Six progressive tests. Six real certificates. Each bar is on-chain, verifiable by anyone. Most AI energy claims stop at Test 1.
Progressive attestation
Same workload. Same model. Six trust levels — computed deterministically from evidence present in each certificate.
| Layer | Points | What it proves | Adversary required to fake |
|---|---|---|---|
| NVML | +0.20 | Physical GPU power at ≥10 Hz. Cannot be fabricated in software without a compromised NVML driver. | Kernel-level driver compromise |
| RAPL CPU+DRAM | +0.25 | Two physically independent hardware domains: CPU package (+0.15) and DRAM (+0.10). Each is a separate MSR interface — forging both requires ring-0 MSR write access across independent subsystems. | Ring-0 + MSR write access (both domains) |
| Signed Exporter | +0.15 | Ed25519 signature over raw bytes at capture time. Machine fingerprint is captured inside the signed payload — binding cert to hardware without a separate layer. | Ed25519 key theft or quantum break |
| Machine Fingerprint | +0.00 | Folded into Signed Exporter. DMI + CPU identity is signed inside the same payload. Not independently scored — present in evidence field for auditing only. | n/a — covered by Signed Exporter |
| TEE Quote | +0.20 | Hardware-rooted attestation (AMD SEV-SNP, AWS Nitro, Intel TDX). Operator cannot forge without breaking silicon. | AMD / Intel / AWS silicon break |
| ML-DSA-65 | +0.05 | Post-quantum second signature (FIPS 204). Survives a quantum break of Ed25519 / ECDSA. | Classical break + quantum break |
| Merkle Proof | +0.05 | Certificate's position in append-only log is fixed at issuance. Cannot be backdated. | Retroactive Merkle tree recomputation |
| Polygon Anchor | +0.10 | Merkle root recorded on Polygon mainnet. Immutable once confirmed. Independent of Serial Alice. | 51% attack on Polygon |
| MAXIMUM | 1.00 | All eight independent layers active simultaneously. | |
No account. No API key. No dependency on Serial Alice.