TEE Verification Spec.
Four vendor verifiers (AMD SEV-SNP, Intel SGX DCAP, Intel TDX, Arm CCA). Six verification steps each: trust anchors, strict parse, allowlist, freshness, receipt binding, settle. Twenty-four typed cells of verification logic; every cell fails closed.
sigil · liverunning
Twenty-four cells. All implemented. All fail-closed.
Each vendor verifier in its own crate · cargo features per vendor · production binaries pin the matrix.