SparkProof v0.1.1 — Hopper, per-device NRAS, Intel TDX

Hopper joins Blackwell for dataset generation, per-device NRAS tokens are cryptographically verified, and Intel TDX closes the userland trust gap on the dataset track.

generator_version in new bundles remains 0.3.0 (package release 0.1.1).

Highlights

Hopper H100/H200 dataset generation ([#20])

• sparkproof/gpu/architecture.py accepts Blackwell or Hopper H100/H200 (SM90, memory-size split).
• Prompt text, decontamination fingerprints, and dataset_manifest.json are architecture-aware — Hopper rows genuinely target SM90, not Blackwell SM12x.

Per-device NRAS verification ([#18])

• Every GPU device JWT in REMOTE_GPU_CLAIMS is JWKS-verified; signed hwmodel claims exposed under claims["devices"].
• Pairs with SparkDistill's dataset gate running sparkproof-verify --online.

Intel TDX measured-VM attestation ([#22])

• TDX quote captured via configfs-tsm, report_data bound to dataset nonce.
• Production verify requires gpu_attestation.tdx on new bundles; --online DCAP-verifies via dcap-qvl.
• Legacy bundles without a tdx key are grandfathered.

OpenRouter + legacy fixes ([#19], [#21])

• Trajectories record OpenRouter's actual response model; dated build suffixes accepted in policy/ledger checks.
• Pre-Hopper bundles missing gpu_architecture fall back to "blackwell".

CI

check	result
pytest	pass (PR #24)

Miner setup (TDX guest, once per boot)

sudo chmod 0777 /sys/kernel/config/tsm/report
mkdir /sys/kernel/config/tsm/report/sparkproof
sudo chmod 0666 /sys/kernel/config/tsm/report/sparkproof/inblob
export SPARKPROOF_TSM_REPORT_PATH=/sys/kernel/config/tsm/report/sparkproof

Full details in CHANGELOG.md.