{"version":"2.1.274","anchor":"sse-transport-can-parse-a-worker-attestation-policy-header","canonical_anchor":"sse-transport-can-parse-a-worker-attestation-policy-header","heading":"SSE transport can parse a worker attestation policy header, but nothing installs the sink","tier":"soon","area":"Internals","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274\/e\/sse-transport-can-parse-a-worker-attestation-policy-header","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274","markdown":"### SSE transport can parse a worker attestation policy header, but nothing installs the sink\n\nSSE network transport can parse a worker attestation policy header, but nothing installs it yet\n\n**What**\n\nThe SSE (server-sent events, a way of streaming data over HTTP) transport used for network connections gained the ability to hold a \"worker attestation policy sink\" and, if one is set, to add a `worker_capabilities=attestation-floor\/1` marker to its connection URL and parse a new `x-ccr-attestation-policy` response header. That header can specify a mode (`off`, `observe`, or `enforce`) and an acceptance level such as `VERIFIED_BY_GATE`. Nothing in this build actually sets the sink, so none of this runs yet.\n\n**Why**\n\nThis is groundwork for a future worker-attestation feature (a way to verify properties of the machine handling a request) that isn't wired up or active in this build.\n\n- Area: Internals\n- Tier: Nothing to try yet\n- Useful: 3\/5\n- Signal: 4\/5\n- Present in the build but not switched on"}