DGV-TC-040L1: Compute SubstrateGER-312: GPU Compute Not AttestedVersion: 1.0.0
GPU Confidential Compute Attestation
Verifies that a GPU Confidential Compute attestation report (NVIDIA H100/H200/Blackwell CC mode) has the correct structure: report_type GPU_CC, a known GPU model identifier, a valid SHA-256 runtime measurement, and PCR values present. This establishes the conformance baseline for hardware-rooted GPU inference attestation, the compute substrate root-of-trust for DGV Level 1 and above.
Operational Purpose & Scope
A well-formed GPU_CC attestation report for an H100 with a valid SHA-256 measurement and PCR values present is accepted, confirming hardware-rooted compute substrate attestation.
Verification Context
- Target Scope:
NVIDIA GPU CC attestation report structure; DGV Level 1 compute substrate; hardware root-of-trust for AI inference - Audit Strategy:
rubric-based - Verification Metrics:
gpu_cc_attestedgpu_modelreport_typemeasurement_verifiedpcr_values_presentmissing_fields - Framework Origin:DGV v0.5.0 Expansion
- Mandatory:Yes — must pass for certification
Governance Risk & Penalty
Invalid GPU attestation allows inference on untrusted hardware, undermining all software-level guarantees.
Expected Outcome
- pass:
true - gate_status:
"OPEN" - gpu_cc_attested:
true - measurement_verified:
true - pcr_values_present:
true
Explore this card in 3D
Open DGV-TC-040 in the interactive scenario replay. This illustrates the test flow; it does not run the verifier or generate a cryptographic receipt.
Open DGV Live →