tee

Checkpoint: CP-009 Status: QUEUED — not yet run. No results exist for this experiment.

Question

What does hardware attestation actually attest, at what cost, and whom must we trust for it?

Why it matters

A TEE is not a weak proof — it is a different trust assumption (L4), and possibly the cheapest way to get Claim B. Its limits (vendor trust, side channels, no physical-attack resistance) must be stated as precisely as its benefits.

Gate

Blocked on procuring TEE-capable hardware. Apple Silicon Secure Enclave is available locally but attests very little that is relevant; NVIDIA CC requires H100-class rental.

---

This is a stub. It exists so the roadmap's structure is visible, not to imply work has been done. Nothing in ../../benchmarks/results/ refers to it yet.