Policies¶
The built-in governance policies. A policy states what must be true; rules in each stage check it. A policy is enforced only when every applicable stage passes, partial when a stage has no covering rule or a rule did not reach a verdict, and failing when any rule fails. Release-gate policies must be enforced before a key release is allowed.
Source
Generated from untrust 1.3.0 (commit 7ef462d9a0c3).
| Policy | Name | Stages | Release gate |
|---|---|---|---|
| P-01 | Bootstrap state is writable only by the attested enclave | Infra | |
| P-02 | Downloaded state is never executed as code | Infra | |
| P-03 | Key release requires an attested measurement | Attest, Runtime | yes |
| P-04 | Attestation evidence is fresh and fully verified | Attest, Runtime | |
| P-05 | No debug TEEs in production | Attest, Infra | yes |
| P-06 | Host-supplied inputs are authenticated | Infra, Runtime | |
| P-07 | The enclave cannot reach host credentials | Infra | |
| P-08 | Hosts run firmware at or above the fleet minimum | Attest | |
| P-09 | Only signed images pinned to a measurement are launched | Attest, Supply | yes |
| P-10 | Guardrails cannot be loosened silently | Runtime |
P-01¶
Bootstrap state is writable only by the attested enclave
Only the attested enclave may write the workload's bootstrap/state store.
Category: Bootstrap state
P-02¶
Downloaded state is never executed as code
Fetched bootstrap input is treated as data, not executed or path-traversed into code.
Category: Bootstrap state
P-03¶
Key release requires an attested measurement
Secret release is gated on an attested measurement, not ambient credentials.
Category: Key release
P-04¶
Attestation evidence is fresh and fully verified
The workload presents fresh attestation whose signature, cert chain and measurements all verify.
Category: Attestation
P-05¶
No debug TEEs in production
Debug mode and attestation-defeating configuration are absent.
Category: Attestation
P-06¶
Host-supplied inputs are authenticated
Untrusted host inputs crossing the boundary are authenticated/validated.
Category: Host inputs
P-07¶
The enclave cannot reach host credentials
The enclave cannot reach host credential endpoints (e.g. IMDS) to borrow the host's identity.
Category: Host inputs
P-08¶
Hosts run firmware at or above the fleet minimum
Attested firmware/TCB is at or above the fleet's pinned minimum.
Category: Hardware & TCB
P-09¶
Only signed images pinned to a measurement are launched
Launched artifacts carry a verified signature and are pinned to an expected measurement.
Category: Supply chain
P-10¶
Guardrails cannot be loosened silently
Always-on detections catch an attestation/key-release/guardrail obligation being weakened or removed.
Category: Detection