diff --git a/.github/workflows/wcm-launch-page.yml b/.github/workflows/wcm-launch-page.yml
new file mode 100644
index 0000000..34ef83c
--- /dev/null
+++ b/.github/workflows/wcm-launch-page.yml
@@ -0,0 +1,27 @@
+name: WCM launch page
+
+on:
+  pull_request:
+    paths:
+      - "wcm/**"
+      - ".github/workflows/wcm-launch-page.yml"
+  push:
+    branches: [main]
+    paths:
+      - "wcm/**"
+      - ".github/workflows/wcm-launch-page.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  evidence:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - run: node wcm/launch-page.test.js
diff --git a/design-system.css b/design-system.css
index 7f976b7..70c2ede 100644
--- a/design-system.css
+++ b/design-system.css
@@ -1733,6 +1733,101 @@ html:has(body.agentrust-hub) { scroll-behavior: smooth; }
 
 .at-page .divider { margin: 0; border: 0; border-top: 1px solid var(--at-line); }
 
+/* WCM release page */
+.at-page .hero-actions {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.75rem;
+  margin: 1.75rem 0 1rem;
+}
+.at-page .hero-actions .button.secondary {
+  border-color: rgba(255, 255, 255, 0.32);
+  background: transparent;
+  color: var(--at-paper);
+}
+.at-page .proof-section { padding-top: 2.5rem; padding-bottom: 2.5rem; }
+.at-page .proof-grid {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  overflow: hidden;
+  border: 1px solid var(--at-line);
+  border-radius: var(--at-radius);
+  background: var(--at-white);
+}
+.at-page .proof-grid a {
+  display: flex;
+  min-height: 132px;
+  flex-direction: column;
+  justify-content: center;
+  padding: 1.25rem;
+  border-right: 1px solid var(--at-line);
+  color: var(--at-ink);
+  text-decoration: none;
+}
+.at-page .proof-grid a:last-child { border-right: 0; }
+.at-page .proof-grid a:hover { background: var(--at-paper-2); }
+.at-page .proof-grid strong {
+  font-family: var(--at-serif);
+  font-size: clamp(2rem, 4vw, 3.2rem);
+  font-weight: 500;
+  letter-spacing: -0.04em;
+  line-height: 1;
+}
+.at-page .proof-grid span {
+  margin-top: 0.55rem;
+  color: var(--at-muted);
+  font-size: 0.68rem;
+  font-weight: 750;
+  letter-spacing: 0.07em;
+  text-transform: uppercase;
+}
+.at-page .proof-note { margin-top: 0.8rem; color: var(--at-muted); font-size: 0.72rem; }
+.at-page .proof-note code { color: var(--at-ink); font-family: var(--at-mono); }
+.at-page .wcm-terminal { margin-top: 2rem; }
+.at-page .wcm-terminal .term-body { display: grid; gap: 0.7rem; }
+.at-page .wcm-terminal .term-body > div {
+  display: grid;
+  grid-template-columns: 30px minmax(230px, 1fr) minmax(220px, auto);
+  gap: 1rem;
+  padding-bottom: 0.7rem;
+  border-bottom: 1px solid rgba(255, 255, 255, 0.08);
+}
+.at-page .wcm-terminal .term-body > div:last-child { padding-bottom: 0; border-bottom: 0; }
+.at-page .wcm-use-cases .card { min-height: 250px; }
+.at-page .card-num {
+  color: var(--at-red);
+  font-family: var(--at-mono);
+  font-size: 0.7rem;
+  font-weight: 750;
+  letter-spacing: 0.08em;
+}
+.at-page .wcm-flow {
+  display: grid;
+  grid-template-columns: minmax(145px, 1fr) auto minmax(145px, 1fr) auto minmax(145px, 1fr) auto minmax(145px, 1fr);
+  align-items: stretch;
+  gap: 0.7rem;
+  margin-top: 2.2rem;
+}
+.at-page .wcm-flow > div {
+  display: flex;
+  min-height: 180px;
+  flex-direction: column;
+  padding: 1.25rem;
+  border: 1px solid var(--at-line);
+  border-radius: 14px;
+  background: var(--at-white);
+}
+.at-page .wcm-flow > div.gate { border-color: var(--at-red); box-shadow: inset 0 4px 0 var(--at-red); }
+.at-page .wcm-flow span { color: var(--at-red); font-family: var(--at-mono); font-size: 0.7rem; }
+.at-page .wcm-flow strong { margin-top: auto; font-family: var(--at-serif); font-size: 1.15rem; }
+.at-page .wcm-flow small { margin-top: 0.55rem; color: var(--at-muted); line-height: 1.5; }
+.at-page .wcm-flow > i { align-self: center; color: var(--at-red); font-family: var(--at-serif); font-size: 1.5rem; font-style: normal; }
+.at-page .source-links { display: flex; flex-wrap: wrap; gap: 0.55rem 1.1rem; margin-top: 1.5rem; }
+.at-page .source-links a { font-size: 0.78rem; font-weight: 700; }
+.at-page .wcm-personas { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+.at-page .wcm-personas .card { min-height: 220px; }
+.at-page .wcm-personas .card a { margin-top: auto; padding-top: 1rem; color: var(--at-ink); font-size: 0.78rem; font-weight: 750; }
+
 /* Footer */
 .at-page .site-footer {
   padding: clamp(2.5rem, 5vw, 4rem) var(--at-gutter);
@@ -1777,6 +1872,21 @@ html:has(body.agentrust-hub) { scroll-behavior: smooth; }
   .at-page .split.even { grid-template-columns: 1fr; }
   .at-page section { padding: 3.5rem 0; }
   .at-page .credit { max-width: none; }
+  .at-page .proof-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+  .at-page .proof-grid a:nth-child(2) { border-right: 0; }
+  .at-page .proof-grid a:nth-child(-n + 2) { border-bottom: 1px solid var(--at-line); }
+  .at-page .wcm-flow { grid-template-columns: 1fr; }
+  .at-page .wcm-flow > div { min-height: 145px; }
+  .at-page .wcm-flow > i { transform: rotate(90deg); }
+  .at-page .wcm-personas { grid-template-columns: 1fr; }
+}
+
+@media (max-width: 560px) {
+  .at-page .proof-grid { grid-template-columns: 1fr; }
+  .at-page .proof-grid a { min-height: 110px; border-right: 0; border-bottom: 1px solid var(--at-line); }
+  .at-page .proof-grid a:last-child { border-bottom: 0; }
+  .at-page .wcm-terminal .term-body > div { grid-template-columns: 24px 1fr; }
+  .at-page .wcm-terminal .term-body > div span:last-child { grid-column: 2; }
 }
 
 @media (prefers-reduced-motion: reduce) {
diff --git a/wcm/index.html b/wcm/index.html
index fc392f3..5f14035 100644
--- a/wcm/index.html
+++ b/wcm/index.html
@@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>Weight Custody Manifest | AgenTrust</title>
-<meta name="description" content="An open protocol for protecting model weights deployed into a customer's own or sovereign infrastructure. Signed manifest, attestation-gated key release, renewable lease with wipe on lapse, and derivative lineage. Reference SDK available on PyPI while the specification is in development.">
+<meta name="description" content="Deploy closed model weights into customer-controlled and sovereign infrastructure with attestation-gated release, renewable authorization, and portable custody evidence.">
 <link rel="canonical" href="https://agentrust-io.com/wcm/">
 <meta name="robots" content="index, follow">
 
@@ -12,19 +12,19 @@
 <meta property="og:type" content="website">
 <meta property="og:site_name" content="AgenTrust">
 <meta property="og:title" content="Weight Custody Manifest">
-<meta property="og:description" content="When you ship a model into infrastructure you do not control, the party at risk flips. WCM is the open protocol for that direction.">
+<meta property="og:description" content="Release encrypted model weights only to an approved workload, only for a renewable window, with evidence of every decision.">
 <meta property="og:url" content="https://agentrust-io.com/wcm/">
 <meta property="og:locale" content="en_US">
-<meta property="og:image" content="https://agentrust-io.com/og.png">
-<meta property="og:image:width" content="1200">
-<meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image" content="https://agentrust-io.com/wcm/og-launch.png">
+<meta property="og:image:width" content="1731">
+<meta property="og:image:height" content="909">
+<meta property="og:image:alt" content="Weight Custody Manifest: Release, Attest, Revoke">
 
 <!-- Twitter -->
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Weight Custody Manifest">
-<meta name="twitter:description" content="An open protocol for releasing model weights into infrastructure you do not control, with evidence of what happened.">
-<meta name="twitter:image" content="https://agentrust-io.com/og.png">
+<meta name="twitter:description" content="Release encrypted model weights only to approved workloads, for renewable windows, with portable custody evidence.">
+<meta name="twitter:image" content="https://agentrust-io.com/wcm/og-launch.png">
 
 <!-- Icons -->
 <link rel="icon" href="/favicon.ico" sizes="any">
@@ -52,7 +52,7 @@
 <header class="site-header">
   <a class="wordmark" href="/">agentrust<span>.io</span></a>
   <nav>
-    <a href="#flip">The flip</a>
+    <a href="#proof">Proof</a>
     <a href="#protocol">Protocol</a>
     <a href="#try">Try it</a>
     <a href="#limits">Limits</a>
@@ -62,20 +62,58 @@
 
 <div class="hero"><div class="wrap">
   <span class="eyebrow">Release · Attest · Revoke</span>
-  <h1>Weight custody for models you deploy<br>into infrastructure you do not control</h1>
-  <p class="sub">Every model-weight protection tool protects the customer from the model. None protect the builder from the customer. WCM is the open protocol for that direction: a signed manifest, attestation-gated key release, a renewable lease that wipes on lapse, and a chain of custody for derivatives.</p>
-  <div><span class="status">Specification in active development · Reference SDK on PyPI · Open source soon</span></div>
+  <h1>Deploy closed model weights<br>without surrendering control</h1>
+  <p class="sub">WCM is an open protocol for releasing encrypted model weights into customer-controlled and sovereign infrastructure—only after the workload is attested, only for a renewable authorization window, and with portable evidence of every decision.</p>
+  <div class="hero-actions">
+    <a class="button" href="#demo">See the fail-closed path</a>
+    <a class="button secondary" href="#try">Run the 5-minute demo</a>
+  </div>
+  <div><span class="status">Release candidate · SDK 0.26.0 on PyPI · Specification pre-1.0</span></div>
 </div></div>
 
 <main>
 
+<section id="proof" class="proof-section" aria-label="Release evidence">
+  <div class="proof-grid">
+    <a href="https://pypi.org/project/weight-custody-manifest/"><strong>0.26.0</strong><span>Python SDK</span></a>
+    <a href="https://github.com/agentrust-io/weight-custody-manifest/tree/main/conformance/vectors"><strong>91</strong><span>Conformance vectors</span></a>
+    <a href="https://github.com/agentrust-io/weight-custody-manifest/actions"><strong>574</strong><span>Tests passing</span></a>
+    <a href="#hardware"><strong>3</strong><span>Hardware families exercised</span></a>
+  </div>
+  <p class="proof-note">Release evidence captured against WCM commit <code>4af6836</code>. Claims link to their supporting artifact.</p>
+</section>
+
 <section id="flip">
   <span class="label">The problem</span>
   <h2>The threat model flips when the model leaves your data center</h2>
-  <p>Weight-protection tooling assumes the builder is trusted and the customer is the party at risk. Deploy a frontier model into a customer's own infrastructure, a sovereign cloud, or an air-gapped facility and that reverses. Now it is the builder whose weights sit on hardware someone else owns and someone else operates.</p>
+  <p>Most deployment security is framed around protecting the customer from the model and its operator. Deploy a frontier model into a customer's own infrastructure, a sovereign cloud, or an air-gapped facility and an additional risk appears: the builder's weights now sit on hardware someone else owns and operates.</p>
   <p>WCM answers one question: <strong>can a model builder release encrypted weights only to an approved workload, keep that approval short-lived, and retain evidence of what happened?</strong> The answer is yes for the reference protocol and the software checks, with one boundary stated plainly rather than buried, which you will find further down this page.</p>
 </section>
 
+<section id="demo">
+  <span class="label">The moment that matters</span>
+  <h2>Change the evidence. The key stays closed.</h2>
+  <p>A custody protocol is valuable when it refuses the wrong request. This is the reference path in three outcomes; the runnable demo below reproduces the same fail-closed decisions in software-only development mode.</p>
+  <div class="term wcm-terminal" aria-label="Example WCM verification transcript">
+    <div class="term-bar"><span class="dot"></span><span class="dot"></span><span class="dot"></span><span class="term-title">wcm release --explain</span></div>
+    <div class="term-body">
+      <div><span class="dim">01</span> approved workload + fresh attestation <span class="ok">RELEASED · key sealed to workload</span></div>
+      <div><span class="dim">02</span> changed serving-image measurement <span class="alert">DENIED · WCM-L2-0006</span></div>
+      <div><span class="dim">03</span> authorization window elapsed <span class="alert">REFUSED · fresh release required</span></div>
+    </div>
+  </div>
+</section>
+
+<section id="use-cases">
+  <span class="label">Where it fits</span>
+  <h2>One custody contract, three deployment pressures</h2>
+  <div class="grid-3 wcm-use-cases">
+    <article class="card"><span class="card-num">01</span><h3>Sovereign deployment</h3><p>Run a closed model inside nationally controlled infrastructure while making weight release conditional on an approved, attested workload.</p></article>
+    <article class="card"><span class="card-num">02</span><h3>Enterprise and air-gapped</h3><p>Deliver encrypted weights to customer-operated environments without turning a one-time handoff into permanent authorization.</p></article>
+    <article class="card"><span class="card-num">03</span><h3>Regulated model delivery</h3><p>Carry signed policy, release decisions, renewal state, revocation, and derivative lineage as portable evidence.</p></article>
+  </div>
+</section>
+
 <section id="protocol">
   <span class="label">How it works</span>
   <h2>Six steps, no plaintext key on the wire</h2>
@@ -132,10 +170,24 @@ <h3>Authorization expires</h3>
   </div>
 </section>
 
+<section id="architecture">
+  <span class="label">Trust path</span>
+  <h2>The host carries ciphertext. Evidence decides release.</h2>
+  <div class="wcm-flow" role="img" aria-label="Builder signs a manifest, an attested workload presents evidence, a key broker verifies it, and a sealed key enters the protected runtime">
+    <div><span>1</span><strong>Builder</strong><small>Encrypted weights<br>Signed manifest</small></div>
+    <i aria-hidden="true">→</i>
+    <div><span>2</span><strong>Attested workload</strong><small>Fresh challenge<br>Measured runtime</small></div>
+    <i aria-hidden="true">→</i>
+    <div class="gate"><span>3</span><strong>Key broker</strong><small>Verify every gate<br>Deny on mismatch</small></div>
+    <i aria-hidden="true">→</i>
+    <div><span>4</span><strong>Protected runtime</strong><small>Sealed key<br>Renew or stop</small></div>
+  </div>
+</section>
+
 <section id="try">
   <span class="label">Try it</span>
   <h2>The reference SDK is already installable</h2>
-  <p>The specification is still in development, but the Python reference implementation is published and you can exercise the whole protocol locally against synthetic evidence today. We would rather have your feedback now, while the design can still change, than after it is frozen.</p>
+  <p>The specification is pre-1.0, but the Python reference implementation is published and you can exercise the protocol locally against synthetic evidence today. We would rather have your feedback while the design can still change than after it is frozen.</p>
 
   <div class="steps">
 
@@ -199,15 +251,27 @@ <h2>Two guarantees, never blended</h2>
 
   <div class="callout"><p><strong>Placed the way a frontier lab grades it:</strong> WCM implements the confidential-computing measure that RAND recommends in <em>Securing AI Model Weights</em>. It holds across the OC1 to OC3 attacker range and, by its own concession, not against an OC4 or OC5 actor who owns the hardware. It is not a security level. A security level is a whole-organization posture, and assigning one to a single control misuses the unit.</p></div>
 
-  <p style="margin-top:2rem;">Verification paths have been exercised against real silicon across AMD SEV-SNP, Intel TDX, and NVIDIA H100 in confidential computing mode. Two areas are deliberately not claimed yet, because they need evidence from the real protected runtime rather than a more persuasive simulation: protected-boundary hardware evidence for the memory fingerprint sweep, and production zeroization from the actual controller rather than unit tests. Both are tracked in the open.</p>
+  <p id="hardware" style="margin-top:2rem;">Verification paths have been exercised against real silicon across AMD SEV-SNP, Intel TDX, and NVIDIA H100 in confidential computing mode. Two areas are deliberately not claimed yet, because they need evidence from the real protected runtime rather than a more persuasive simulation: <a href="https://github.com/agentrust-io/weight-custody-manifest/issues/79">protected-boundary hardware evidence for the memory fingerprint sweep</a>, and <a href="https://github.com/agentrust-io/weight-custody-manifest/issues/78">production zeroization from the actual controller</a> rather than unit tests.</p>
+  <p class="source-links"><a href="https://www.rand.org/pubs/research_reports/RRA2849-1.html">RAND weight-security report ↗</a><a href="https://tee.fail/">TEE.fail research ↗</a><a href="https://badram.eu/">BadRAM research ↗</a><a href="https://github.com/agentrust-io/weight-custody-manifest/blob/main/THREAT-MODEL.md">Full threat model ↗</a></p>
+</section>
+
+<section id="participate">
+  <span class="label">Build with us</span>
+  <h2>Four ways into the release</h2>
+  <div class="grid-3 wcm-personas">
+    <article class="card"><h3>Model owners</h3><p>Evaluate a closed-weight deployment and pressure-test the release policy against your actual threat model.</p><a href="mailto:imransiddique@live.com?subject=WCM%20model-owner%20evaluation">Evaluate a deployment →</a></article>
+    <article class="card"><h3>Runtime and cloud teams</h3><p>Add or review an attestation profile and prove what your protected boundary can support.</p><a href="https://github.com/agentrust-io">Follow the release →</a></article>
+    <article class="card"><h3>Security researchers</h3><p>Challenge the threat model, fixtures, hardware assumptions, and explicit non-goals.</p><a href="https://github.com/agentrust-io/weight-custody-manifest/issues">Review open questions →</a></article>
+    <article class="card"><h3>Standards contributors</h3><p>Review the manifest, portable evidence, conformance levels, and interoperability boundaries.</p><a href="mailto:imransiddique@live.com?subject=WCM%20specification%20review">Join the review →</a></article>
+  </div>
 </section>
 
 <section id="status">
   <span class="label">Status</span>
   <h2>What is available now, and what is coming</h2>
-  <p>The repository is in active development and will be open sourced soon. When it opens it publishes the full specification, the threat model, the limitations document, the manifest JSON Schema, the Python reference SDK, the portable conformance vectors, and a reproducibly built reference key-release-service image.</p>
+  <p>The release candidate includes the full specification, threat model, limitations document, manifest JSON Schema, Python reference SDK, portable conformance vectors, and a reproducibly built reference key-release-service image. The SDK is available now; the repository becomes public with the release announcement.</p>
   <p>The reference SDK is already on PyPI, and the demos and integration examples above are public today, so you can evaluate the protocol before the specification lands. This is deliberate: the design decisions we most want argued with are cheaper to change now.</p>
-  <div class="callout"><p><strong>Open core.</strong> What opens is the protocol layer: the specification, the threat model, and the reference key-release service. The operated custody service and the enclave implementation are separate and are not part of it.</p></div>
+  <div class="callout"><p><strong>Open protocol, implementation ecosystem.</strong> The specification, schema, conformance suite, reference SDK, threat model, and reference key-release service will be released under Apache-2.0. Vendors may build interoperable hosted services and protected-runtime implementations.</p></div>
   <div style="margin-top:2.25rem;">
     <a class="button" href="https://pypi.org/project/weight-custody-manifest/">Install the SDK</a>
     <a class="button secondary" href="https://github.com/agentrust-io">Follow the org on GitHub</a>
@@ -228,6 +292,7 @@ <h2>What is available now, and what is coming</h2>
       <a href="/demos/">Demos</a>
       <a href="https://github.com/agentrust-io">GitHub</a>
     </div>
+    <div class="credit"><b>Independent open-source project.</b> OPAQUE Systems provides funding, engineering time, infrastructure, and confidential-computing contributions as a founding sponsor. Sponsorship does not confer ownership or governance authority.</div>
   </div>
   <div class="foot-legal">© 2026 AgenTrust Contributors · agentrust-io.com</div>
 </div></footer>
diff --git a/wcm/launch-page.test.js b/wcm/launch-page.test.js
new file mode 100644
index 0000000..409abf8
--- /dev/null
+++ b/wcm/launch-page.test.js
@@ -0,0 +1,44 @@
+'use strict';
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+
+const here = __dirname;
+const html = fs.readFileSync(path.join(here, 'index.html'), 'utf8');
+const css = fs.readFileSync(path.join(here, '..', 'design-system.css'), 'utf8');
+const proof = JSON.parse(fs.readFileSync(path.join(here, 'proof.json'), 'utf8'));
+
+assert.match(html, new RegExp(`<strong>${proof.sdk_version.replace('.', '\\.')}</strong>`));
+assert.match(html, new RegExp(`<strong>${proof.conformance_vectors}</strong>`));
+assert.match(html, new RegExp(`<strong>${proof.tests_passed}</strong>`));
+assert.match(html, new RegExp(`<strong>${proof.hardware_families.length}</strong>`));
+assert.ok(html.includes(proof.wcm_commit.slice(0, 7)), 'proof strip must pin the WCM commit');
+for (const platform of proof.hardware_families) {
+  assert.ok(html.includes(platform.split(' confidential computing')[0]));
+}
+
+assert.ok(!html.includes('None protect the builder'), 'avoid an unsupported novelty absolute');
+assert.ok(!html.includes('<strong>Open core.</strong>'), 'launch copy must describe the open surface precisely');
+assert.ok(html.includes('Sponsorship does not confer ownership or governance authority'));
+assert.ok(html.includes('issues/78') && html.includes('issues/79'));
+assert.ok(html.includes('/wcm/og-launch.png'));
+const socialCard = fs.readFileSync(path.join(here, 'og-launch.png'));
+assert.ok(socialCard.length > 100_000);
+assert.equal(socialCard.toString('ascii', 1, 4), 'PNG');
+const width = socialCard.readUInt32BE(16);
+const height = socialCard.readUInt32BE(20);
+assert.equal(width, 1731);
+assert.equal(height, 909);
+assert.ok(html.includes(`<meta property="og:image:width" content="${width}">`));
+assert.ok(html.includes(`<meta property="og:image:height" content="${height}">`));
+for (const selector of ['.proof-grid', '.wcm-terminal', '.wcm-flow', '.wcm-personas']) {
+  assert.ok(css.includes(selector), `${selector} must have a responsive style`);
+}
+assert.equal((css.match(/{/g) || []).length, (css.match(/}/g) || []).length);
+const ids = new Set([...html.matchAll(/\sid="([^"]+)"/g)].map((match) => match[1]));
+for (const match of html.matchAll(/href="#([^"]+)"/g)) {
+  assert.ok(ids.has(match[1]), `fragment #${match[1]} must resolve`);
+}
+
+console.log('WCM launch page evidence and positioning checks passed');
diff --git a/wcm/og-launch.png b/wcm/og-launch.png
new file mode 100644
index 0000000..e158e8e
Binary files /dev/null and b/wcm/og-launch.png differ
diff --git a/wcm/proof.json b/wcm/proof.json
new file mode 100644
index 0000000..881fd72
--- /dev/null
+++ b/wcm/proof.json
@@ -0,0 +1,12 @@
+{
+  "captured_at": "2026-08-23",
+  "wcm_commit": "4af6836ca11b0742f03d1ca421bec47d34d8fa32",
+  "sdk_version": "0.26.0",
+  "conformance_vectors": 91,
+  "tests_passed": 574,
+  "hardware_families": [
+    "AMD SEV-SNP",
+    "Intel TDX",
+    "NVIDIA H100 confidential computing"
+  ]
+}