# Frozen attested relay production source

Source commit: 474083ea74d0df069275da613e62a985d6960056
Source archive: attested-relay-474083ea74d0df069275da613e62a985d6960056.tar.gz
Archive SHA256: 54c9230c8a6174cdc7099d10583500ede95913e30dd847ac89f66a49454b8c44

Rebuildable one-commit checkout: attested-relay-474083ea74d0df069275da613e62a985d6960056-shallow-checkout.tar.gz

This is the exact source tree of the production image observed warming on
2026-09-09, with 43,768,124 iterations per segment and seven segments. It is not
the newer entropy/CBOR patch set under development. The archive contains no Git
history, local credentials/state, or compiled outputs. Source and vendor license
files are included. Separate measurement files come from committed evidence
04d67264ce55d140d42518390fe5b5a855eddf5a; they were recorded after the core source was frozen.

Production PCR0:
c743aa2259fa59575de56c0c1e11f8eb5c40e95af991d433af87dc4b04797fc77b73e1ac8777d2b1ba98c900ae1820aa

Two independent ARM builds produced identical PCR0/PCR1/PCR2. Complete EIF hashes
differ because unmeasured metadata includes build timestamps/image names; this
release does not claim byte-identical EIF reproduction. See reproducibility.json,
both EIF descriptions, build-info.json and the recorded reproduce.sh commands.
The plain source archive has no .git directory. The separate shallow-checkout
archive includes exactly this commit and its objects, plus minimal Git metadata,
so git HEAD/clean-tree checks and the unchanged build script work. It contains no
ancestor commits, remotes, FETCH_HEAD, reflogs, hooks or account credentials.
An extracted copy was checked for the exact HEAD, a clean tree and one reachable
commit. Adapt the recorded reproduce.sh's original builder paths to your empty
output directory; retain its fixed source/build arguments and pinned toolchain.

These are public source/measurement downloads, not a live relay HTTP endpoint.
Source publication does not establish current readiness, a full-duration timing
result, release timing, or independent retention guarantees. Cloudflare HTTPS
front-door authentication/deployment remains pending. No enclave was restarted
as part of this publication.

All download URLs and byte hashes appear in manifest.json at:
https://attested-relay-releases-370686332139-us-west-2.s3.us-west-2.amazonaws.com/releases/474083ea74d0df069275da613e62a985d6960056/manifest.json