[PASS] manifest.format manifest is well formed [PASS] manifest.commitments bundle commitments match the manifest [PASS] manifest.challenge challenge is the one this verifier issued [PASS] tdx.structure TDX quote v4, TEE 0x81, 4936 bytes [PASS] tdx.debug TD attributes 0000001000000000 (0x10000000), DEBUG (bit 0) off: not a debug TD [PASS] tdx.report_data quote report_data equals SHA-512 of the manifest [PASS] tdx.signatures attestation key, QE binding, QE report and PCK chain verify up to the pinned Intel SGX Root CA [PASS] tdx.collateral TCB info and QE identity signed by Intel (bundle (fetched 2026-11-04T20:11:28+00:00)) [PASS] tdx.tcb platform TCB UpToDate, QE UpToDate, TDX_01 UpToDate [PASS] tdx.revocation PCK certificate not revoked (57 entries in CRL) [PASS] tdx.revocation PCK CA certificate not revoked (0 entries in CRL) [PASS] nvidia.signatures 9 NVIDIA-signed tokens verify, keys from the bundle chained to a pinned NRAS intermediate (offline) [PASS] nvidia.nonce NRAS eat_nonce equals SHA-256 of the manifest [PASS] nvidia.policy overall result true, every GPU: measurements ok, secure boot on, debug off, nonce matched, report signature and chain validated [PASS] nvidia.freshness token issued 2s from bundle creation TDX: MRTD eea8b6a814569a52bd1e12f6b869bb2d... TCB UpToDate QE UpToDate GPU: GPU-0 GH100 driver 595.71.05 vbios 96.00.CF.00.02 measurements success GPU: GPU-1 GH100 driver 595.71.05 vbios 96.00.CF.00.02 measurements success GPU: GPU-2 GH100 driver 595.71.05 vbios 96.00.CF.00.02 measurements success GPU: GPU-3 GH100 driver 595.71.05 vbios 96.00.CF.00.02 measurements success GPU: GPU-4 GH100 driver 595.71.05 vbios 96.00.CF.00.02 measurements success GPU: GPU-5 GH100 driver 595.71.05 vbios 96.00.CF.00.02 measurements success GPU: GPU-6 GH100 driver 595.71.05 vbios 96.00.CF.00.02 measurements success GPU: GPU-7 GH100 driver 595.71.05 vbios 96.00.CF.00.02 measurements success RESULT: VERIFIED