Attestation report

A fresh nonce is generated per request. Every check below is evaluated on the provider's attestation document before any prompt is encrypted and sent.

Verify it independently

The report above comes from this deployment's own endpoint. To check the provider without trusting us, run the repository's verification script against the provider directly — it performs the same checks from a clean process:

cd product
node scripts/e2ee-check.mjs        # attestation + sealed round-trip, 21 assertions
node scripts/e2ee-check.mjs e2ee-glm-5-3-p

What this proves: the workload running your model is the image whose measurements are listed above, on hardware that signed the quote. What it does not prove: that the provider keeps your data afterwards — that is a policy question, not a cryptographic one.