dstack/Trustee SEV-SNP attestation integration testing on Akash

[31trainman]

Hi Akash team/community!

I’ve been working on an open-source evidence layer for running dstack/confidential workloads through Akash.

We now have a Rust/Trustee SEV-SNP verifier building successfully in Linux CI, with workload identity bound through SNP REPORT_DATA.

Our current blocker is real-hardware validation.

We need access to one current AMD SEV-SNP-capable Akash guest/provider to generate a non-production attestation report using a fixed public 32-byte REPORT_DATA commitment.

We already have reproducible capture tooling prepared. The resulting hardware-signed report and matching public AMD VCEK/certificate material would become an offline Trustee CI fixture.

The validation requires:

exact commitment → Trustee verification passes

one-bit-modified commitment → Trustee verification fails

No private keys, customer data, production workload data, or production credentials are required.

The goal is to validate this chain on genuine Akash-compatible hardware:

Akash workload → AMD SEV-SNP → dstack/Trustee verification → cryptographically bound workload identity

We’re specifically looking for an Akash team member/provider with access to current SEV-SNP hardware who would be willing to help us perform one non-production fixture capture.

I can provide the GitHub branch, capture procedure, and existing CI evidence if anyone is interested in helping test this.