
 **Ready to build with SGX?** Check out the practical guides:
 
-- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Create your first
-  SGX application
+- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Create your first SGX
+  application
 - **[Advanced SGX Development](/guides/build-iapp/advanced/create-your-first-sgx-app)** -
   Deep dive into SGX development
diff --git a/src/get-started/protocol/tee/intel-tdx.md b/src/get-started/protocol/tee/intel-tdx.md
@@ -144,5 +144,5 @@ graph TD
 
 **For production applications, use SGX**:
 
-- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Create
-  production-ready SGX applications
+- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Create production-ready
+  SGX applications
diff --git a/src/get-started/protocol/tee/introduction.md b/src/get-started/protocol/tee/introduction.md
@@ -121,5 +121,5 @@ TEE technologies have evolved to address different use cases:
 
 - **[Build Intel TDX App (Experimental)](/guides/build-iapp/advanced/create-your-first-tdx-app)** -
   Build TDX applications with traditional deployment and iApp Generator
-- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Create your first
-  TEE application
+- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Create your first TEE
+  application
diff --git a/src/get-started/protocol/tee/sgx-vs-tdx.md b/src/get-started/protocol/tee/sgx-vs-tdx.md
@@ -81,5 +81,5 @@ technology** for advanced use cases.
 
 - **[Build Intel TDX App (Experimental)](/guides/build-iapp/advanced/create-your-first-tdx-app)** -
   Build TDX applications with traditional deployment and iApp Generator
-- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Create your first
-  TEE application
+- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Create your first TEE
+  application
diff --git a/src/guides/build-iapp/advanced/access-confidential-assets.md b/src/guides/build-iapp/advanced/access-confidential-assets.md
@@ -2,7 +2,8 @@
 title: Access Confidential Assets from Your App
 description:
   Learn how to access confidential assets including secrets, protected data, and
-  requester secrets from your iExec application using the Secret Management Service
+  requester secrets from your iExec application using the Secret Management
+  Service
 ---
 
 # Access confidential assets from your app
diff --git a/src/guides/build-iapp/advanced/create-your-first-sgx-app.md b/src/guides/build-iapp/advanced/create-your-first-sgx-app.md
@@ -240,20 +240,19 @@ iexec app deploy --chain {{chainName}}
 
 Specify the tag `--tag tee,scone` in `iexec app run` command to run a tee app.
 
-One last thing, in order to run a **TEE-debug** app you will also need to select
-a debug workerpool, use the debug workerpool
-`debug-v8-learn.main.pools.iexec.eth`.
+One last thing, in order to run a **TEE** app you will also need to select a
+workerpool, use the iexec workerpool `{{workerpoolAddress}}`.
 
 You are now ready to run the app
 
 ```bash twoslash
-iexec app run --chain {{chainName}} --tag tee,scone --workerpool debug-v8-learn.main.pools.iexec.eth --watch
+iexec app run --chain {{chainName}} --tag tee,scone --workerpool {{workerpoolAddress}} --watch
 ```
 
 ::: info
 
-You noticed we used `debug-v8-learn.main.pools.iexec.eth` instead of an ethereum
-address, this is an ENS name.
+You noticed we used `{{workerpoolAddress}}` instead of an ethereum address, this
+is an ENS name.
 
 :::
 
@@ -285,4 +284,5 @@ const selectedChain = computed(() => userStore.getCurrentChainId());
 
 const chainData = computed(() => getChainById(selectedChain.value));
 const chainName = computed(() => chainData.value.chainName);
+const workerpoolAddress = computed(() => chainData.value.workerpoolAddress);
 </script>
diff --git a/src/guides/build-iapp/advanced/create-your-first-tdx-app.md b/src/guides/build-iapp/advanced/create-your-first-tdx-app.md
@@ -303,8 +303,8 @@ EXPERIMENTAL_TDX_APP=true iapp run <app-address>
   **[Intel SGX Technology](/get-started/protocol/tee/intel-sgx)** for production
 - **[Create Your First SGX App](/guides/build-iapp/advanced/create-your-first-sgx-app)** -
   Build production-ready SGX applications
-- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Standard iApp
-  deployment guide
+- **[Deploy & Run](/guides/build-iapp/deploy-&-run)** - Standard iApp deployment
+  guide
 
 ### 🔗 **Related Resources**
 
@@ -314,8 +314,8 @@ EXPERIMENTAL_TDX_APP=true iapp run <app-address>
   Generator documentation
 - **[DataProtector SDK](/references/dataProtector)** - Work with protected data
   in TDX
-- **[Advanced iApp Building](/guides/build-iapp/advanced/quick-start-for-developers)** - Advanced
-  development techniques
+- **[Advanced iApp Building](/guides/build-iapp/advanced/quick-start-for-developers)** -
+  Advanced development techniques
 
 <script setup>
 import ChainNotSupportedBadge from '@/components/ChainNotSupportedBadge.vue'
diff --git a/src/guides/build-iapp/advanced/end-to-end-encryption.md b/src/guides/build-iapp/advanced/end-to-end-encryption.md
@@ -87,7 +87,7 @@ the beneficiary in the command:
 ```bash twoslash
 iexec app run <0x-your-app-address> \
     --chain {{chainName}}
-    --workerpool debug-v8-learn.main.pools.iexec.eth \
+    --workerpool {{workerpoolAddress}} \
     --tag tee,scone \
     --encrypt-result \
     --watch
@@ -154,4 +154,5 @@ const selectedChain = computed(() => userStore.getCurrentChainId());
 
 const chainData = computed(() => getChainById(selectedChain.value));
 const chainName = computed(() => chainData.value.chainName);
+const workerpoolAddress = computed(() => chainData.value.workerpoolAddress);
 </script>
diff --git a/src/guides/build-iapp/advanced/quick-start-for-developers.md b/src/guides/build-iapp/advanced/quick-start-for-developers.md
@@ -205,7 +205,7 @@ to pay for the computation.
 Everything is ready to run your application!
 
 ```bash twoslash
-iexec app run --chain arbitrum-mainnet --args <your-name-here> --workerpool prod-v8-learn.main.pools.iexec.eth --watch
+iexec app run --chain arbitrum-mainnet --args <your-name-here> --workerpool {{workerpoolAddress}} --watch
 ```
 
 ::: info
@@ -217,7 +217,7 @@ Useful options:
 - `--args <args>` specify the app execution arguments
 - `--watch` watch execution status changes
 - `--workerpool <address>` specify the workerpool to use (for example:
-  `--workerpool prod-v8-learn.main.pools.iexec.eth`)
+  `--workerpool {{workerpoolAddress}}`)
 
 Discover more option with `iexec app run --help`
 
@@ -361,4 +361,5 @@ const selectedChain = computed(() => userStore.getCurrentChainId());
 
 const chainData = computed(() => getChainById(selectedChain.value));
 const chainName = computed(() => chainData.value.chainName);
+const workerpoolAddress = computed(() => chainData.value.workerpoolAddress);
 </script>
diff --git a/src/guides/build-iapp/advanced/your-first-app.md b/src/guides/build-iapp/advanced/your-first-app.md
@@ -336,7 +336,7 @@ iexec app show --chain {{chainName}}
 ### Run your app on iExec
 
 ```bash twoslash
-iexec app run --chain {{chainName}} --workerpool debug-v8-learn.main.pools.iexec.eth --watch
+iexec app run --chain {{chainName}} --workerpool {{workerpoolAddress}} --watch
 ```
 
 ::: info
@@ -426,4 +426,5 @@ const selectedChain = computed(() => userStore.getCurrentChainId());
 
 const chainData = computed(() => getChainById(selectedChain.value));
 const chainName = computed(() => chainData.value.chainName);
+const workerpoolAddress = computed(() => chainData.value.workerpoolAddress);
 </script>
diff --git a/src/guides/manage-data/manage-access.md b/src/guides/manage-data/manage-access.md
@@ -135,12 +135,12 @@ you can specify a whitelist contract that contains multiple app versions. Very
 useful for when you need to upgrade your iApp, without losing all the granted
 access.
 
-```ts
+```text twoslash
 // Single app
-authorizedApp: 'web3mail.apps.iexec.eth';
+authorizedApp: {{web3MailAddress}};
 
 // Or use a whitelist (recommended for production)
-authorizedApp: '0x781482C39CcE25546583EaC4957Fb7Bf04C277D2'; // Web3Mail whitelist
+authorizedApp: {{web3MailAppWhitelist}}; // Web3Mail whitelist
 ```
 
 #### authorizedUser <RequiredBadge />
@@ -209,6 +209,17 @@ steps:
   [data monetization strategies](/guides/manage-data/monetize-protected-data)
 
 <script setup>
+import { computed } from 'vue';
+import useUserStore  from '@/stores/useUser.store';
+import {getChainById} from '@/utils/chain.utils';
 import RequiredBadge from '@/components/RequiredBadge.vue'
 import OptionalBadge from '@/components/OptionalBadge.vue'
+
+// Get current chain and compute explorer info
+const userStore = useUserStore();
+const selectedChain = computed(() => userStore.getCurrentChainId());
+
+const chainData = computed(() => getChainById(selectedChain.value));
+const web3MailAddress = computed(() => chainData.value.web3MailAddress);
+const web3MailAppWhitelist = computed(() => chainData.value.web3MailAppWhitelist);
 </script>
diff --git a/src/references/dataProtector/dataProtectorCore/grantAccess.md b/src/references/dataProtector/dataProtectorCore/grantAccess.md
@@ -92,14 +92,13 @@ const grantedAccess = await dataProtectorCore.grantAccess({
 You may authorize a specific app or a whitelist of apps to use the protected
 data.
 
-iExec uses the ENS `web3mail.apps.iexec.eth` for the latest version of the
-Web3Mail decentralized application.
+The latest version of the iExec Web3Mail decentralized application is
+`{{web3MailAddress}}`.
 
 iExec also maintains a whitelist for current and past versions of Web3Mail iApp.
 Granting access to this whitelist allows use of an email `protectedData` with
 all versions of the Web3Mail application, ensuring you only have to grant this
-access once. The ETH address for this whitelist is
-**0x781482C39CcE25546583EaC4957Fb7Bf04C277D2**.
+access once. The ETH address for this whitelist is **{{web3MailAppWhitelist}}**.
 
 :::
 
@@ -252,6 +251,17 @@ The result of this method confirms the new access grant. It consists of a JSON
 [`GrantedAccess`](/references/dataProtector/types#grantedaccess)
 
 <script setup>
+import { computed } from 'vue';
+import useUserStore  from '@/stores/useUser.store';
+import {getChainById} from '@/utils/chain.utils';
 import RequiredBadge from '@/components/RequiredBadge.vue'
 import OptionalBadge from '@/components/OptionalBadge.vue'
+
+// Get current chain and compute explorer info
+const userStore = useUserStore();
+const selectedChain = computed(() => userStore.getCurrentChainId());
+
+const chainData = computed(() => getChainById(selectedChain.value));
+const web3MailAddress = computed(() => chainData.value.web3MailAddress);
+const web3MailAppWhitelist = computed(() => chainData.value.web3MailAppWhitelist);
 </script>
diff --git a/src/references/dataProtector/dataProtectorCore/processProtectedData.md b/src/references/dataProtector/dataProtectorCore/processProtectedData.md
@@ -278,7 +278,7 @@ confidential computations on the iExec platform.
 
 :::
 
-::: info
+::: info TDX <ChainNotSupportedBadge/>
 
 🧪 While protected data are processed in **TEE** by **intel SGX** technology by
 default, `@iexec/dataprotector` can be configured to create and process
diff --git a/src/utils/chain.utils.ts b/src/utils/chain.utils.ts
@@ -27,6 +27,10 @@ export interface Chain {
   iexecExplorerUrl: string;
   workerpoolAddress: string;
   ipfsGateway: string;
+  web3MailAddress: string;
+  web3MailAppWhitelist: string;
+  web3TelegramAddress: string;
+  web3TelegramAppWhitelist: string;
 }
 
 export function getSupportedChains(): Chain[] {
@@ -42,6 +46,10 @@ export function getSupportedChains(): Chain[] {
       iexecExplorerUrl: 'https://explorer.iex.ec/arbitrum-mainnet',
       workerpoolAddress: '0x2C06263943180Cc024dAFfeEe15612DB6e5fD248',
       ipfsGateway: 'https://ipfs-gateway.arbitrum-mainnet.iex.ec',
+      web3MailAddress: '0x9E37767A18B7E7ac2bbeba0900e3B5b0613FA385',
+      web3MailAppWhitelist: '0xD5054a18565c4a9E5c1aa3cEB53258bd59d4c78C',
+      web3TelegramAddress: '0xD8614ad70A73A426A15F6474EB4aE633e0015805',
+      web3TelegramAppWhitelist: '0x53AFc09a647e7D5Fa9BDC784Eb3623385C45eF89',
     },
     {
       id: Number(bellecour.id),
@@ -61,6 +69,10 @@ export function getSupportedChains(): Chain[] {
       iexecExplorerUrl: 'https://explorer.iex.ec/bellecour',
       workerpoolAddress: 'prod-v8-bellecour.main.pools.iexec.eth',
       ipfsGateway: 'https://ipfs-gateway.v8-bellecour.iex.ec',
+      web3MailAddress: 'web3mail.apps.iexec.eth',
+      web3MailAppWhitelist: '0x781482C39CcE25546583EaC4957Fb7Bf04C277D2',
+      web3TelegramAddress: 'web3telegram.apps.iexec.eth',
+      web3TelegramAppWhitelist: '0x192C6f5AccE52c81Fcc2670f10611a3665AAA98F',
     },
   ];
 }
