Verifying Intel TDX and NVIDIA GPU attestation from inside a rented VM, and what it can't prove

I run a small confidential GPU cloud. We rent Intel TDX virtual machines with an H100, H200 or RTX PRO 6000 Blackwell passed through, and customers kept asking the only question that matters: how do I