fix(verifier): the image manifest check accepts lines sha256sum silently skipped, and the --debug RTMR diff is dead code - #1251

Open

kvinwang wants to merge 7 commits into

nextfrom

fix/verifier-measurement-fidelity

Commits on Sep 20, 2026

fix(dstack-types): parse sha256sum.txt with one strict grammar
kvinwang
committed
8dc1464
fix(verifier): check the image manifest in-process instead of trusting sha256sum -c
kvinwang
committed
b4539bf
fix(verifier): give the --debug RTMR diff the events it is diffing
kvinwang
committed
96ca6ca
fix(verifier): stop reporting --verify-cert results valid when app info does not decode
kvinwang
committed
ee44ae0
docs(verifier): say what event_log_verified actually covers
kvinwang
committed
13836a2
fix(verifier): key the measurement cache on the measured VM shape only
kvinwang
committed
bb607dd
refactor(verifier): measure the OS image on a blocking thread
kvinwang
committed
fabe6d5