Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain