Every quote submitted through the relay is cryptographically verifiable. MMs don't need to trust the relay — they can independently prove that every quote was included, unmodified, and in order.
Merkle commitment chain
Each batch of quotes is hashed into a Merkle tree. The root is committed on-chain with every relay transaction. MMs keep their own copy of submitted quotes and can reconstruct the tree to verify inclusion.
Root (on-chain) H(01)H(23)
Q0Q1Q2Q3
Inclusion proof
For any quote, the MM can request a Merkle proof — a short path of sibling hashes from the leaf to the root. Verifying the proof against the on-chain root confirms the quote was included in that batch, unmodified.
Ordering & freshness
Each batch carries a monotonic sequence number and timestamp. The relay signs every batch before submission. Gaps in the sequence prove skipped batches; stale timestamps prove delayed submission. Both are detectable by any MM.
TEE attestation
The relay runs inside a Trusted Execution Environment. The binary is open-source with reproducible builds. Remote attestation lets anyone verify the exact code running inside the enclave matches the public repo — no hidden logic, no quote manipulation.
Proof sizeO(log n) hashes per quote
VerificationOff-chain, by any MM, anytime
Trust assumptionNone — verify against on-chain root