feat: bump MIN_TCB_EVALUATION_DATA_NUMBER and use collateral proxy

[jdrean]

Summary by cubic

Route Intel PCS collateral requests through our TDX collateral proxy, bump the minimum TCB evaluation data number to 19, and re-fetch cached entries below the threshold. This ensures fresher TDX collateral and more reliable fetches.

• New Features

  • Added _proxy_url and route all collateral HTTP GETs via tdx-proxy.tinfoil.sh.
  • Set DEFAULT_MIN_TCB_EVALUATION_DATA_NUMBER to 19 and pass it via tcbEvaluationDataNumber to TCB Info and QE Identity requests.

• Bug Fixes

  • Cache now re-fetches when cached TCB Info or QE Identity has tcbEvaluationDataNumber below the threshold.

^{Written for commit f6c7128. Summary will update on new commits.}

[cubic-dev-ai]

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="src/tinfoil/attestation/collateral_tdx.py">

<violation number="1" location="src/tinfoil/attestation/collateral_tdx.py:390">
P1: Bumping the minimum TCB evaluation number without cache-version invalidation can cause persistent validation failures on fresh-but-now-too-old cached collateral.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review, or fix all with cubic.}