A dstack guest OS (mkosi-os-v0.6.0-rc4) on a Google Compute Engine Intel TDX Confidential VM. App keys are provisioned by a self-hosted dstack KMS (key_provider: kms) gated by an external allowlist (auth-simple); served over public HTTPS through a self-hosted dstack gateway at gcp-test.dstack.soc1024.com. The TLS cert is issued and held inside the enclave (dstack-ingress) and bound to the TDX quote. nginx proxies three guest-agent endpoints so you can pull evidence with your own challenge.
curl "https://HOST/Info" curl "https://HOST/GetQuote?report_data=0x<up to 64 bytes hex>" curl "https://HOST/Attest?report_data=0x<hex>"
Verify with dstack-verifier @ f54eebc. Expected os_image_hash: d4ffc2047a21a525ca7a8d9db70fa5eb0302a356ff2899761b5395494f9063b4. Gateway RPC cert is KMS-rooted RA-TLS.