33¢
CLAUDE CODE:
⏺ cl-sev-snp is built at ~/workspace/modus-lisp/cl-sev-snp and verifies a live Tinfoil attestation in pure Common Lisp. The test suite is green: sbcl --load t/tests.lisp gives 11/11 with exit 0.
• Core checks, each against Python `cryptography`/`hashlib`: hashes, DER/X.509 parsing, RSA-PSS chain (ARK→ASK→VCEK), P-384 report signature, and P-256 DSSE against the Fulcio leaf.
• SNP report: the genuine report passes. Tampering the measurement, report_data, chip_id, signature, or TCB fails, as does a debug policy bit or a wrong VCEK.
• Tinfoil bundle: report_data binds the enclave cert's SPKI, the DSSE signature verifies, and the statement's measurement and digest match. Each tamper fails on the check it targets.
• Live path: verify-tinfoil-live fetches atc.tinfoil.sh and AMD KDS and passes.
61 iter · 32.656¢, 3432412 prompt (585844 cached)/72082 completion tok, 61 calls
ynniv
npub12a…x6fdh
2026-10-12 01:25:07 UTC
Author Public Key
npub12akj8hpakgzk6gygf9rzlm343nulpue3pgkx8jmvyeayh86cfrus4x6fdhSeen on
wss://relay.mostr.pubPublished at
2026-10-12 01:25:07 UTCEvent JSON
{
"id": "4051aeca6316f53ba279a5c48de6cec2c95560543eb1d5f3c0fd98405c5d056c",
"pubkey": "576d23dc3db2056d208849462fee358cf9f0f3310a2c63cb6c267a4b9f5848f9",
"created_at": 1791768307,
"kind": 1,
"tags": [
[
"r",
"wss://nostr-pub.wellorder.net/"
],
[
"r",
"wss://nostr.bitcoiner.social/"
],
[
"r",
"wss://nostr.wine/"
],
[
"r",
"wss://nos.lol/"
],
[
"r",
"wss://relay.snort.social/"
],
[
"r",
"wss://eden.nostr.land/"
],
[
"r",
"wss://relay.damus.io/"
],
[
"r",
"wss://relay.primal.net/"
],
[
"r",
"wss://nostr.land/"
],
[
"r",
"wss://premium.primal.net/"
],
[
"client",
"Primal Web"
]
],
"content": "33¢\n\nCLAUDE CODE:\n⏺ cl-sev-snp is built at ~/workspace/modus-lisp/cl-sev-snp and verifies a live Tinfoil attestation in pure Common Lisp. The test suite is green: sbcl --load t/tests.lisp gives 11/11 with exit 0.\n\n• Core checks, each against Python `cryptography`/`hashlib`: hashes, DER/X.509 parsing, RSA-PSS chain (ARK→ASK→VCEK), P-384 report signature, and P-256 DSSE against the Fulcio leaf.\n• SNP report: the genuine report passes. Tampering the measurement, report_data, chip_id, signature, or TCB fails, as does a debug policy bit or a wrong VCEK.\n• Tinfoil bundle: report_data binds the enclave cert's SPKI, the DSSE signature verifies, and the statement's measurement and digest match. Each tamper fails on the check it targets.\n• Live path: verify-tinfoil-live fetches atc.tinfoil.sh and AMD KDS and passes.\n\n 61 iter · 32.656¢, 3432412 prompt (585844 cached)/72082 completion tok, 61 calls\n",
"sig": "166015a24e4d60dc5f3f85d2b1056b8aca6efa1f00734a67498518a943af8a0a9c45e93501fa7809e8bc071615ed6fae38b9a92e85c04cb024ee786d60af14bf"
}