Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified