Open-source voltage-verify attests Intel TDX and Nvidia GPUs from inside a rented VM

A confidential GPU cloud operator released voltage-verify, an open-source tool that binds an Intel TDX quote and Nvidia Remote Attestation tokens to a shared challenge without routing through the provider's API. It attests hardware and the enclave, not the workload inside, and cannot verify the NVSwitch fabric.

• voltage-verify binds the TDX quote and Nvidia GPU tokens to one challenge
• Verification runs through the Linux kernel and Nvidia's service, not the provider API
• Attestation does not prove which application runs inside the VM
• NVSwitch cannot be verified from the guest due to unreachable Nvidia OCSP