Remote attestation for disaggregated and heterogeneous compute clusters

Develop remote attestation protocols that work reliably for disaggregated machines and heterogeneous devices to verify the configuration and co‑location of AI chips participating in a workload, supporting compliance and enforcement.

Background

Enforcing compute restrictions and verifying workload properties requires attesting which chips are in a cluster.

Disaggregated and heterogeneous environments complicate attestation, demanding new protocols to establish trustworthy verification across diverse hardware.

References

An open question is how remote attestation could work for disaggregated machines or for heterogeneous devices.

— Open Problems in Technical AI Governance  (2407.14981 - Reuel et al., 2024) in Section 6.2.3 “Enforcement of Compute Usage Restrictions”

Separately retained inputs with registered derivations are necessary to connect equality to the protocol; claims of independent runtime participation would additionally require a proposed multi-root corroboration gate. That gate was not evaluated for the registered local cohort and remains NOT_EVALUATED.

— Axient: Manifest-Bound Evidence for On-Chain Financial Protocols: Seven-Layer Derivation, Correlation, Tamper Rejection, and Reproducible Claim Promotion  (2610.02838 - Nechepurenko, 2 Oct 2026) in Section 5, paragraph following Theorem [Copied-hash insufficiency]; also referenced in Sections 15 and 19