The Forensic
Certification Standard

Every GPU submitted to Assurd Techlabs passes through five mandatory phases of forensic inspection. No shortcuts. No consumer benchmarks taken at face value. No exceptions.

Physical & Electrical Triage

Before any power is applied, we treat every submitted unit as potentially dangerous. The card is inspected under a bench lamp for PCB damage, capacitor trauma, burnt traces and connector deformation, and its PCIe fingers and power connectors under magnification. We then check the 12 V and 3.3 V inputs for shorts and measure rail-to-ground resistance with a bench multimeter: the three primary rails on every tier, all six on Premium. Shorts are caught before the card ever touches a live bench.

Chain-of-custody tamper seal verification
PCB graded A / B / C / F under the bench lamp
12V & 3.3V rail short detection (diode test)
VCore rail-to-ground resistance (dead-short check)
Memory and VDDCI rail-to-ground resistance
PCIe finger inspection under magnification
Fan bearing inspection & blade assessment

Any short on the 12V or 3.3V rail, any power rail reading 0.1 Ω or less to ground, a PCB graded F, broken PCIe pads, a dead fan, or a melted 12VHPWR connector triggers immediate quarantine. The unit cannot proceed.

Silicon DNA & Cryptographic Verification

We connect a hardware SPI flash reader directly to the GPU's VBIOS chip — bypassing the driver stack entirely. The server SHA-256 hashes the extracted binary and looks it up among the Assurd VBIOS Hash Registry's factory references for that board; firmware that is not in the registry is reported as such, not as a failure. We also cross-check the card's reported configuration against the registry entry for its board to catch counterfeit board substitutions.

Hardware SPI extraction (not software read)
SHA-256 hash vs. Assurd VBIOS Registry
Subsystem ID vs. AIB manufacturer registry
Spec cross-check: GPU-Z [FAKE], core count, memory size
Electronic serial cross-check, when the card reports one
assurd-intake — bash

> EZP2023+: READ SPI FLASH -> vbios_dump.rom ... OK

> UPLOADING DUMP FOR SERVER-SIDE HASHING...

> SHA-256: fc4c2b0e0073757c1761d416d62fd0c730c098d12d1b5be2099f6c948f4c1553

> QUERYING ASSURD VBIOS REGISTRY...

> MATCH: ASUS ROG STRIX RTX 4090 OC [AD102 / 190-00591-0000-000]

> SUBSYSTEM ID: 1043:891E — VERIFIED AGAINST AIB REGISTRY

> VERDICT: MATCHES THE REGISTRY REFERENCE

A card that GPU-Z reports as [FAKE], or a critical spec mismatch, is an immediate rejection. Firmware that is not in the registry is shown as such and is not a failure: Assurd does not yet detect modified or mining firmware.

Thermal Forensics & 1800-Second Heat Soak

Consumer benchmarks run for 90–300 seconds. Our forensic thermal trace runs for 1800 seconds — 30 minutes of continuous full load. This is not arbitrary. A GPU heatsink has a thermal time constant (τ = Rθ × Cθ), estimated at 600–1200 seconds for a triple-fan cooler. Short tests measure the transient response. We measure every card over the same window, the last five minutes of load: near equilibrium for a fast cooler, still approaching it for a slow one, and comparable across cards. A radiometric thermal image is captured in that window on every tier; Premium adds a calibrated acoustic recording.

Core Temperature
°C
Averaged on-die reading
Hotspot Temperature
°C
Hottest on-die sensor
Hotspot Delta (ΔT)
°C
Primary TIM health diagnostic
VRAM Junction
°C
Where the card exposes it
Fan RPM σ
RPM
Bearing health signal (>35 = Soft Limit)
Total Board Power
W
Via ElmorLabs PMD

Grades are gated by the hotspot delta, the mean of hotspot minus core temperature over 1500–1800 s of load. The thresholds are engineering priors pending fleet calibration (n ≈ 300).

ΔT<12∘C=Excellent∣ΔT<18∘C=Acceptable∣ΔT>30∘C=Fail\Delta T < 12^\circ C = \text{Excellent} \mid \Delta T < 18^\circ C = \text{Acceptable} \mid \Delta T > 30^\circ C = \text{Fail}

Units with ΔT between 18°C and 30°C are issued a 'PASS — TIM DEGRADED' verdict. These units are capped at a BRONZE grade regardless of other performance metrics, and the certificate discloses the finding.

Gaming, Creative & AI Inference Validation

Raw benchmark scores are marketing. We capture frametime distributions — the statistical shape of how a GPU delivers frames over time. Four titles run their built-in benchmarks, one recorded pass per resolution: Premium at 1080p, 1440p and 4K (12 runs); Standard and Re-Certification at the two resolutions set by the card's class (8 runs), or all three when the model is not yet classified. Premium adds the Creative & AI suite.

Gaming Suite
Red Dead Redemption 2 (Vulkan, Ultra)Native rasterization + sustained memory bandwidth
Shadow of the Tomb Raider (DX12, Highest)Native rasterization on DX12
Metro Exodus Enhanced Edition (Ultra, RT High)Ray tracing at native resolution
Cyberpunk 2077 (Ray Tracing: Ultra)Ray tracing + vendor upscaler at Quality, frame generation off
Creative & AI Suite (Premium)
Blender Open Data (monster, junkshop, classroom)Render output hash vs. reference — catches compute errors
Stable Diffusion SDXLTensor core throughput efficiency (η_tensor)
PugetBench DaVinci ResolveEncoder output checked by PSNR against a reference transcode
ECC Counters (when reported)Every tier: lifetime uncorrectable VRAM errors, when the card reports ECC counters; most consumer cards do not

All FPS figures are time-weighted. The score weights the consistency gap g = 1 − FPS₁%/FPSavg at 0.7 and the stutter magnitude s = 1 − FPS₀.₁%/FPS₁% at 0.3:

SF=[1−(0.7⋅(1−FPS1%FPSavg)+0.3⋅(1−FPS0.1%FPS1%))]×100S_F = \left[ 1 - \left( 0.7 \cdot \left(1 - \frac{\text{FPS}_{1\%}}{\text{FPS}_{\text{avg}}}\right) + 0.3 \cdot \left(1 - \frac{\text{FPS}_{0.1\%}}{\text{FPS}_{1\%}}\right) \right) \right] \times 100

GOLD and PLATINUM need a score of at least 88 in every measured resolution; PLATINUM also needs at least 95 in one. A run whose stutter magnitude exceeds 0.60 is a Soft Limit: the technician must justify it in writing and re-examine the power rails from Phase 1. These thresholds are engineering priors pending fleet calibration (n ≈ 300).

Certificate Finalization & Digital Twin Issuance

Every data point from Phases 1–4 is compiled by the Assurd Rules Engine — not a technician — into a Hardware Grade. The technician proposes. The Rules Engine decides. The resulting Digital Certificate is cryptographically signed and published to the Assurd public registry as an immutable Digital Twin of this specific hardware asset.

GradeCondition
PLATINUMPremium only. Health score ≥ 90, no disclosed Soft Limit, Fluidity ≥ 95 in one resolution and ≥ 88 in every measured one, Hotspot Δ < 12°C.
GOLDHealth score ≥ 78, Fluidity ≥ 88 in every measured resolution, Hotspot Δ < 18°C. The highest grade for Standard and Re-Certification, even when the earlier certificate was PLATINUM.
SILVERHealth score ≥ 65. Good working condition with documented findings. Also the cap when no gaming data was measured.
BRONZEHealth score ≥ 50. Functional but degraded. Includes units with 'TIM Degraded' thermal verdicts.

Each certificate is signed with an ECDSA P-256 (ES256) key held in Google Cloud KMS, over its RFC 8785 canonical JSON. Anyone can verify it with the public key from the Assurd registry, in the browser or offline with OpenSSL. Any change to the signed bytes breaks the signature.

Ready to submit hardware for certification?

Every phase detailed above is executed on every unit that enters our labs, at the scope of its service tier. Request secure pickup and insured intake today.