Skip to content

docs: clarify persistent storage freshness limitations#794

Merged
kvinwang merged 1 commit into
masterfrom
docs/persistent-storage-freshness
Jul 20, 2026
Merged

docs: clarify persistent storage freshness limitations#794
kvinwang merged 1 commit into
masterfrom
docs/persistent-storage-freshness

Conversation

@kvinwang

Copy link
Copy Markdown
Collaborator

Summary

  • clarify that disk encryption does not prove storage freshness
  • document operator rollback, replacement, deletion, and withholding risks
  • recommend externally anchored state for rollback resistance

Testing

  • Documentation-only change
  • git diff --check

Copilot AI review requested due to automatic review settings July 20, 2026 01:49

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the security model documentation to clarify a key limitation of TEEs and disk encryption: while dstack can protect confidentiality and measured execution, it cannot guarantee persistent storage freshness against an infrastructure operator who can roll back, replace, or withhold storage.

Changes:

  • Documented that disk encryption does not prove “latest state” / freshness of attached persistent disks.
  • Added explicit operator threat scenarios (withholding, deletion, replacement, rollback).
  • Recommended anchoring monotonic state externally for rollback resistance.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread docs/security/security-model.md Outdated
@kvinwang
kvinwang force-pushed the docs/persistent-storage-freshness branch from 933a1b3 to 7d6f165 Compare July 20, 2026 01:54
@kvinwang
kvinwang requested a review from Copilot July 20, 2026 01:54

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

@kvinwang
kvinwang enabled auto-merge July 20, 2026 01:57
@kvinwang
kvinwang disabled auto-merge July 20, 2026 01:57
@kvinwang
kvinwang merged commit 3a59763 into master Jul 20, 2026
16 checks passed
@kvinwang
kvinwang deleted the docs/persistent-storage-freshness branch July 20, 2026 02:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants