@prismnetwork/agent-sdk 0.7.0 → 0.7.1

package/README.md

@@ -150,4 +150,4 @@ The wallet needs two balances on Robinhood Chain (id 4663): USDG (`0x5fc5360D040
 Node >= 20, `viem` ^2 (peer), and `ssh` + `ssh-keygen` on PATH for `run()` and
 for workspace save and restore.
 
-See [example.mjs](https://github.com/prismnetwork-tech/prism/blob/main/sdk/example.mjs) for a full run.
+See [example.mjs](https://github.com/winter0x/prism/blob/main/sdk/example.mjs) for a full run.

package/attest.mjs

@@ -719,11 +719,13 @@ async function gpuChecks(t, { root, fetchImpl, model, digest, quote, collateralU
   // verified. Its own quote is verified here, the report-data slot is read out
   // of that verified structure, and the TD it came from is held against the TD
   // whose quote carried our nonce. The plaintext key-set field the same
-  // response supplies is a label, not a binding.
-  if (report.workload_keyset_digest !== digest) {
-    const named = report.workload_keyset_digest;
-    return t.fail("gpu-binding", `the GPU evidence names key set ${named}, not the one that served us`);
-  }
+  // response supplies is a label, not a binding, so a label that disagrees is
+  // reported and then ignored: the evidence endpoint is served by one replica
+  // and completions by another, so the label routinely names a sibling even
+  // when the quotes below prove the evidence came from the TD that served us.
+  // Failing on it here would reject evidence that binds cryptographically.
+  const labelled = report.workload_keyset_digest;
+  const mislabelled = labelled !== digest;
   if (typeof report.intel_quote !== "string") {
     return t.fail("gpu-binding", "the GPU evidence carries no CPU quote to bind against");
   }
@@ -744,10 +746,11 @@ async function gpuChecks(t, { root, fetchImpl, model, digest, quote, collateralU
     signingAddress: report.signing_address,
     nonce,
   });
+  const aside = mislabelled ? `; the evidence labels itself key set ${labelled}, which the quotes above override` : "";
   t.add(
     "gpu-binding",
     gate.ok ? "pass" : "fail",
-    gate.ok ? `${gate.detail}, quoted by the TD that carried our nonce` : gate.detail,
+    gate.ok ? `${gate.detail}, quoted by the TD that carried our nonce${aside}` : gate.detail,
   );
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prismnetwork/agent-sdk",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Headless GPU leasing and renter-encrypted storage on Prism Network for wallet-holding agents.",
   "type": "module",
   "main": "prism.mjs",
@@ -69,11 +69,11 @@
   "homepage": "https://prismnetwork.tech",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/prismnetwork-tech/prism.git",
+    "url": "git+https://github.com/winter0x/prism.git",
     "directory": "sdk"
   },
   "bugs": {
-    "url": "https://github.com/prismnetwork-tech/prism/issues"
+    "url": "https://github.com/winter0x/prism/issues"
   },
   "license": "Apache-2.0",
   "publishConfig": {