DET-G1: GPU left production CC mode¶
The GPU was in CC-On in the previous capture and is now in CC-DevTools or CC-Off: GPU memory and execution are exposed while the workload keeps running.
| Property | Value |
|---|---|
| Severity | critical |
| Platform | NVIDIA GPU CC |
| Group | tee |
| Log source | GPU evidence capture |
| Related check | GPUCC-MODE-01: GPU is in CC-On mode, not CC-DevTools or CC-Off |
Fires when¶
GPU cc_mode != on (left production confidential-compute mode)
How it runs¶
untrust detect --platform gpu-cc compares successive GPU evidence captures, each passed with --capture.
A match is a detection event with this rule's ID. Upload it to the console to alert on it; see Runtime detections.