Issues

• Attestation crate: Make 'allow any' measurement policies be explicitly opt-in

  flashbots/attested-tls#97 · Filter by author ameba23 opened on Sep 17, 2026

• Separate appraisal from verification: verify_attestation always applies a policy, and appraisal can fetch

  flashbots/attested-tls#92 · Filter by author samlaf opened on Aug 31, 2026
  4

• Verifier fetches collateral and verifies quotes the policy will always reject

  flashbots/attested-tls#87 · Filter by author samlaf opened on Aug 26, 2026
  1

• Allow verification at an explicit timestamp, and report which collateral was used

  flashbots/attested-tls#84 · Filter by author samlaf opened on Aug 24, 2026
  7

• GCP Provenance check - make configurable confidential host registry URL

  flashbots/attested-tls#82 · Filter by author ameba23 opened on Aug 19, 2026
  1

• Attestation evidence is size restricted because rustls caps Certificate handshake message at 64kb

  flashbots/attested-tls#75 · Filter by author ameba23 opened on Jul 31, 2026

• azure: every evidence generation pays a fixed 3s sleep and an IMDS round-trip

  flashbots/attested-tls#73 · Filter by author samlaf opened on Jul 17, 2026
  1

• azure: TCTI is hardcoded to the raw /dev/tpm0 device

  flashbots/attested-tls#72 · Filter by author samlaf opened on Jul 17, 2026

• Investigate adding CoRIM support for future TDX attestation

  flashbots/attested-tls#64 · Filter by author ameba23 opened on Jun 25, 2026

• Requiring collateral to be in cache on verification causes problems

  flashbots/attested-tls#58 · Filter by author ameba23 opened on Jun 17, 2026

• PCCS crate - consider using moka cache library with Time To Live (TLL) configured

  flashbots/attested-tls#44 · Filter by author ameba23 opened on May 12, 2026

• Moving attestation generation and verification code to attest repo.

  flashbots/attested-tls#40 · Filter by author ameba23 opened on May 6, 2026
  5

• feat: decouple platform and measurements, allow flexible policies

  flashbots/attested-tls#28 · Filter by author 0x416e746f6e opened on Apr 16, 2026

• PCCS crate - consider adding a timeout to Pccs::ready method

  flashbots/attested-tls#24 · Filter by author ameba23 opened on Apr 15, 2026

• PCCS crate will panic if used without a tokio runtime

  flashbots/attested-tls#23 · Filter by author ameba23 opened on Apr 15, 2026

• AttestedCertificateResolver should backoff when re-trying to create a new attested certificate

  flashbots/attested-tls#21 · Filter by author ameba23 opened on Apr 15, 2026

• feat: use builder pattern in attestation crate to tune attestation logic

  flashbots/attested-tls#19 · Filter by author 0x416e746f6e opened on Apr 14, 2026
  1

• Add XFAM validation using bitmask when verifying DCAP quotes

  enhancement
  flashbots/attested-tls#43 · Filter by author ameba23 opened on Nov 20, 2025