Verifiable Proof of Environment Attestation Profile#

Michael Richardson (presenter), with R. Krishnan (JPMorgan Chase), N. Smith, D. Lopez (Telefonica), A. Prasad (Oracle), S. Addepalli (Aryaka), H. Birkholz (Fraunhofer SIT).

• Why: Sovereignty and regulated-deployment requirements (RBI India, Korea's spatial-data act, GDPR) are demanding provable geographic residency — and nothing today cryptographically links a workload's identity, its execution integrity, and its location. This draft fuses them.
• What: V-PEA (formerly the verifiable geofencing draft) is a profile of the RATS architecture (RFC 9334) that binds two hardware-rooted dimensions into one TPM-sealed Evidence object: WHAT (TPM provenance, platform/boot integrity, workload-agent binary digest) and WHERE (physical residency per GNSS/MNO/timing location sources, with Galileo OSNMA and multi-constellation cross-checks against spoofing added since IETF 125). Neither dimension can be forged or transplanted without invalidating the other, and the credential is issued only if both pass. The WHERE dimension supports transparent zero-knowledge proofs so an Attester can prove in-boundary compliance without disclosing coordinates. A WIMSE Integration appendix ties the Attestation Result to credential issuance.
• How: Location sources produce signed claims; a TPM quote seal binds them to the platform's integrity Evidence; a Verifier appraises, and the result can be embedded in standard X.509 so downstream consumers never need to understand RATS. Running code exists (LF Edge AegisSovereignAI: TPM 2.0, SPIRE, Keylime, Plonky2 ZKP).
• Where applicable: Regulated, sovereign, high-assurance deployments rather than general web workloads — but as hardware-rooted identity meets workload identity (see AIMS/OAuth-SPIFFE above), this is where attestation-gated credential issuance is heading. The draft was presented as a call for RATS WG adoption.