Source · Tier B · DocumentationSource · Backend infrastructure
Backend infrastructure
Tinfoil. 2026. Tinfoil documentation.
| Original | https://docs.tinfoil.sh/verification/attestation-architecture |
|---|---|
| Version | Living documentation with no publication date shown. The year is the year the page was accessed. The version read on 2026-10-17 has a "GPU verification" section, in which boot checks each NVIDIA GPU's attestation with nvattest. It also has a "How the router admits model enclaves" section. There, the router checks each candidate enclave's hardware quote, verifies the Sigstore bundle of the latest release of the model's repository, compares measurements and pins the enclave's TLS key. The same section notes that direct verification of a model enclave may not be reachable from arbitrary networks. |
| Accessed | 2026-10-17 |
| Authored or published by | Tinfoil |
| Note | Tinfoil's description of its measured boot chain, reproducible builds, Sigstore publication of expected measurements, and client-side verification. Supports "Tinfoil reports" statements. |
Cited by
- Hardware-attested weight bindingMechanism
- TEE remote attestation for AI workloadsMechanism
- Tinfoil model identity (Modelwrap)Implementation
- TinfoilOrganization