{"name":"umbra","network":"devnet","tradingOpen":true,"verdict":"VERIFIED","hardware":"TDX: asserted only (no DCAP appraisal)","rows":[{"claim":"Gateway reachable (/health)","status":"BOUND","detail":"health endpoint answered ok"},{"claim":"Solana program identity","status":"BOUND","detail":"gateway anchors to program HvXe5RpCcduVYJWDyavmNKde4uEgUFEiYz99JYQT4DkP (devnet), matching the expected program"},{"claim":"Receipt algorithm","status":"ASSERTED","detail":"gateway declares aci/1 Ed25519 receipts (receipt-v1); proven below by signature verification"},{"claim":"Solana anchoring enabled","status":"ASSERTED","detail":"gateway declares anchoring on; proven below by the on-chain read when a receipt carries an anchor"},{"claim":"Attestation headers match body","status":"BOUND","detail":"x-aci-identity and x-aci-keyset-digest agree with the attestation body"},{"claim":"Health and attestation agree","status":"BOUND","detail":"workload id and keyset digest are identical across /health and /v1/aci/attestation"},{"claim":"Keyset digest (JCS + SHA-256)","status":"BOUND","detail":"recomputed sha256:19ad52bb2e65bf0bdbabd7f512a3001536ecee2c829a37581a7ec21d5ad265d0 from the published keyset — the digest really is the hash of these keys"},{"claim":"Workload identity","status":"BOUND","detail":"workload_id is the published derivation from the receipt-v1 key in the keyset"},{"claim":"Keyset validity window","status":"BOUND","detail":"keyset not_after 1826252120 is in the future"},{"claim":"report_data binds keyset digest","status":"BOUND","detail":"report_data[0..32] is SHA-256 of the ACI statement naming this keyset digest"},{"claim":"Nonce freshness challenge","status":"BOUND","detail":"the gateway recomputed report_data over this verifier’s fresh 32-byte nonce — the attestation is live, not replayed"},{"claim":"Quote hash consistency","status":"BOUND","detail":"quote_hash is SHA-256 of the published quote bytes"},{"claim":"TDX hardware attestation","status":"ASSERTED","detail":"gateway reports a real TDX backend; this checker does not appraise DCAP collateral (that is the Intel Trust Authority’s role, intentionally not invoked)"},{"claim":"GPU attestation","status":"UNKNOWN","detail":"no NRAS GPU claims published (gateway has no NVIDIA attestation configured)"},{"claim":"Session content addressing","status":"BOUND","detail":"4/4 session documents hash (JCS + SHA-256) to the id derived by hashing the listed document itself, and the by-id serving returns bytes that hash to the same id — the records are tamper-evident"},{"claim":"Session evidence digests","status":"BOUND","detail":"4/4 digests published inside the session documents (evidence payloads and embedded workload keysets) recompute to their stated SHA-256 values across 4 document(s)"},{"claim":"Probe receipt id","status":"BOUND","detail":"x-receipt-id header and the signed response’s _clawd block name the same receipt"},{"claim":"Proof binds this verifier’s request","status":"BOUND","detail":"the anchored proof’s request_hash is SHA-256 of the exact bytes this verifier sent"},{"claim":"Proof binds the model","status":"BOUND","detail":"model_hash is SHA-256 of \"phala/gemma-4-26b-a4b-uncensored\""},{"claim":"Canonical payload hash","status":"BOUND","detail":"SHA256(\"CLAWD_REDPILL_V2:\" || request || response || model || nonce) recomputes to the digest the TEE key signed and the PDA is derived from"},{"claim":"Receipt Ed25519 signature","status":"BOUND","detail":"signature verifies over the JCS receipt under key \"receipt-v1\" from the digest-bound keyset — the gateway’s attested receipt key signed this exact document"},{"claim":"Receipt binds the attested workload","status":"BOUND","detail":"receipt workload_id and workload_keyset_digest match the attestation report"},{"claim":"Receipt ↔ proof request binding","status":"BOUND","detail":"the receipt’s forwarded-request hash equals the anchored proof’s request_hash"},{"claim":"Receipt cites upstream session","status":"BOUND","detail":"receipt cites session ad468aa57c44…, fetched and content-address-verified above"},{"claim":"Solana anchor (per receipt)","status":"UNKNOWN","detail":"receipt carries no solana.tee_proof_v2 event — this inference was not anchored (or anchoring failed at issuance)"}],"receiptId":"rcpt-33c976703cc9fce532d06b22"}