feat: Phala TDX attestation trust-root for agent-challenge (validator/master, offline-validated)#39

Draft

echobt wants to merge 12 commits into

mainfrom

mission/phala-attest

Commits on Jul 8, 2026

feat(worker): define ExecutionProof Phala TDX tier + attestation schema
echobt
committed
test(worker): pin cross-repo report_data golden vector (drift guard)
echobt
committed
test(worker): pin cross-repo emitted-envelope conformance (Phala tier)
echobt
committed
test(worker): fix mypy type-ignore code on Phala envelope conformance test
echobt
committed
feat(worker): Phala-tier ExecutionProof quote verifier (accept valid, reject tamper, park on outage)
echobt
committed
test(master): pin R=1 + no reconciliation for attested agent-challenge units (flag ON)
echobt
committed
test(verify): base-side flag-OFF invariant (R=1 legacy path, Phala verifier never invoked)
echobt
committed
feat(verify): allowlist fail-closed loading + multi-entry image rotation [VAL-VERIFY-025/027]
echobt
committed
fix(worker): park dcap-qvl exit-0-unparseable output; pin cross-repo TDX quote golden vector
echobt
committed

Commits on Jul 9, 2026