Attestation · HATP
From silicon to evidence pack.
The Hardware Attestation Trust Protocol is a five-layer chain. Each layer signs the layer below. A single receipt at L3 is enough for your DPO to verify offline; a bundle at L4 is enough for an auditor to close a deficiency without our involvement.
L0
Hardware root
TPM 2.0 PCR measurements at BIOS, bootloader, kernel. The chain begins at silicon.
sha256:7d3a…f1b2
L1
DE:SH host attestation
Hardened KVM hypervisor measured against the manifest. Signed under the host key.
sha256:e0a4…9c87
L2
DENSE binary manifest
The Borz binary's hash recorded at admission. Compile-time provenance anchored to the source spec.
sha256:5b2c…d044
L3
Dispatch receipt
Per-invocation HATP receipt. Carries input/output hashes, model identity, customer ID, timestamp.
ed25519:9bvk…3rqx
L4
Evidence pack
JSON-LD bundle for a time-range. Audit-ready for EU AI Act Article 12, NIS2 Article 21, DORA Article 18.
manifest:pack_8f3…
Mapping
Which layer satisfies which regulation
| Regulation | Article | Satisfied by |
|---|---|---|
| EU AI Act | Article 12 — Logging | L3 receipts + L4 evidence packs |
| EU AI Act | Article 22 — Automated decisions | L3 receipts (model + input + output) |
| EU AI Act | Article 50 — Disclosure | L4 evidence packs with C2PA output |
| NIS2 | Article 21.2(j)/(k) | L1 + L3 chains for autonomous decisions |
| DORA | Article 18 — Reporting | L4 evidence packs scoped per ICT incident |
| GDPR | Article 22 — Right to explanation | L3 receipt replay per affected data subject |
Verify offline
Customer holds the public keys. hatp verify --pack pack.jsonld exits 0 if the chain holds.
Commodity hardware
Any KVM host with TPM 2.0. No Intel TDX requirement, no NVIDIA Confidential Computing dependency.
Open by design
Receipt format published. Verification tool is open-source. You can roll your own auditor.