attest Limitations and status
Know what Attest can and cannot verify today.
Attest is pre-release. Local fixture coverage and limited live experiments do not establish a completed real end-to-end release acceptance. Clean-host installation, live scenarios, GitHub required checks and fork association remain open.
Browser and authentication
The current browser subset supports one tab and one HTTPS preview origin. Cross-origin assets and authentication can fail. File uploads, arbitrary JavaScript, downloads, purely visual assertions, CAPTCHA, MFA, WebAuthn, email OTP and arbitrary SSO are unsupported. The MVP's profile-picture upload acceptance scenario therefore remains open.
Results and operations
A reachable preview URL alone does not prove commit identity. Missing or ambiguous evidence, blocked authentication and exhausted budgets cannot become a pass. Browser actions are not a guarantee of semantic correctness. Do not make the Check a required merge gate until behavior has been validated in a real controlled GitHub repository.
The project intends to be open source, but license selection remains open. For next steps, see troubleshooting.