| name | verify-tee |
| description | Verify TEE attestation for Redpill/Phala Confidential AI. Supports Phala, NearAI, Tinfoil, Chutes providers. Two modes — light (no Docker) and deep (dstack-verifier + QEMU). Includes on-chain DCAP verification, ECDSA signatures, and proof storage. Use when verifying models, checking attestation, testing signatures, or storing on-chain proofs. |
| allowed-tools | Bash(node *), Bash(npx *), Bash(npm *), Bash(docker *), Bash(cd /tmp/redpill-verifier *) |
Verify TEE — RedPill Unified Verifier
Verify Confidential AI responses from any provider (Phala, NearAI, Tinfoil, Chutes).
Setup
test -d /tmp/redpill-verifier || gh repo clone redpill-ai/redpill-verifier /tmp/redpill-verifier
cd /tmp/redpill-verifier/js && npm install && npm run build
For deep mode (optional):
cd /tmp/redpill-verifier && docker compose up -d
Commands
1. Verify a chat response (main use case)
cd /tmp/redpill-verifier/js && node dist/cli.js verify <chatId> --api-key <key> --model <model>
2. Verify attestation (no API key needed)
cd /tmp/redpill-verifier/js && node dist/cli.js attestation --model <model>
Options:
--model MODEL — default: phala/gpt-oss-120b--deep — force deep mode (Docker required)--light — force light mode (no Docker)--network NETWORK — automata-mainnet, sepolia, holesky--skip-onchain — skip on-chain DCAP
3. Store proof on-chain
cd /tmp/redpill-verifier/js && node dist/cli.js store --private-key <key> --proof-store <addr> --network sepolia
4. Look up proof
cd /tmp/redpill-verifier/js && node dist/cli.js lookup --quote-hash <hash> --proof-store <addr> --network sepolia
Providers & Models
| Provider | Example models | Verification |
|---|
| Phala | phala/qwen-2.5-7b-instruct, phala/gpt-oss-20b | TDX + GPU + compose + deep (model+KMS+gateway) |
| NearAI | phala/gpt-oss-120b, phala/deepseek-chat-v3.1 | TDX + GPU + deep (model+gateway) |
| Chutes | phala/kimi-k2.5, phala/deepseek-v3.2 | TDX + anti-tamper binding + debug check |
| Tinfoil | meta-llama/llama-3.3-70b-instruct | TDX/SEV-SNP + Sigstore golden values + hw policy |
Deployed contracts
| Network | RedpillProofStore |
|---|
| Sepolia | 0x83541AD3f380De2b28E0108d4Da934236342B02b |
Interaction guidelines
- Ask which model if not specified — suggest
phala/gpt-oss-120b as default
- Auto-detect provider — the verifier handles routing automatically
- Default to light mode — only suggest deep mode if the user wants maximum trust guarantees
- Show full output — verification results are the whole point
- Explain failures — if a check fails, explain what it means for the trust model
