Confidential-computing attestation proves the GPU is genuine — at startup, one time. Every inference after is cryptographically unbound from it. Swap the model, reroute the device, serve INT4 as full precision, alter the output — the hardware attestation still passes. S2S is the leash: every inference hash-chained into an attestation epoch anchored to the hardware evidence and a Hive-issued nonce, signed ML-DSA-65, verifiable offline by anyone.
The crypto core is built and proven — 11/11 tests pass (seven failure modes + invariants). The verifier makes zero network calls. Real silicon is pending a CC-mode GPU. Every piece of origin evidence in the reference build is flagged simulated=True — nothing on this page masquerades as a live hardware receipt, and no live-silicon benchmark appears because none exists yet. Honesty is the product.
The blue flash on the left is nvtrust at startup — genuine GPU, 1–3 seconds, once. Everything streaming after it is unbound: any of those dots could be a swapped model, a rerouted device, an altered output, and the attestation stays green. Flip S2S on and watch every inference snap a chain link back to the evidence.
These seven are the acceptance criteria and the demo — all seven pass in the crypto core today, against evidence flagged simulated=True. Pick an attack. The left panel is NVIDIA telling the truth. The right panel is S2S catching the lie anyway.
Each inference commits to the one before it — that recursion is the gap closure. Tap any link in the chain to tamper with it and watch every downstream link die. Then heal it and watch the epoch reconcile.
We're looking for CC-mode design partners running vLLM. You bring the GPU in CC mode; we wire the nvtrust flow, inject Hive's nonce, and run the seven attacks with simulated=False. You walk out with the first inference receipts a regulator, auditor, or court can verify offline — without trusting NVIDIA, the provider, the model owner, or Hive.