Saved seven-account snapshot · 2026-11-05 10:21 UTC

Account list

7 agents scanned · 0 proven · 4 match a vulnerable configuration · 3 not proven

These rows describe registered configurations. They do not show what an account is executing now. Secret values are not included. Not proven is not a clean result. An account that is risky for another reason, such as its access keys, is counted in not proven here. The ladder on the row is the full result.

This list is that saved snapshot of seven accounts. Smoke targets such as worker.outlayer.testnet, and the MPC allowlists, are not in it.

agents scanned

proven

match a vulnerable configuration

not proven

Accounts in the saved seven-account snapshot. Select a row to see its findings. Smoke and MPC targets are not in this list.
Account	Network	Interface	Overall	Counts
	testnet	shade-v1	RISKY	10 · 4 · 13
Configuration class: matches a vulnerable configuration RISKY · 9 Access keys can change or broadly call the account Registered configuration has no encrypted env A docker or guest-agent socket is mounted into an app public_logs is true in the registered configuration public_sysinfo is true in the registered configuration Registered configuration matches a vulnerable configuration Registered configuration names secret-looking env vars 20 Nov 2026 auto-upgrade or v0.3.x retirement may apply Advisory IDs are attached to the registered configuration NOT PROVEN · 4 allowed_envs was not in the registered configuration No on-contract list of approved TDX measurements Registered image digests were not on the MPC allowlist What the account is executing now was not observed PROVEN · 13 App codehash is in approve_codehash history Registered images are not debug or dev images Compose hash matches the registered event No plaintext secret values in the registered configuration Registered images are pinned by digest Quote measurements match the registered tcb_info RTMR replay matches the registered values Account interface is shade-v1 Registered quote is not a debug TD QE identity verified TCB status at registration is UpToDate Quote report data binds the registering account Quote signature verified Collateral freshness · 1 Registered configuration's TCB is now OutOfDate view_access_key_list · 1 keysapp_compose.kms_enabled · trueapp_compose.encrypted_env · absentdocker_compose_file volumes: /var/run/tappd.sockapp_compose.public_logs · trueapp_compose.public_sysinfo · truePhala post-mortemNEAR_SEED_PHRASE · name onlyANTHROPIC_API_KEY · name onlyAWS_ACCESS_KEY_ID · name onlyAWS_SECRET_ACCESS_KEY · name onlyAWS_SESSION_TOKEN · name onlyPhala post-mortemINTEL-SA-01192INTEL-SA-01245INTEL-SA-01312INTEL-SA-01313INTEL-SA-01367Registration transaction · HczqYXdRBZfyTtnQiPqGRXe3zEhvwHu3hyCUkqMq8VjNPhala PCCS · allowlisted; caller URLs are not accepted
	testnet	shade-v1	RISKY	8 · 5 · 14
Configuration class: matches a vulnerable configuration RISKY · 8 Access keys can change or broadly call the account Registered configuration has no encrypted env A docker or guest-agent socket is mounted into an app public_logs is true in the registered configuration public_sysinfo is true in the registered configuration Registered configuration matches a vulnerable configuration Registered configuration names secret-looking env vars 20 Nov 2026 auto-upgrade or v0.3.x retirement may apply NOT PROVEN · 5 Agent codehash was not loaded allowed_envs was not in the registered configuration No on-contract list of approved TDX measurements Registered image digests were not on the MPC allowlist What the account is executing now was not observed PROVEN · 13 Registered images are not debug or dev images Compose hash matches the registered event No plaintext secret values in the registered configuration Registered images are pinned by digest Quote measurements match the registered tcb_info RTMR replay matches the registered values Account interface is shade-v1 No advisory IDs were returned Registered quote is not a debug TD QE identity verified TCB status at registration is UpToDate Quote report data binds the registering account Quote signature verified Collateral freshness · 1 Registered configuration's TCB is now UpToDate view_access_key_list · 1 keysapp_compose.kms_enabled · trueapp_compose.encrypted_env · absentdocker_compose_file volumes: /var/run/tappd.sockapp_compose.public_logs · trueapp_compose.public_sysinfo · truePhala post-mortemNEAR_SEED_PHRASE · name onlyNEAR_AI_API_KEY · name onlyAWS_ACCESS_KEY_ID · name onlyAWS_SECRET_ACCESS_KEY · name onlyAWS_SESSION_TOKEN · name onlytoken · name onlyDSTACK_ROOT_PASSWORD · name onlyPhala post-mortem
	testnet	shade-v1	RISKY	9 · 4 · 14
Configuration class: matches a vulnerable configuration RISKY · 9 Access keys can change or broadly call the account allowed_envs is overly broad in the registered configuration Registered configuration has no encrypted env A docker or guest-agent socket is mounted into an app public_logs is true in the registered configuration public_sysinfo is true in the registered configuration Registered configuration matches a vulnerable configuration Registered configuration names secret-looking env vars 20 Nov 2026 auto-upgrade or v0.3.x retirement may apply NOT PROVEN · 4 Agent codehash was not loaded No on-contract list of approved TDX measurements Registered image digests were not on the MPC allowlist What the account is executing now was not observed PROVEN · 13 Registered images are not debug or dev images Compose hash matches the registered event No plaintext secret values in the registered configuration Registered images are pinned by digest Quote measurements match the registered tcb_info RTMR replay matches the registered values Account interface is shade-v1 No advisory IDs were returned Registered quote is not a debug TD QE identity verified TCB status at registration is UpToDate Quote report data binds the registering account Quote signature verified Collateral freshness · 1 Registered configuration's TCB is now UpToDate view_access_key_list · 1 keysapp_compose.allowed_envsapp_compose.kms_enabled · trueapp_compose.encrypted_env · absentdocker_compose_file volumes: /var/run/tappd.sockapp_compose.public_logs · trueapp_compose.public_sysinfo · truePhala post-mortemNEAR_SEED_PHRASE · name onlyJWT_SECRET · name onlyAUTH0_CLIENT_SECRET · name onlyTEE_KEY_SECRET · name onlyAWS_ACCESS_KEY_ID · name onlyAWS_SECRET_ACCESS_KEY · name onlyAWS_SESSION_TOKEN · name onlyDSTACK_ROOT_PASSWORD · name onlyPhala post-mortem
	testnet	shade-v1-worker	RISKY	10 · 11 · 6
Configuration class: matches a vulnerable configuration RISKY · 9 Access keys can change or broadly call the account Registered configuration has no encrypted env A docker or guest-agent socket is mounted into an app public_logs is true in the registered configuration public_sysinfo is true in the registered configuration Registered configuration matches a vulnerable configuration Registered configuration names secret-looking env vars 20 Nov 2026 auto-upgrade or v0.3.x retirement may apply Advisory IDs are attached to the registered configuration NOT PROVEN · 11 Agent codehash was not loaded allowed_envs was not in the registered configuration No on-contract list of approved TDX measurements Quote measurements were not accepted Registered image digests were not on the MPC allowlist What the account is executing now was not observed Debug bit was not accepted QE identity was not accepted TCB status at registration was not accepted Quote report data was not accepted Quote signature did not verify PROVEN · 6 Registered images are not debug or dev images Compose hash matches the registered event No plaintext secret values in the registered configuration Registered images are pinned by digest RTMR replay matches the registered values Account interface is shade-v1-worker Collateral freshness · 1 Registered configuration's TCB is now OutOfDate view_access_key_list · 1 keysapp_compose.kms_enabled · trueapp_compose.encrypted_env · absentdocker_compose_file volumes: /var/run/tappd.sockapp_compose.public_logs · trueapp_compose.public_sysinfo · truePhala post-mortemNEAR_SEED_PHRASE · name onlyOPENAI_API_KEY · name onlyCOMPOSIO_API_KEY · name onlyPhala post-mortemINTEL-SA-01268INTEL-SA-01273INTEL-SA-01278INTEL-SA-01192INTEL-SA-01245INTEL-SA-01312INTEL-SA-01313INTEL-SA-01367Phala PCCS · allowlisted; caller URLs are not accepted
	testnet	shade-v1-worker	RISKY	1 · 7 · 1
Configuration class: not proven RISKY · 1 Access keys can change or broadly call the account NOT PROVEN · 7 Agent codehash was not loaded dstack release was not proven 20 Nov 2026 schedule could not be applied No on-contract list of approved TDX measurements Registered image digests were not on the MPC allowlist What the account is executing now was not observed No registration quote was loaded PROVEN · 1 Account interface is shade-v1-worker view_access_key_list · 1 keysPhala post-mortem
	mainnet	shade-v1	RISKY	1 · 6 · 2
Configuration class: not proven RISKY · 1 Access keys can change or broadly call the account NOT PROVEN · 6 dstack release was not proven 20 Nov 2026 schedule could not be applied No on-contract list of approved TDX measurements Registered image digests were not on the MPC allowlist What the account is executing now was not observed No registration quote was loaded PROVEN · 2 App codehash is in approve_codehash history Account interface is shade-v1 view_access_key_list · 1 keysPhala post-mortem
	mainnet	shade-v2	RISKY	1 · 6 · 1
Configuration class: not proven RISKY · 1 Access keys can change or broadly call the account NOT PROVEN · 6 dstack release was not proven 20 Nov 2026 schedule could not be applied Approved measurements were not loaded Registered image digests were not on the MPC allowlist What the account is executing now was not observed No registration quote was loaded PROVEN · 1 Account interface is shade-v2 view_access_key_list · 1 keysPhala post-mortem

Account list

RISKY · 9

NOT PROVEN · 4

PROVEN · 13

Collateral freshness · 1

RISKY · 8

NOT PROVEN · 5

PROVEN · 13

Collateral freshness · 1

RISKY · 9

NOT PROVEN · 4

PROVEN · 13

Collateral freshness · 1

RISKY · 9

NOT PROVEN · 11

PROVEN · 6

Collateral freshness · 1

RISKY · 1

NOT PROVEN · 7

PROVEN · 1

RISKY · 1

NOT PROVEN · 6

PROVEN · 2

RISKY · 1

NOT PROVEN · 6

PROVEN · 1