Oasis Community

For a reproducible AI attestation, does the proof bind the model version, policy configuration and input provenance as well as the enclave measurement? Verifying only where execution happened may not be enough to reproduce why a specific output was accepted.