cohere-ai/integritee

cohere-ai/integritee

Description: Integrity ledger for Cohere's confidential computing models

Language: Python

License: NOASSERTION

Stars: 0

Forks: 0

Open issues: 0

Created: 2026-05-07T03:53:44Z

Pushed: 2026-08-12T05:23:59Z

Default branch: main

Fork: no

Archived: no

README:

Integritee

Public integrity ledger for Cohere's confidential computing models.

This repository contains:

• Policy manifest and initdata (attestation-policy/) -- content-addressed

workload inputs imported from Blobheart

• Policy automation actions (.github/actions/) -- derive, validate,

measure, upload, and verify policies

• CI workflow (.github/workflows/release-policy.yaml) -- automated pipeline that generates policies, computes measurements, uploads to Intel Trust Authority, and publishes Sigstore-signed releases

How It Works

podspec.yaml ─► genpolicy ─► Kata policy + initdata
│
▼
OVMF + UKI + baseline + initdata ─► cvm-measure ─► MRTD + RTMR[0-3]
│
▼
ITA attestation policy template + measurements
│
▼
Upload to ITA ─► policy_id
│
▼
in-toto attestation (measurements + policy + chain)
│
▼
Sigstore keyless sign ─► Rekor entry
│
▼
GitHub Release with all artifacts

For TNG Operators

TNG discovers the latest policy by fetching the latest GitHub release:

GET /repos/cohere-ai/integritee/releases/latest

Then downloads {model}/attestation.sigstore.json and verifies the Sigstore bundle locally before extracting the policy_id for ITA token requests.

For Auditors

Every release contains per-model artifacts:

• {model}/measurements.json -- expected TDX register values (MRTD, RTMR[0-3])
• {model}/kata-policy.rego -- full Kata agent policy text
• {model}/predicate.json -- complete in-toto predicate with all metadata
• {model}/attestation.sigstore.json -- Sigstore bundle (verifiable against public Rekor)

Each model's Sigstore attestation includes a previous_rekor_log_index field that chains entries together, forming a per-model linked list in the public Rekor transparency log.

Repository Structure

attestation-policy/
policy-manifest.yaml # Workloads included in the policy
initdata/ # Content-addressed workload initdata
.github/
actions/ # Policy automation actions
workflows/
release-policy.yaml # Main attestation workflow

Triggering a Release

gh workflow run release-policy.yaml \
-f version=v0.0.1 \
-f reason="Updated container image for command-r-plus"

License

Apache License 2.0