zeekayandHanzo Dev 46b274fb9b hanzod: what a node says about the compute it serves, and what that is worth ...

The measurement belongs to the monitor. hanzo-vm folds the kernel, the command
line it builds, the root image and the shape into an extend-only SHA-384
register under the TDX extend rule, and its bind is the 64 bytes a hardware
report carries as caller data. hanzod signs that bind and publishes a record;
computing a second number here would be a second answer to a question that has
one, and it would not fit a report.

States the trust base plainly: host-asserted evidence says a node made a claim,
not that the node fed those images to the monitor. hanzod cannot produce an SNP
or TDX report at all — those are asked for from inside a guest — so it carries
what the monitor found and does not claim it.

Reports a run on M1 Max end to end, and a record checked with OpenSSL and a
re-fold of the register, using no Hanzo code.

Co-authored-by: Hanzo Dev <[email protected]>

2026-09-05 23:50:46 -07:00

244 KiB

Raw Permalink History

View Raw