TEE Attestation StackTEE Compile
Attestation Report
The hashes of build inputs and outputs that make a TEE Compile release verifiable.
The Attestation Report is generated by the TEE Compile worker at the end of a build. It records the hash of both the input environment and the output of the compilation, so anyone can later check that a published binary corresponds exactly to a known source and build environment.
The input environment includes:
- Source code
- Environment variables
- Enclave image
- Dependencies
The output includes:
- Executable files
The report is packaged together with the executable files into the release tar file. To verify a release, recompute the hashes of the published artifacts and compare them against the report, confirm the enclave image is trustworthy, and check the issuer of the report — see Report Verification.