Issue an Ed25519-signed, chain-hashed certificate for an AI decision, then verify it with no trust in the operator. Sandbox: signing uses a software key and TEE/GPU quotes are simulated (labelled simulated:true); the certificate format is identical in production.
Recompute the hashes, check the Ed25519 signature and the append-only chain link — publicly, with no API key.