[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:55:02+00:00",
  "ms": 114,
  "reply": {
   "slug": "tee-verifier",
   "title": "Pinned hardware-attestation trust anchors (AWS Nitro, AMD SEV-SNP)",
   "status": "ok",
   "input": null,
   "total_ms": 40,
   "steps": [
    {
     "call": "GET /v1/trust-anchors",
     "request": null,
     "status": 200,
     "ms": 14,
     "reply": {
      "anchors": {
       "aws_nitro_root_g1": {
        "subject": "CN=aws.nitro-enclaves,OU=AWS,O=Amazon,C=US",
        "sha256": "641a0321a3e244efe456463195d606317ed7cdcc3c1756e09893f3c68f79bb5b",
        "source": "https://aws-nitro-enclaves.amazonaws.com/AWS_NitroEnclaves_Root-G1.zip"
       },
       "amd_milan": {
        "ark_sha256": "69d063b45344d26a2e94e1f4210de49ef555308287d4c174445c95639a540bcd",
        "ask_sha256": "67d303bd3905fd38db8b20e0793699870e7fa612eaad5dec358293fd8c0bac1b",
        "source": "https://kdsintf.amd.com/vcek/v1/Milan/cert_chain"
       },
       "amd_genoa": {
        "ark_sha256": "4c6598d19c18719c5dfd4a7d335f674e5bfe1d8f800cea2cf270c10d103db2f1",
        "ask_sha256": "5464738c1546aed5f2cecf1dc98c5c960a92e8913238a61711bc90ec6e828521",
        "source": "https://kdsintf.amd.com/vcek/v1/Genoa/cert_chain"
       },
       "amd_turin": {
        "ark_sha256": "1f084161a44bb6d93778a904877d4819cafa5d05ef4193b2ded9dd9c73dd3f6a",
        "ask_sha256": "5b77ef5fe7a7a004fd9032668fba9d0fda22f88c4442069a479636a6ae3b3185",
        "source": "https://kdsintf.amd.com/vcek/v1/Turin/cert_chain"
       }
      },
      "note": "CAIN's own servers are not hardware-attested; these roots verify YOUR evidence."
     }
    },
    {
     "call": "GET /signing-key",
     "request": null,
     "status": 200,
     "ms": 10,
     "reply": {
      "algorithm": "Ed25519",
      "public_key_hex": "912b99557cf8db9eb975bf40a70bd365edcc649b5081b7ea3394c2ccf67bf447",
      "service": "tee-verifier"
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:55:02+00:00",
  "ms": 0,
  "reply": {
   "slug": "tee-verifier",
   "title": "Pinned hardware-attestation trust anchors (AWS Nitro, AMD SEV-SNP)",
   "status": "ok",
   "input": null,
   "total_ms": 40,
   "steps": [
    {
     "call": "GET /v1/trust-anchors",
     "request": null,
     "status": 200,
     "ms": 14,
     "reply": {
      "anchors": {
       "aws_nitro_root_g1": {
        "subject": "CN=aws.nitro-enclaves,OU=AWS,O=Amazon,C=US",
        "sha256": "641a0321a3e244efe456463195d606317ed7cdcc3c1756e09893f3c68f79bb5b",
        "source": "https://aws-nitro-enclaves.amazonaws.com/AWS_NitroEnclaves_Root-G1.zip"
       },
       "amd_milan": {
        "ark_sha256": "69d063b45344d26a2e94e1f4210de49ef555308287d4c174445c95639a540bcd",
        "ask_sha256": "67d303bd3905fd38db8b20e0793699870e7fa612eaad5dec358293fd8c0bac1b",
        "source": "https://kdsintf.amd.com/vcek/v1/Milan/cert_chain"
       },
       "amd_genoa": {
        "ark_sha256": "4c6598d19c18719c5dfd4a7d335f674e5bfe1d8f800cea2cf270c10d103db2f1",
        "ask_sha256": "5464738c1546aed5f2cecf1dc98c5c960a92e8913238a61711bc90ec6e828521",
        "source": "https://kdsintf.amd.com/vcek/v1/Genoa/cert_chain"
       },
       "amd_turin": {
        "ark_sha256": "1f084161a44bb6d93778a904877d4819cafa5d05ef4193b2ded9dd9c73dd3f6a",
        "ask_sha256": "5b77ef5fe7a7a004fd9032668fba9d0fda22f88c4442069a479636a6ae3b3185",
        "source": "https://kdsintf.amd.com/vcek/v1/Turin/cert_chain"
       }
      },
      "note": "CAIN's own servers are not hardware-attested; these roots verify YOUR evidence."
     }
    },
    {
     "call": "GET /signing-key",
     "request": null,
     "status": 200,
     "ms": 10,
     "reply": {
      "algorithm": "Ed25519",
      "public_key_hex": "912b99557cf8db9eb975bf40a70bd365edcc649b5081b7ea3394c2ccf67bf447",
      "service": "tee-verifier"
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:55:03+00:00",
  "ms": 0,
  "reply": {
   "slug": "tee-verifier",
   "title": "Pinned hardware-attestation trust anchors (AWS Nitro, AMD SEV-SNP)",
   "status": "ok",
   "input": null,
   "total_ms": 40,
   "steps": [
    {
     "call": "GET /v1/trust-anchors",
     "request": null,
     "status": 200,
     "ms": 14,
     "reply": {
      "anchors": {
       "aws_nitro_root_g1": {
        "subject": "CN=aws.nitro-enclaves,OU=AWS,O=Amazon,C=US",
        "sha256": "641a0321a3e244efe456463195d606317ed7cdcc3c1756e09893f3c68f79bb5b",
        "source": "https://aws-nitro-enclaves.amazonaws.com/AWS_NitroEnclaves_Root-G1.zip"
       },
       "amd_milan": {
        "ark_sha256": "69d063b45344d26a2e94e1f4210de49ef555308287d4c174445c95639a540bcd",
        "ask_sha256": "67d303bd3905fd38db8b20e0793699870e7fa612eaad5dec358293fd8c0bac1b",
        "source": "https://kdsintf.amd.com/vcek/v1/Milan/cert_chain"
       },
       "amd_genoa": {
        "ark_sha256": "4c6598d19c18719c5dfd4a7d335f674e5bfe1d8f800cea2cf270c10d103db2f1",
        "ask_sha256": "5464738c1546aed5f2cecf1dc98c5c960a92e8913238a61711bc90ec6e828521",
        "source": "https://kdsintf.amd.com/vcek/v1/Genoa/cert_chain"
       },
       "amd_turin": {
        "ark_sha256": "1f084161a44bb6d93778a904877d4819cafa5d05ef4193b2ded9dd9c73dd3f6a",
        "ask_sha256": "5b77ef5fe7a7a004fd9032668fba9d0fda22f88c4442069a479636a6ae3b3185",
        "source": "https://kdsintf.amd.com/vcek/v1/Turin/cert_chain"
       }
      },
      "note": "CAIN's own servers are not hardware-attested; these roots verify YOUR evidence."
     }
    },
    {
     "call": "GET /signing-key",
     "request": null,
     "status": 200,
     "ms": 10,
     "reply": {
      "algorithm": "Ed25519",
      "public_key_hex": "912b99557cf8db9eb975bf40a70bd365edcc649b5081b7ea3394c2ccf67bf447",
      "service": "tee-verifier"
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]