{ "version": "flashfirm-phala-public-proof/v1", "observedAt": "2026-11-03T07:13:07.518Z", "build": { "version": "flashfirm-phala-build/v1", "image": "ghcr.io/0xcaptain888/flashfirm-phala-quotation@sha256:a152f2f1f4fdfbce2a96255982537d4a9571256311382e7dfec6be4a462338b7", "packaging": "PUBLISHED_CONTAINER", "sourceSha256": "59ff61c85e1797c46c22fc7d83a82dd6600042a674d561440419127ff4bf980c", "dockerComposeSha256": "74b5c650a94439cc79eb934338a4eb504d7c093612a97dfa204304f0de54891c", "scope": "Dependency-free exact quotation gate; no remote AI inference; public proof test only", "secretReleaseAllowed": false, "maxFirstRunUsd": 5 }, "expected": { "nonce": "49cc757ee17a040cd4cfa26ec88fc3116e019eb96355f948525fdf606a984f6c", "taskDigest": "1a97e06ba43d029b744e54e47abd31413beb635ffc92879c19f1adb2139f4fd5", "expiresAt": 1793690284386, "dockerCompose": "{\n \"services\": {\n \"app\": {\n \"image\": \"ghcr.io/0xcaptain888/flashfirm-phala-quotation@sha256:a152f2f1f4fdfbce2a96255982537d4a9571256311382e7dfec6be4a462338b7\",\n \"platform\": \"linux/amd64\",\n \"command\": [\n \"node\",\n \"/app/phala-worker.mjs\"\n ],\n \"ports\": [\n \"80:3000\"\n ],\n \"volumes\": [\n \"/var/run/dstack.sock:/var/run/dstack.sock\"\n ],\n \"read_only\": true,\n \"cap_drop\": [\n \"ALL\"\n ],\n \"security_opt\": [\n \"no-new-privileges:true\"\n ],\n \"pids_limit\": 64,\n \"mem_limit\": \"512m\",\n \"restart\": \"no\",\n \"logging\": {\n \"driver\": \"none\"\n }\n }\n }\n}\n" }, "task": { "version": "flashfirm-quotation-task/v1", "sources": [ { "id": "mainnet-policy", "text": "# NEAR → Arbitrum mainnet payment console\n\nThis is one separately approved demonstration payment, not an automatic payout\nfrom the NEAR testnet task treasury. The original Solana route was replaced by\nthe user's Arbitrum destination.\n\nThe policy in `src/mainnet-payment.mjs` pins the source account, refund account,\nArbitrum One chain ID, native USDC contract and recipient. Principal is exactly\n0.5 NEAR, source gas/storage allowance at most 0.1 NEAR, and total source value\nat most $5 using a fresh signed quote. Fees withheld from output are reflected\nin that quote. Dollar valuation is a point-in-time quote, not a USD-denominated\non-chain spending limit.\n\n## Actual evidence and current boundary\n\n`evidence/mainnet-route-preview.json` is an actual dry quote captured from the\nofficial service. Its signature verifies offline with the pinned official SDK.\nThe recorded output is historical and must not be used as a current price.\nNo deposit address was issued, transaction signed or funds moved in that record.\nIt is not payment evidence.\n\nThe local console now obtains and verifies live dry quotes. Official service\ndefaults are validated explicitly (public confidentiality, no insurance, zero\nwaiting delay and at most 25 bps in the default service-fee entry).\n\nThe OKX wallet display label is `0xcaptain888.near`, but the connected on-chain\naccount is the user-supplied implicit account\n`0cd07d0982767b3b7abed80e489129be51df7300f0b2729a8f28f6eef3200606`.\nRead-only mainnet RPC checks found funds in this implicit account and a zero\nbalance in the separate named account. Source and refund policies therefore\npin the implicit account; wallet labels never authorize a different signer.\nAn executable quote was saved, the account/storage/gas preflight passed and the\nuser approved the OKX signing prompt. The returned transaction failed the exact\naction check (`SIGNED_ACTIONS_SUBSTITUTED`). No source hash was persisted and\nthe local service did not broadcast. The first rejected signed response was\nnot retained, so its exact field differences and hash cannot be reconstructed.\nAn independent check found the source balance unchanged and the matching relay\norder still `PENDING_DEPOSIT`. These are observations, not proof that the wallet\nnever attempted broadcast.\n\nInspection of installed OKX 4.22.2 showed that its `signTransaction` handler\nattempts to submit before returning signed bytes. Therefore post-signature\nvalidation is insufficient to prevent extension-side submission. **Signing is\ndisabled in both the local service and UI pending a wallet compatibility fix.**\nDo not retry, reset the journal or send a second deposit.\n\nAn offline regression on 2026-11-03 used the official `@okxweb3/coin-near` 2.4.9,\n`coin-base` 2.0.6 and `crypto-lib` 2.0.5 in an isolated ignored directory. All four\nstandard flat FunctionCall actions roundtripped through its encoder and the\nunchanged exact validator, with a newly generated random test key and no\nbroadcast. `scripts/check-okx-serialization.mjs` reproduces that fixture check.\nThe app's dependency graph does not include those experimental tools.\nThis result does not prove browser compatibility or identify the original\nmissing response's changed field; it provides no basis to weaken the validator.\nThe read-only saved-order check verifies the official quote signature and\nidentity, then reads the finalized source balance. It never claims delivery.\nSubsequent signed-response diagnostics retain decoded actions and their\ncryptographically verified hash before an integrity error, without exposing\nthe signed bytes in public state.\n\n## Start locally\n\n```sh\nnpm ci\nnpm run mainnet:console\n# Chrome: http://127.0.0.1:43186\n```\n\nFor this workstation's existing localhost proxy, after installing the separate\nCloudflare dependencies:\n\n```sh\nFLASHFIRM_USE_SYSTEM_PROXY=1 npm run mainnet:console\n```\n\nThe service binds only `127.0.0.1`, pins Host/Origin, requires an in-memory CSRF\ntoken for every mutation, and does not expose CORS. Do not publish or reverse\nproxy this console. It is not a hosted payment API.\n\n## Wallet and order lifecycle\n\n1. Connect the exact approved NEAR account using the OKX browser extension.\n Connection requests no contract delegation or access-key creation.\n2. Get a dry quote. Verify its official Ed25519 signature, route and $5 budget.\n3. Review the recipient and check the authorization checkbox. Reserve an\n executable quote; its output cannot fall below the previewed output minimum.\n4. Check a final NEAR block, account collateral, token storage and maximum\n prepaid gas. Only absent wNEAR registrations are added.\n5. Signing is currently disabled. The intended flow is to review exact actions\n and personally approve the wallet signature. The single\n transaction targets `wrap.near`: storage registration if needed, wrapping\n exactly 0.5 NEAR, and an exact `ft_transfer` to the signed deposit account.\n6. The backend decodes the returned Borsh transaction, validates every action,\n signer, receiver, gas, deposit, arguments and Ed25519 signature, refreshes\n the budget, then writes the deterministic hash before any server broadcast.\n This does not control a wallet that submits before returning the signature.\n7. Reconcile that same hash. Verify FINAL NEAR execution, exact actions and\n wNEAR transfer event, the saved quote identity/signature and relay mapping,\n then the USDC transfer against a pinned Arbitrum RPC at `finalized`.\n\nAn Arbitrum transaction may be delivered before the RPC considers it finalized.\nThe console must wait rather than weaken the finality check. An Intents\nSUCCESS label does not by itself prove destination delivery.\n\n## Recovery and limitations\n\nThe private journal is `.runtime/mainnet-payment/journal.json`; keep it when\nrestarting. One journal allows at most one funding transaction. A signature\ninterruption is retained as `AWAITING_SIGNATURE`; an ambiguous broadcast is\nretained with its deterministic hash. Inspect and reconcile existing records;\nnever delete the journal to bypass this guard or repeat a payment.\n\n`REFUNDED` and `FAILED` are relay observations, not independently verified\nrefunds; refund-chain verification remains to be implemented. A cancellation\nbefore any signed bytes requires an operator review; there is intentionally no\nautomatic reset or second deposit button.\n\nCross-chain linkage relies on the official signed quote plus the relay's\ntransaction mapping and independent RPC observations. It is not a trustless\nbridge light-client proof. Historical testnet task funds, model budgets and\nPhala resources are separate. This implementation sends no paid model calls\nand does not deploy TEE resources.\n\nOfficial references:\n\n- NEAR Intents: `docs.near-intents.org`, Making a Request / Verify Quote Signatures\n- `defuse-protocol/one-click-sdk-typescript`, QuoteRequest / Quote / SwapDetails\n- `near/wallet-selector`, `packages/okx-wallet/src/lib/okx-wallet.ts`\n- `near/wallet-selector`, `packages/okx-wallet/src/lib/injected-okx-wallet.ts`\n", "sha256": "50eace79dc9e78fb0b261c88b69f103a276f46215f247c827b571789f53fb04d" } ], "claims": [ { "id": "policy", "sourceId": "mainnet-policy", "quote": "This is one separately approved demonstration payment, not an automatic payout" }, { "id": "invented", "sourceId": "mainnet-policy", "quote": "FlashFirm guarantees every wallet broadcast is automatically safe and irreversible." } ] }, "bundle": { "context": { "version": "flashfirm-phala-context/v1", "nonce": "49cc757ee17a040cd4cfa26ec88fc3116e019eb96355f948525fdf606a984f6c", "taskDigest": "1a97e06ba43d029b744e54e47abd31413beb635ffc92879c19f1adb2139f4fd5", "expiresAt": 1793690284386, "signingPublicKey": "MCowBQYDK2VwAyEAOVVnzyvS8aPbB1k6AhR0rYHH/2jqnlWqIfF1o8ksA/U=", "encryptionPublicKey": "MCowBQYDK2VuAyEAM50ROY6PbFSlW5iurmhSD+aTXTk9G+mDeOEU0zJw/go=" }, "attestation": { "quote": "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", "event_log": "[{\"imr\":0,\"event_type\":2147483659,\"digest\":\"0b8772e5b0b41b83e6044a68397e02f49fb47066b4fbe4917ea2c45c64f323fdacbb37948f821ebaf8bc9c938ba8a749\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":2147483658,\"digest\":\"344bc51c980ba621aaa00da3ed7436f7d6e549197dfe699515dfa2c6583d95e6412af21c097d473155875ffd561d6790\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":2147483649,\"digest\":\"9dc3a1f80bcec915391dcda5ffbb15e7419f77eab462bbf72b42166fb70d50325e37b36f93537a863769bcf9bedae6fb\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":2147483649,\"digest\":\"6f2e3cbc14f9def86980f5f66fd85e99d63e69a73014ed8a5633ce56eca5b64b692108c56110e22acadcef58c3250f1b\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":2147483649,\"digest\":\"d607c0efb41c0d757d69bca0615c3a9ac0b1db06c557d992e906c6b7dee40e0e031640c7bfd7bcd35844ef9edeadc6f9\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":2147483649,\"digest\":\"08a74f8963b337acb6c93682f934496373679dd26af1089cb4eaf0c30cf260a12e814856385ab8843e56a9acea19e127\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":2147483649,\"digest\":\"18cc6e01f0c6ea99aa23f8a280423e94ad81d96d0aeb5180504fc0f7a40cb3619dd39bd6a95ec1680a86ed6ab0f9828d\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":4,\"digest\":\"394341b7182cd227c5c6b07ef8000cdfd86136c4292b8e576573ad7ed9ae41019f5818b4b971c9effc60e1ad9f1289f0\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":10,\"digest\":\"39740da2ea1e7e6c69e5e6569755b2ad6d622a8a9983a2c5b32d5574659dbdc4ca8b95b1c766bd610bc5c26dcde842f8\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":10,\"digest\":\"6385b89d2decb3de678d51faba0ff3506835915818fd3ee53a739aa678cd9c76bdd755adfa0aa714cf35a1abe062b253\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":10,\"digest\":\"05705c3ca9d71e908d5ce70d4331b6aadce5331b9a6a546f222f017fb0e1797b951a3dac72f59cb197a0c897a201ca07\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":1,\"event_type\":2147483651,\"digest\":\"48368ab87e5b8fecfb216bc26bbccfe13081bf8b67d4d2ee7de708e91819eeb56227db2349fc3b04ad5f5719ffd11809\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":2147483650,\"digest\":\"1dd6f7b457ad880d840d41c961283bab688e94e4b59359ea45686581e90feccea3c624b1226113f824f315eb60ae0a7c\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":0,\"event_type\":2147483650,\"digest\":\"23ada07f5261f12f34a0bd8e46760962d6b4d576a416f1fea1c64bc656b1d28eacf7047ae6e967c58fd2a98bfa74c298\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":1,\"event_type\":2147483655,\"digest\":\"77a0dab2312b4e1e57a84d865a21e5b2ee8d677a21012ada819d0a98988078d3d740f6346bfe0abaa938ca20439a8d71\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":1,\"event_type\":4,\"digest\":\"394341b7182cd227c5c6b07ef8000cdfd86136c4292b8e576573ad7ed9ae41019f5818b4b971c9effc60e1ad9f1289f0\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":2,\"event_type\":6,\"digest\":\"549e21b8d8898430a0be6e53191717f1d30d66588bdafe0055b20d197e415fae963b06ec925f14b027267812d3734fea\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":2,\"event_type\":6,\"digest\":\"fd01285d396a483667123c1a1a64d83b2dd5c6cef2b8803c97522be00c5255ff27feb79f6ea9b46c6856bbe2769bad66\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":1,\"event_type\":2147483655,\"digest\":\"214b0bef1379756011344877743fdc2a5382bac6e70362d624ccf3f654407c1b4badf7d8f9295dd3dabdef65b27677e0\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":1,\"event_type\":2147483655,\"digest\":\"0a2e01c85deae718a530ad8c6d20a84009babe6c8989269e950d8cf440c6e997695e64d455c4174a652cd080f6230b74\",\"event\":\"\",\"event_payload\":\"\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"system-preparing\",\"event_payload\":\"\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"app-id\",\"event_payload\":\"fce3df7f587fc0832a7cc961cddc3f6bb8b287ac\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"compose-hash\",\"event_payload\":\"9c5ac0e34d578d78a689b38cf8584a82cb891ae461f75027641edb69831c13d8\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"instance-id\",\"event_payload\":\"b800ce94bda835168b2822c287d6021ecb480fba\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"boot-mr-done\",\"event_payload\":\"\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"mr-kms\",\"event_payload\":\"b08d45d361a48703e9c5a7a76758be98b6d6c19620f9436806f0783ef899e97d\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"os-image-hash\",\"event_payload\":\"8db40cb23008d6213668b5816702d100b37b859a8a5bfd18d938ae3a1b3715bd\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"key-provider\",\"event_payload\":\"7b226e616d65223a226b6d73222c226964223a223330353933303133303630373261383634386365336430323031303630383261383634386365336430333031303730333432303030343838343465623432636364663863353266643466313734663336326663623962626431396334356664343866316564656332643866316361323335333665633161373430323162346365653631306330373466383239346434333162326237666565326333396535333333666461663061343532326434336662313539643966227d\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"storage-fs\",\"event_payload\":\"65787434\"},{\"imr\":3,\"event_type\":134217729,\"digest\":\"\",\"event\":\"system-ready\",\"event_payload\":\"\"}]" }, "info": { "tcb_info": "{\n \"mrtd\": \"7fe60787222bd394cb516abca2435f22f035ab2cc9c0a4b4b3b148e46297f3d931a237b72f359052c6e657d8c1409173\",\n \"rtmr0\": \"68102e7b524af310f7b7d426ce75481e36c40f5d513a9009c046e9d37e31551f0134d954b496a3357fd61d03f07ffe96\",\n \"rtmr1\": \"4ae609807c765916a31d724786ed74bcb97e168a9d937b04936aeef2015c907eba5ac352c6bcd749c246fd62ffb659ec\",\n \"rtmr2\": \"764489f277a8540189761e72b4238ba36d4d647e11bd958d8ab5522af2a4867b0ff63e06b0c4967f1857236244040a5d\",\n \"rtmr3\": \"4ce6b11e02f391428ddbe6e9ecfa04fa053e9446141aef5c4035949ce076ddc08f4ce99c8b4d108d8d775387d6b288d9\",\n \"mr_aggregated\": \"bdab76668cb4b9c019b4fff7583a5d521d9ed344b6784fdd42049fa252a5233b\",\n \"os_image_hash\": \"8db40cb23008d6213668b5816702d100b37b859a8a5bfd18d938ae3a1b3715bd\",\n \"compose_hash\": \"9c5ac0e34d578d78a689b38cf8584a82cb891ae461f75027641edb69831c13d8\",\n \"device_id\": \"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\n \"event_log\": [\n {\n \"imr\": 0,\n \"event_type\": 2147483659,\n \"digest\": \"0b8772e5b0b41b83e6044a68397e02f49fb47066b4fbe4917ea2c45c64f323fdacbb37948f821ebaf8bc9c938ba8a749\",\n \"event\": \"\",\n \"event_payload\": \"095464785461626c65000100000000000000af96bb93f2b9b84e9462e0ba745642360090800000000000\"\n },\n {\n \"imr\": 0,\n \"event_type\": 2147483658,\n \"digest\": \"344bc51c980ba621aaa00da3ed7436f7d6e549197dfe699515dfa2c6583d95e6412af21c097d473155875ffd561d6790\",\n \"event\": \"\",\n \"event_payload\": \"2946762858585858585858582d585858582d585858582d585858582d58585858585858585858585829000000c0ff000000000040080000000000\"\n },\n {\n \"imr\": 0,\n \"event_type\": 2147483649,\n \"digest\": \"9dc3a1f80bcec915391dcda5ffbb15e7419f77eab462bbf72b42166fb70d50325e37b36f93537a863769bcf9bedae6fb\",\n \"event\": \"\",\n \"event_payload\": \"61dfe48bca93d211aa0d00e098032b8c0a00000000000000000000000000000053006500630075007200650042006f006f007400\"\n },\n {\n \"imr\": 0,\n \"event_type\": 2147483649,\n \"digest\": \"6f2e3cbc14f9def86980f5f66fd85e99d63e69a73014ed8a5633ce56eca5b64b692108c56110e22acadcef58c3250f1b\",\n \"event\": \"\",\n \"event_payload\": \"61dfe48bca93d211aa0d00e098032b8c0200000000000000000000000000000050004b00\"\n },\n {\n \"imr\": 0,\n \"event_type\": 2147483649,\n \"digest\": \"d607c0efb41c0d757d69bca0615c3a9ac0b1db06c557d992e906c6b7dee40e0e031640c7bfd7bcd35844ef9edeadc6f9\",\n \"event\": \"\",\n \"event_payload\": \"61dfe48bca93d211aa0d00e098032b8c030000000000000000000000000000004b0045004b00\"\n },\n {\n \"imr\": 0,\n \"event_type\": 2147483649,\n \"digest\": \"08a74f8963b337acb6c93682f934496373679dd26af1089cb4eaf0c30cf260a12e814856385ab8843e56a9acea19e127\",\n \"event\": \"\",\n \"event_payload\": \"cbb219d73a3d9645a3bcdad00e67656f0200000000000000000000000000000064006200\"\n },\n {\n \"imr\": 0,\n \"event_type\": 2147483649,\n \"digest\": \"18cc6e01f0c6ea99aa23f8a280423e94ad81d96d0aeb5180504fc0f7a40cb3619dd39bd6a95ec1680a86ed6ab0f9828d\",\n \"event\": \"\",\n \"event_payload\": \"cbb219d73a3d9645a3bcdad00e67656f03000000000000000000000000000000640062007800\"\n },\n {\n \"imr\": 0,\n \"event_type\": 4,\n \"digest\": \"394341b7182cd227c5c6b07ef8000cdfd86136c4292b8e576573ad7ed9ae41019f5818b4b971c9effc60e1ad9f1289f0\",\n \"event\": \"\",\n \"event_payload\": \"00000000\"\n },\n {\n \"imr\": 0,\n \"event_type\": 10,\n \"digest\": \"39740da2ea1e7e6c69e5e6569755b2ad6d622a8a9983a2c5b32d5574659dbdc4ca8b95b1c766bd610bc5c26dcde842f8\",\n \"event\": \"\",\n \"event_payload\": \"414350492044415441\"\n },\n {\n \"imr\": 0,\n \"event_type\": 10,\n \"digest\": \"6385b89d2decb3de678d51faba0ff3506835915818fd3ee53a739aa678cd9c76bdd755adfa0aa714cf35a1abe062b253\",\n \"event\": \"\",\n \"event_payload\": \"414350492044415441\"\n },\n {\n \"imr\": 0,\n \"event_type\": 10,\n \"digest\": \"05705c3ca9d71e908d5ce70d4331b6aadce5331b9a6a546f222f017fb0e1797b951a3dac72f59cb197a0c897a201ca07\",\n \"event\": \"\",\n \"event_payload\": \"414350492044415441\"\n },\n {\n \"imr\": 1,\n \"event_type\": 2147483651,\n \"digest\": \"48368ab87e5b8fecfb216bc26bbccfe13081bf8b67d4d2ee7de708e91819eeb56227db2349fc3b04ad5f5719ffd11809\",\n \"event\": \"\",\n \"event_payload\": \"18e0fd7a00000000008485000000000000000000000000002a000000000000000403140072f728144ab61e44b8c39ebdd7f893c7040412006b00650072006e0065006c0000007fff0400\"\n },\n {\n \"imr\": 0,\n \"event_type\": 2147483650,\n \"digest\": \"1dd6f7b457ad880d840d41c961283bab688e94e4b59359ea45686581e90feccea3c624b1226113f824f315eb60ae0a7c\",\n \"event\": \"\",\n \"event_payload\": \"61dfe48bca93d211aa0d00e098032b8c0900000000000000020000000000000042006f006f0074004f0072006400650072000000\"\n },\n {\n \"imr\": 0,\n \"event_type\": 2147483650,\n \"digest\": \"23ada07f5261f12f34a0bd8e46760962d6b4d576a416f1fea1c64bc656b1d28eacf7047ae6e967c58fd2a98bfa74c298\",\n \"event\": \"\",\n \"event_payload\": \"61dfe48bca93d211aa0d00e098032b8c08000000000000003e0000000000000042006f006f0074003000300030003000090100002c0055006900410070007000000004071400c9bdb87cebf8344faaea3ee4af6516a10406140021aa2c4614760345836e8ab6f46623317fff0400\"\n },\n {\n \"imr\": 1,\n \"event_type\": 2147483655,\n \"digest\": \"77a0dab2312b4e1e57a84d865a21e5b2ee8d677a21012ada819d0a98988078d3d740f6346bfe0abaa938ca20439a8d71\",\n \"event\": \"\",\n \"event_payload\": \"43616c6c696e6720454649204170706c69636174696f6e2066726f6d20426f6f74204f7074696f6e\"\n },\n {\n \"imr\": 1,\n \"event_type\": 4,\n \"digest\": \"394341b7182cd227c5c6b07ef8000cdfd86136c4292b8e576573ad7ed9ae41019f5818b4b971c9effc60e1ad9f1289f0\",\n \"event\": \"\",\n \"event_payload\": \"00000000\"\n },\n {\n \"imr\": 2,\n \"event_type\": 6,\n \"digest\": \"549e21b8d8898430a0be6e53191717f1d30d66588bdafe0055b20d197e415fae963b06ec925f14b027267812d3734fea\",\n \"event\": \"\",\n \"event_payload\": \"ed223b8f1a0000004c4f414445445f494d4147453a3a4c6f61644f7074696f6e7300\"\n },\n {\n \"imr\": 2,\n \"event_type\": 6,\n \"digest\": \"fd01285d396a483667123c1a1a64d83b2dd5c6cef2b8803c97522be00c5255ff27feb79f6ea9b46c6856bbe2769bad66\",\n \"event\": \"\",\n \"event_payload\": \"ec223b8f0d0000004c696e757820696e6974726400\"\n },\n {\n \"imr\": 1,\n \"event_type\": 2147483655,\n \"digest\": \"214b0bef1379756011344877743fdc2a5382bac6e70362d624ccf3f654407c1b4badf7d8f9295dd3dabdef65b27677e0\",\n \"event\": \"\",\n \"event_payload\": \"4578697420426f6f7420536572766963657320496e766f636174696f6e\"\n },\n {\n \"imr\": 1,\n \"event_type\": 2147483655,\n \"digest\": \"0a2e01c85deae718a530ad8c6d20a84009babe6c8989269e950d8cf440c6e997695e64d455c4174a652cd080f6230b74\",\n \"event\": \"\",\n \"event_payload\": \"4578697420426f6f742053657276696365732052657475726e656420776974682053756363657373\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"f9974020ef507068183313d0ca808e0d1ca9b2d1ad0c61f5784e7157c362c06536f5ddacdad4451693f48fcc72fff624\",\n \"event\": \"system-preparing\",\n \"event_payload\": \"\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"4975d88da5670301904891522cdcc6e573be295e44c50e71c1e1c62a378f92c65564bb23de5270a2598c6efec801cebb\",\n \"event\": \"app-id\",\n \"event_payload\": \"fce3df7f587fc0832a7cc961cddc3f6bb8b287ac\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"f6f94b2e1dc2d658dfcc9000437daa7d17210b66a64873925531d30318ac7c8a880c01ab91964d8ee0e7bc09b05a241f\",\n \"event\": \"compose-hash\",\n \"event_payload\": \"9c5ac0e34d578d78a689b38cf8584a82cb891ae461f75027641edb69831c13d8\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"7f4c42353ac7ef3714b5c2735ff2e40922807936a0c3ff1023837b997ce08f28f944bee894f1c3c6794c083a6a678367\",\n \"event\": \"instance-id\",\n \"event_payload\": \"b800ce94bda835168b2822c287d6021ecb480fba\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"98bd7e6bd3952720b65027fd494834045d06b4a714bf737a06b874638b3ea00ff402f7f583e3e3b05e921c8570433ac6\",\n \"event\": \"boot-mr-done\",\n \"event_payload\": \"\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"d339af0930d0dfa047069d148ff93e391a0fa209888ea96dd8b29cc85e5888bcda02e4e294708b947808cc93e37790d8\",\n \"event\": \"mr-kms\",\n \"event_payload\": \"b08d45d361a48703e9c5a7a76758be98b6d6c19620f9436806f0783ef899e97d\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"9381eb17a317a6ebabc892bd4601743106b3f7415f2a82fe73c24b1b12d9fb982a26e7c49632fe2fae01ffbae6bf5ea2\",\n \"event\": \"os-image-hash\",\n \"event_payload\": \"8db40cb23008d6213668b5816702d100b37b859a8a5bfd18d938ae3a1b3715bd\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"83368b43a0fc6f824f5a9220592df85fd30e2d405ecbd253a5c6354af63e6c9b41aec557c38a38e348ab87f9ac8fc68c\",\n \"event\": \"key-provider\",\n \"event_payload\": \"7b226e616d65223a226b6d73222c226964223a223330353933303133303630373261383634386365336430323031303630383261383634386365336430333031303730333432303030343838343465623432636364663863353266643466313734663336326663623962626431396334356664343866316564656332643866316361323335333665633161373430323162346365653631306330373466383239346434333162326237666565326333396535333333666461663061343532326434336662313539643966227d\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"94eb1c817c35f570ca895b48b46e656e696d1a126581e70022f6f93a8c64d026ece224c6bffbe3bfdfe00bb3447adcd0\",\n \"event\": \"storage-fs\",\n \"event_payload\": \"65787434\"\n },\n {\n \"imr\": 3,\n \"event_type\": 134217729,\n \"digest\": \"1a76b2a80a0be71eae59f80945d876351a7a3fb8e9fd1ff1cede5734aa84ea11fd72b4edfbb6f04e5a85edd114c751bd\",\n \"event\": \"system-ready\",\n \"event_payload\": \"\"\n }\n ],\n \"app_compose\": \"{\\\"allowed_envs\\\":[],\\\"docker_compose_file\\\":\\\"{\\\\n \\\\\\\"services\\\\\\\": {\\\\n \\\\\\\"app\\\\\\\": {\\\\n \\\\\\\"image\\\\\\\": \\\\\\\"ghcr.io/0xcaptain888/flashfirm-phala-quotation@sha256:a152f2f1f4fdfbce2a96255982537d4a9571256311382e7dfec6be4a462338b7\\\\\\\",\\\\n \\\\\\\"platform\\\\\\\": \\\\\\\"linux/amd64\\\\\\\",\\\\n \\\\\\\"command\\\\\\\": [\\\\n \\\\\\\"node\\\\\\\",\\\\n \\\\\\\"/app/phala-worker.mjs\\\\\\\"\\\\n ],\\\\n \\\\\\\"ports\\\\\\\": [\\\\n \\\\\\\"80:3000\\\\\\\"\\\\n ],\\\\n \\\\\\\"volumes\\\\\\\": [\\\\n \\\\\\\"/var/run/dstack.sock:/var/run/dstack.sock\\\\\\\"\\\\n ],\\\\n \\\\\\\"read_only\\\\\\\": true,\\\\n \\\\\\\"cap_drop\\\\\\\": [\\\\n \\\\\\\"ALL\\\\\\\"\\\\n ],\\\\n \\\\\\\"security_opt\\\\\\\": [\\\\n \\\\\\\"no-new-privileges:true\\\\\\\"\\\\n ],\\\\n \\\\\\\"pids_limit\\\\\\\": 64,\\\\n \\\\\\\"mem_limit\\\\\\\": \\\\\\\"512m\\\\\\\",\\\\n \\\\\\\"restart\\\\\\\": \\\\\\\"no\\\\\\\",\\\\n \\\\\\\"logging\\\\\\\": {\\\\n \\\\\\\"driver\\\\\\\": \\\\\\\"none\\\\\\\"\\\\n }\\\\n }\\\\n }\\\\n}\\\\n\\\",\\\"features\\\":[\\\"kms\\\",\\\"tproxy-net\\\"],\\\"gateway_enabled\\\":true,\\\"kms_enabled\\\":true,\\\"local_key_provider_enabled\\\":false,\\\"manifest_version\\\":2,\\\"name\\\":\\\"\\\",\\\"no_instance_id\\\":false,\\\"public_logs\\\":false,\\\"public_sysinfo\\\":false,\\\"public_tcbinfo\\\":true,\\\"runner\\\":\\\"docker-compose\\\",\\\"secure_time\\\":false,\\\"storage_fs\\\":\\\"ext4\\\",\\\"tproxy_enabled\\\":true}\"\n}" } }, "hardwareVerification": { "success": true, "checksum": "9f4b214fbbfa715f17d7cf7f06bf552f31e84148659e75bb3a05b795f8081fd0", "verified_at": "2026-11-03T07:13:06.794808+00:00", "quote": { "header": { "version": 4, "ak_type": "ECDSA_P256", "tee_type": "TEE_TDX", "qe_vendor": "0x939a7233f79c4ca9940a0db3957f0607", "user_data": "0xcca1e818c0d9e8b17007c295c31004ec00000000" }, "body": { "tee_tcb_svn": "0b010500000000000000000000000000", "mrseam": "0x7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d", "mrsignerseam": "0x000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "seamattributes": "0x0000000000000000", "tdattributes": "0x0000001000000000", "xfam": "0x0702000000000000", "mrtd": "0x7fe60787222bd394cb516abca2435f22f035ab2cc9c0a4b4b3b148e46297f3d931a237b72f359052c6e657d8c1409173", "mr_config_id": "0x019c5ac0e34d578d78a689b38cf8584a82cb891ae461f75027641edb69831c13d8000000000000000000000000000000", "mrowner": "0x000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "mrownerconfig": "0x000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "rtmr0": "0x68102e7b524af310f7b7d426ce75481e36c40f5d513a9009c046e9d37e31551f0134d954b496a3357fd61d03f07ffe96", "rtmr1": "0x4ae609807c765916a31d724786ed74bcb97e168a9d937b04936aeef2015c907eba5ac352c6bcd749c246fd62ffb659ec", "rtmr2": "0x764489f277a8540189761e72b4238ba36d4d647e11bd958d8ab5522af2a4867b0ff63e06b0c4967f1857236244040a5d", "rtmr3": "0x4ce6b11e02f391428ddbe6e9ecfa04fa053e9446141aef5c4035949ce076ddc08f4ce99c8b4d108d8d775387d6b288d9", "reportdata": "0x3734de09f2c24602fe4fbe3649b413170ad9139a05673d3346b3764f23adcad10000000000000000000000000000000000000000000000000000000000000000", "mrconfig": "0x019c5ac0e34d578d78a689b38cf8584a82cb891ae461f75027641edb69831c13d8000000000000000000000000000000" }, "verified": true } }, "signedResult": { "context": { "encryptionPublicKey": "MCowBQYDK2VuAyEAM50ROY6PbFSlW5iurmhSD+aTXTk9G+mDeOEU0zJw/go=", "expiresAt": 1793690284386, "nonce": "49cc757ee17a040cd4cfa26ec88fc3116e019eb96355f948525fdf606a984f6c", "signingPublicKey": "MCowBQYDK2VwAyEAOVVnzyvS8aPbB1k6AhR0rYHH/2jqnlWqIfF1o8ksA/U=", "taskDigest": "1a97e06ba43d029b744e54e47abd31413beb635ffc92879c19f1adb2139f4fd5", "version": "flashfirm-phala-context/v1" }, "result": { "claims": [ { "id": "policy", "sourceId": "mainnet-policy", "sourceSha256": "50eace79dc9e78fb0b261c88b69f103a276f46215f247c827b571789f53fb04d", "status": "EXACT_QUOTATION" }, { "id": "invented", "sourceId": "mainnet-policy", "sourceSha256": "50eace79dc9e78fb0b261c88b69f103a276f46215f247c827b571789f53fb04d", "status": "UNSUPPORTED_QUOTATION" } ], "scope": "Exact quotations against client-pinned source bytes; no semantic, source-authority, independent-human or AI-inference attestation", "status": "CHALLENGED", "taskDigest": "1a97e06ba43d029b744e54e47abd31413beb635ffc92879c19f1adb2139f4fd5", "version": "flashfirm-quotation-result/v1" }, "resultDigest": "8fe5a28cd88f906d40bdb0ea16519a333acbde3a21eaeaba1a1cfd9266d0816e", "signature": "i7Kn/eMvx27+IHMgpBw2ES+jNsmJ9/X+DbMcpWJCW5IM8b5r3J9ivEY+VszetlqInS9RJcIDIvFVCNGqyNOcBw==" }, "scope": "Historical public quotation task. No remote model inference, private data, production OS/KMS trust or fresh online session claimed." }