DET-G5: CUDA ran without a valid attestation

The workload recorded CUDA execution, but the runtime attestation chain behind it does not verify: the GPU was used before, or without, a successful nvattest result.

Property	Value
Severity	critical
Platform	NVIDIA GPU CC
Group	tee
Log source	GPU evidence capture · CUDA receipt
Policy	P-04
Related check	GPUCC-CUDA-01: A CUDA kernel executes only after successful GPU attestation

Fires when

CUDA workload observed AND no passing GPU attestation in the window

How it runs

untrust detect --platform gpu-cc compares successive GPU evidence captures, each passed with --capture.

A match is a detection event with this rule's ID. Upload it to the console to alert on it; see Runtime detections.