Skip to main content
Fetching an attestation runs a fixed sequence. The seven-gate baseline, the report-data binding, and per-provider behavior all describe steps inside this flow.

​
What You Provide

The nonce is optional, but supplying a new random value every request is what gives you replay protection. Anti-replay is caller-driven and no past values are stored, so an omitted nonce is permitted and produces an empty-binding report. See the report-data binding.

​
What Nito Does

  1. Resolve the model to a concrete, attestation-capable sealed-compute environment. A model that does not support attestation has nothing to attest.
  2. Fetch the hardware evidence from that provider. How each one frames the request differs: see per-provider attestation.
  3. Run the baseline verifier over the evidence. Those checks set whether the result is reported as baseline-verified.

​
What Comes Back

A structured summary alongside the raw evidence:
  • The model you asked to attest, and the sealed-compute environment it resolved to.
  • The privacy level recorded for that model, and whether attestation is available for it.
  • The subject the provider was asked about, where the provider frames its request that way.
  • Whether the baseline passed.
  • The nonce observed in the evidence, to compare against the one you sent.
  • The proof format and signing algorithm the evidence declares.
  • The signing address committed to in the request binding, and the model public key.
  • The raw hardware evidence in full, for your own verification.
The summary reports the model public key once. Some tooling surfaces it under a second name such as “signing key,” but it is one value, not two independent keys.
Attestation results are request-local and are not cached. Each request produces a fresh report bound to the nonce you sent, so an old report cannot be replayed as a new one.

​
The Scope Limit

A passing baseline means the evidence passed Nito’s baseline checks. It does not mean Nito validated the underlying hardware quotes, the certificate chains, the revocation lists, or the Trusted Computing Base policy. Those are deliberately out of scope and are yours to run on the raw evidence, which is returned in full for exactly that reason. See verify it yourself.

The Seven-Gate Baseline

The exact checks Nito runs over the evidence.

Report-Data Binding

How your nonce is bound in and compared.

Per-Provider Attestation

How evidence differs across backends.