Unprivileged Cloud GPU Attestation
Arxiv
pdf
2026-06-01T00:00:00
arXiv Paper — PDF not available.
Only the Executive Summary is available here. To read or download the full paper, visit the
arXiv abstract page.
Abstract
Cloud GPU tenants are asked to trust provider claims that are hard to inspect from inside a rented job. The accelerator should be the same physical machine over time, it should match the billed hardware class, and it should run at the advertised site. Vendor attestation can answer related questions on confidential-computing parts, but many rented accelerators expose no such path to an unprivileged tenant. We present a software-only attestation primitive for that setting.
Loading executive summary...