Attestation

Attestation proves the runtime matches the expected build measurements for a release.

Why it matters

• Prevents routing traffic to an unexpected image
• Supports digest-pinned deployment guarantees
• Provides a verifiable release integrity check

User-facing behavior

When attestation is required:

• Passing attestation allows release progression to healthy
• Failing attestation marks the release as failed
• Failed releases are not routed

Where to configure

In enclavely.yaml:

service_contract:
  enclave:
    attestation_required: true