From 49791c9b5321eb62be5f4486cdc37c7a5463a84e Mon Sep 17 00:00:00 2001 From: Dusk1e Date: Sat, 15 Aug 2026 15:23:22 +0300 Subject: [PATCH] docs(proofs): drop dead NitroEnclaveVerifier source links base/contracts#400 deleted src/L1/proofs/tee/NitroEnclaveVerifier.sol along with INitroEnclaveVerifier.sol, so the three links to it on the TEE registrar page 404. Render the contract name as inline code instead, the way the page already refers to contracts it does not link. The neighbouring TEEProverRegistry and TEEVerifier links still resolve and are left alone. --- docs/base-chain/specs/protocol/proofs/registrar.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/base-chain/specs/protocol/proofs/registrar.mdx b/docs/base-chain/specs/protocol/proofs/registrar.mdx index a4fd1a959..92a1f2324 100644 --- a/docs/base-chain/specs/protocol/proofs/registrar.mdx +++ b/docs/base-chain/specs/protocol/proofs/registrar.mdx @@ -13,7 +13,7 @@ intermediate certificates that AWS has withdrawn. A registrar is operated by Base. The proof system trusts only signers that this registrar has registered, so registrar correctness is a prerequisite for accepting TEE proofs onchain. Its output is still self-validating: the attestation ZK proof, the enclave PCR0 measurement, and the signer -public key are all checked by `TEEProverRegistry` and [`NitroEnclaveVerifier`](https://github.com/base/contracts/blob/main/src/L1/proofs/tee/NitroEnclaveVerifier.sol) +public key are all checked by `TEEProverRegistry` and `NitroEnclaveVerifier` before the signer becomes valid. ## Responsibilities @@ -321,8 +321,8 @@ submission time and includes an image-hash match that the registrar cannot satis | [`TEEProverRegistry`](https://github.com/base/contracts/blob/main/src/L1/proofs/tee/TEEProverRegistry.sol) | `deregisterSigner(signer)` | Per-orphan deregistration transaction. | | [`TEEProverRegistry`](https://github.com/base/contracts/blob/main/src/L1/proofs/tee/TEEProverRegistry.sol) | `isRegisteredSigner(signer)` | Pre-check, post-error reconciliation, orphan race guard. | | [`TEEProverRegistry`](https://github.com/base/contracts/blob/main/src/L1/proofs/tee/TEEProverRegistry.sol) | `getRegisteredSigners()` | Once per cycle for orphan computation. | -| [`NitroEnclaveVerifier`](https://github.com/base/contracts/blob/main/src/L1/proofs/tee/NitroEnclaveVerifier.sol) | `revokeCert(certHash)` | When AWS CRL revokes an intermediate. | -| [`NitroEnclaveVerifier`](https://github.com/base/contracts/blob/main/src/L1/proofs/tee/NitroEnclaveVerifier.sol) | `revokedCerts(certHash)` | Layer-1 onchain durable revocation pre-check. | +| `NitroEnclaveVerifier` | `revokeCert(certHash)` | When AWS CRL revokes an intermediate. | +| `NitroEnclaveVerifier` | `revokedCerts(certHash)` | Layer-1 onchain durable revocation pre-check. | PCR0 enforcement happens onchain at proof submission, not at registration. The registrar registers any enclave whose Nitro attestation verifies, regardless of its PCR0. This allows the next image's