confidential_runtime_route (see privacy classes). They let a caller verify
that the runtime image processing their request matches the published reference and that no
substituted process touched the prompt.
Current attestation
GET /v1/attestation
Returns the signed attestation document, expected runtime measurement, build provenance, release-key
reference, and the latest Solana/Base anchor transactions.
Verify attestation
POST /v1/attestation/verify
Submit an attestation document and expected measurement policy to verify it against the MESH
confidential-runtime configuration. The same attestation hash is referenced by the signed receipt
(x-mesh-receipt-id) returned with every confidential-route response.