Achieving minimum trustworthiness in distributed workloads

A system, comprising:

• at least one processor;
• and
• one or more non-transitory media storing instructions that, when executed by the system, cause the system to perform operations comprising:
• identifying at least one trustworthiness requirement for a compute infrastructure upon which an application is executed;
• transmitting, to a first subsystem, a request for at least one trustworthiness characteristic of a chain of subsystems comprising the first subsystem and at least one second subsystem, the first subsystem comprising a first microservice operating in a trusted execution environment (TEE) of a first device, the at least one second subsystem comprising at least one second microservice operating in at least one TEE of at least one second device, the at least one trustworthiness characteristic comprising:
• at least one of an executable of the first microservice, a configuration of the first microservice, a type of hardware of the first device, or a type of firmware of the first device;
• and
• at least one of an executable of the at least one second microservice, a configuration of the at least one second microservice, a file type stored or executed by the at least one second device, a type of hardware of the at least one second device, or a type of firmware of the at least one second device;
• receiving, from the first subsystem, a response indicating that the first subsystem and the at least one second subsystem provide the at least one trustworthiness characteristic;
• determining that the at least one trustworthiness characteristic satisfies the at least one trustworthiness requirement;
• and
• based on determining that the at least one trustworthiness characteristic satisfies the at least one trustworthiness requirement, causing the application to operate on a mesh comprising the chain of subsystems.

A system, comprising:

• at least one processor comprising a Trusted Execution Environment (TEE);
• and
• one or more non-transitory media storing instructions that, when executed by the system, cause the TEE to execute an Application Programming Interface (API) that performs operations comprising:
• receiving, from a user device, at least one trustworthiness requirement for a compute infrastructure upon which an application is executed;
• transmitting, to a first subsystem, a first request for at least one first trustworthiness characteristic of a first chain of subsystems comprising the first subsystem and at least one second subsystem, the at least one second subsystem being adjacent to the first subsystem and nonadjacent to the system;
• receiving, from the first subsystem, a first response indicating the at least one first trustworthiness characteristic of the first chain of subsystems;
• determining that the at least one first trustworthiness characteristic fails to satisfy the at least one trustworthiness requirement;
• based on determining that the at least one first trustworthiness characteristic fails to satisfy the at least one trustworthiness requirement, transmitting, to a third subsystem, a second request for at least one second trustworthiness characteristic of a second chain of subsystems comprising the third subsystem and at least one fourth subsystem, the at least one fourth subsystem being adjacent to the third subsystem and nonadjacent to the system;
• receiving, from the third subsystem, a second response indicating the at least one second trustworthiness characteristic of the second chain of subsystems;
• determining that the at least one second trustworthiness characteristic satisfies the at least one trustworthiness requirement;
• and
• based on determining that the at least one second trustworthiness characteristic satisfies the at least one trustworthiness requirement, causing the application to operate on a mesh comprising the second chain of subsystems.