Topic
Protocols by which a machine proves to a remote party which hardware and software it is running, usually as a condition of receiving keys or secrets.
The Linux Foundation is taking over an open spec for hardware-signed agent runtime evidence. The producing side now has code and a spec; nobody has yet named who accepts the record.
Perspective Coverage
4 publishersReality
Trail of Bits says a malicious host could roll back a TEE-hosted threshold signer's storage and force nonce reuse that leaks its private key share. The firm's advice is to keep the protocol sound without the enclave and tie attestation to each MPC party's identity.
Reality
Private Processing runs glasses workloads in confidential VMs and logs every production image in an append-only public ledger, so the isolation claim can be checked from outside, though the matching binaries reach researchers only under agreement.
Reality
Private AI Compute has erased all context at the end of each task. Google plans to keep per-user context in encrypted cloud storage instead, with the decryption keys held only on the user's own devices.
Reality
Meta says a stateful, deeply personal assistant cannot fit in a pair of glasses, so inference runs in confidential VMs in its data centres, and the client sends nothing unless two attestation checks pass.
Reality
Berardino Carnevale of Rambus told Lets Data Science that measured boot protects only the components inside the measurement set, and that attestation evidence settles nothing until a verification service acts on it.
Reality
Confidential computing never promised memory freshness. DDRop turns that omission into arbitrary access inside a TDX guest, using a board that costs under $200 and two prerequisites a cloud provider already holds.
Reality
Weight Custody Manifest binds a model's decryption key to hardware attestation, which gives builders a lever once weights leave their data center. The public 91-case suite exercises protocol logic on synthetic certificate roots.
Reality
OPAQUE's new specification turns licence terms into machine-readable policy that a key broker checks before every release of a decryption key. Whether that binds anything depends on parts the preview leaves open.
Reality