{"signature":"6649fe85667f902919f6395e4b73e9ef9c1f5611b496c1e7a2ecfec1016feb10d33305d69eff65b4dc9a89b1a380e94c92faee91dd1702c6abc20f0c7df0100d","signer":"d0488b99f10d265b78ad40cc22fed544dce45c4668a4468b947692dee0f31314","spec":{"version":"chopmark-attestation/v1","dimensions":[{"name":"silicon_root","weight":30,"checks":{"sev_snp_signature":30,"tdx_quote":30}},{"name":"endpoint_binding","weight":15,"checks":{"cert_binding":5,"claimed_report_data":3,"e2ee_roundtrip":5,"keyset_digest":5,"ohttp_key_signature":3,"output_signature":5,"report_data_binding":5,"sev_hatt_binding":5,"sev_hpke_binding":5,"sev_tls_binding":8,"signature":5,"signed_quote":3,"tls_binding":8}},{"name":"liveness","weight":15,"checks":{"body_nonce":5,"e2ee_roundtrip":5,"gpu_nonce_binding":5,"output_signature":5,"report_data_binding":10,"sev_hatt_binding":5,"sev_hpke_binding":5,"sev_tls_binding":8}},{"name":"measured_boot","weight":15,"checks":{"measurement_appraisal":7,"rtmr_replay":8,"sigstore_bundle":7,"sigstore_measurement":8}},{"name":"gpu","weight":10,"checks":{"gpu_nonce_binding":5,"nras":10}},{"name":"supply_chain","weight":10,"checks":{"compose_manifest":5,"manifest_audit":5,"release_pinned":5,"sigstore_bundle":5,"sigstore_measurement":5}},{"name":"fleet","weight":5}],"levels":[{"level":1,"name":"challenge","requires":["silicon_root","liveness"],"detail":"a vendor-rooted quote answers a live challenge"},{"level":2,"name":"bound","requires":["silicon_root","liveness","endpoint_binding"],"detail":"the quote binds the endpoint identity and keys"},{"level":3,"name":"measured","requires":["silicon_root","liveness","endpoint_binding","measured_boot"],"detail":"boot is measured and the event log replays"},{"level":4,"name":"reproducible","requires":["silicon_root","liveness","endpoint_binding","measured_boot","supply_chain"],"detail":"the release is pinned to published, auditable artifacts"},{"level":5,"name":"full","requires":["silicon_root","liveness","endpoint_binding","measured_boot","supply_chain","gpu"],"detail":"GPU attestation is bound to the same challenge"}],"bands":[{"grade":"A","min_points":85,"detail":"points \u003e= 85 with zero warnings"},{"grade":"B","min_points":65,"detail":"points \u003e= 65"},{"grade":"C","min_points":0,"detail":"verified but thin"},{"grade":"F","min_points":0,"detail":"a check failed, nothing ran, or the evidence misses the floor"},{"grade":"ERR","min_points":0,"detail":"provider unreachable, which is not a cryptographic failure"}],"reason_codes":["fail:insufficient_evidence","gap:no_silicon_root","gap:no_endpoint_binding","gap:no_liveness","gap:measured_unverified","gap:gpu_unverified","gap:release_unpinned","gap:unbound_layer","warn:\u003ccheck\u003e","note:fleet_single_unit","note:no_\u003cdimension\u003e"]}}