(How it works)
The room and its quote
Files are opened and queried only inside an Intel TDX machine.
A room is a confidential VM on Intel TDX. The CPU measures the image it boots, and signs those measurements in a quote together with 64 bytes of report data chosen by the room.
The room puts sha256(its encryption key) in the first 32 bytes of its report data. So a valid quote says: this exact code, on genuine Intel hardware, holds the private half of this key.
What the verifier checks, in your browser:
| Check | What it proves |
|---|---|
| Quote format | A version 4 quote from a TDX machine |
| Key binding | The report data carries the room's key hash |
| Quote signature | The quote is signed by the attestation key it carries |
| QE report and PCK chain | The attestation key comes from Intel (full verifier) |
Room 0 today runs with a test key: there is no quote to check yet, and uploads stay on owners' devices. The site says so everywhere and flips to "attested" only once a quote is published.