The layers that make it work:

Intel TDX → hardware-isolated CVMs with remote attestation
dstack → orchestration + boot time gating (built by Phala Network)
Proof of Cloud → binds attested hardware to verified physical facilities

Three layers of provenance, one confidential workflow.