Return host profiles: the platform inputs a measurement is built from.

By default, only host classes that HAVE measurements. Each entry's tee_type says which platform it attests under. Find fingerprint in the fingerprints of that platform's measurements (GET /servers/tdx/measurements or /servers/snp/measurements), regenerate the measurement from the inputs here, and compare -- that makes every published measurement independently reproducible, and a quote holder can see which host class their own measurement corresponds to. A third party needs no flags and can never be handed an unverified claim.

include_pending=true also returns host classes awaiting generation. That is the measurement generator's queue: a profile becomes measured only once measurements are generated for it, and generation has to fetch it first. Each entry's measured flag says which set it is in.

Public and unauthenticated, so the generation side needs no database credentials. Every entry is host-class data: the machine-identifying fields are dropped at submission and never stored, and the submitter's miner_hotkey is a column this query never selects.