{"schema_version":"1.0","run":{"runId":1223,"schemaVersion":2,"startedAt":"2026-08-02T16:00:16.415302700+00:00","completedAt":"2026-08-02T16:00:32.081417008+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"9c2a052f8254e431700926c2bdc5a4d5fe851407","source_hash":"51ab5a82963d196d6b4c5ed9b3380d712ad87dbd417764aede22f9934125fd8f","cargo_lock_hash":"916728b60957f15171dc5c31be7fe3bf8cdb0c7b5eca32b8286cd50316d94479","binary_hash":"fba9438dff3db9fbdb52af7c32d6c92d60acdc3dbff024623bd497ebebe31211"},"policyHash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","targetSetHash":"f4a88d382faa1612ef21b9e937426b79cee4baf6ff768f2074ac3239424f4946","summary":{"total":6,"verified":0,"partial":1,"failed":0,"unreachable":5},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false}},"targets":[{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"backend_host":"gpt-oss-120b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"backend_host":"llama3-3-70b.tinfoil.containers.tinfoil.dev","backend_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-qwen3-vl","label":"Qwen3-VL 30B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/qwen3-vl-30b","metadata":{"backend_host":"qwen3-vl-30b.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-qwen3-vl-30b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-glm-5-2","label":"GLM 5.2 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-2","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"backend_host":"gemma4-31b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-kimi-k2-6","label":"Kimi K2.6 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k2-6","metadata":{"backend_host":"kimi-k2-6.inf13.tinfoil.sh","backend_repo":"tinfoilsh/confidential-kimi-k2-6-b200","repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"13e7c76545b2a18f7f06830fc5b2d24f2d58bde5c89d03bc22c6b7e808a7b79e","runDigest":"065ac5dd7b30419914806bb6d81b5d6df4fefd0ba7bbba4a8986589f9cddd4ae","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":16737,"check":{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","model":"private/gemma4-31b","status":"unreachable","ts":"2026-08-02T16:00:25.470887229+00:00","latency_ms":4126,"error":"Network error: Tinfoil attestation request to gemma4-31b-1.inf10.tinfoil.sh: error sending request for url (https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"4bc79df7e73dc310c6faedd024d5ab7a421d11e9a24cb27c13ee0fe2f6c6d57a","parsed_evidence_digest":"36f36326fa90452f01476b3e2bacfc89892cb723129778f023d9121bacf0bb69","artifact_set_digest":"08d4d681da3a706458e7ba104d2b4b5060584d469465ba7168e26cb34b2d4ef9"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-02T16:00:26.259282723+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","size_bytes":18273,"encoding":"binary","metadata":{"date":"Sun, 02 Aug 2026 16:00:26 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-02T16:00:26.259907045+00:00","sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-02T16:00:26.261306251+00:00","sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-02T16:00:29.597495229+00:00","source_url":"https://api.ppq.ai/private","sha256":"f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4","size_bytes":178,"encoding":"utf-8","metadata":{"check_id":"ppq-gemma4","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"backend_host":"gemma4-31b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"3ac6cadc54c7a4b981927e8a70419adfe2dd61a00f8579ebc91a9225b41b7c51","resultDigestValid":true,"artifacts":[{"sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-02T16:00:26.261306251+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18273,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","collected_at":"2026-08-02T16:00:26.259282723+00:00","metadata":{"date":"Sun, 02 Aug 2026 16:00:26 GMT","http_method":"GET","http_status":"200"}},{"sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-02T16:00:26.259907045+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":178,"source_url":"https://api.ppq.ai/private","collected_at":"2026-08-02T16:00:29.597495229+00:00","metadata":{"check_id":"ppq-gemma4","provider":"ppq","status":"unreachable"}}]},{"rowId":16736,"check":{"provider":"ppq","id":"ppq-glm-5-2","label":"GLM 5.2 (TEE)","model":"private/glm-5-2","status":"partial","ts":"2026-08-02T16:00:23.699901082+00:00","latency_ms":1770,"error":"Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"fde355205d46f4f26affb7df553de53978cca16671331a3d647a136fd7b7a771daa8f6736214dbc47180a9c157640a8f3ce56c2acb01e5415ac3d896b90c633d","measurement":"c21e5c2a1be8c8da6cb0b7c717b0beea21493e446dc17876e4dc209e3da3bf19aa0bb5c494e6b52ad4ed70d277fcafae","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.135","release_digest":"173ed0cb9c2664c8412b4c8dc4f0b35d400cf88a8f4dc87e8c5eb04e7a4c3470","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:9a9fbdfa4279f832b0a3d732735fc922ff7520499da94fe87b8d9c5c5b28ff40"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:9a9fbdfa4279f832b0a3d732735fc922ff7520499da94fe87b8d9c5c5b28ff40"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","signing_public_key":"daa8f6736214dbc47180a9c157640a8f3ce56c2acb01e5415ac3d896b90c633d","signing_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"173d9586f5d428b1d4387fb6cdbda568fd2fb897a01c752f3ff34099d5582d94","parsed_evidence_digest":"5c452e34152a867737edb62b2080e9502088eec8d09c41efecf56c1abaa6b96e","artifact_set_digest":"11d7a7af1b66e025a81563890aa15d4986de8e373d7ecd19ca7c5010cbc00ead"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-02T16:00:24.484005665+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","size_bytes":18273,"encoding":"binary","metadata":{"date":"Sun, 02 Aug 2026 16:00:24 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-02T16:00:24.484500563+00:00","sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-02T16:00:24.485477336+00:00","sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-02T16:00:25.470447834+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","size_bytes":230,"encoding":"utf-8","metadata":{"check_id":"ppq-glm-5-2","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-glm-5-2","label":"GLM 5.2 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-2","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"e5e33011f383efb3aa243847749a88d0c180687665a0c2225fcfa497aef6da7e","resultDigestValid":true,"artifacts":[{"sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-02T16:00:24.485477336+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18273,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","collected_at":"2026-08-02T16:00:24.484005665+00:00","metadata":{"date":"Sun, 02 Aug 2026 16:00:24 GMT","http_method":"GET","http_status":"200"}},{"sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-02T16:00:24.484500563+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":230,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","collected_at":"2026-08-02T16:00:25.470447834+00:00","metadata":{"check_id":"ppq-glm-5-2","provider":"ppq","status":"partial"}}]},{"rowId":16733,"check":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","model":"private/gpt-oss-120b","status":"unreachable","ts":"2026-08-02T16:00:16.415426663+00:00","latency_ms":3294,"error":"Network error: Tinfoil attestation request to gpt-oss-120b-1.inf10.tinfoil.sh: error sending request for url (https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"d4eae8541256c6665eb682a665171cedbc8a8c506c94be8b72c2fd1702b0d04f","parsed_evidence_digest":"b3b1f0c2850936413873ac7cfedb2a6ef9cf3b5da8021b2447685ba7c09b817e","artifact_set_digest":"a169fe5484ff69aefd9b45f2ecae9d471645990ddb3660da0ab8236faf93ce36"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-02T16:00:17.453026007+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","size_bytes":18273,"encoding":"binary","metadata":{"date":"Sun, 02 Aug 2026 16:00:17 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-02T16:00:17.453633797+00:00","sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-02T16:00:17.454731297+00:00","sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-08-02T16:00:17.740446956+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"bdcd6ae07e1da7c8cdc9444c2441b24eceb02486fcffeaa9f332c1266121cde2","size_bytes":6017,"encoding":"binary","metadata":{"date":"Sun, 02 Aug 2026 16:00:17 GMT","etag":"W/\"055e8e37c5d253c90ab1ae0a0858f88833f25fb630cb44a1988a1a90083b2e91\"","http_method":"GET","http_status":"200","last_modified":"Wed, 29 Jul 2026 06:58:33 GMT"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-02T16:00:19.709467194+00:00","source_url":"https://api.ppq.ai/private","sha256":"7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6","size_bytes":182,"encoding":"utf-8","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"backend_host":"gpt-oss-120b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"877c05afdae4dd865311809f64856a6d75570e04244996da3c17b2a3c3758086","resultDigestValid":true,"artifacts":[{"sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-02T16:00:17.454731297+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18273,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","collected_at":"2026-08-02T16:00:17.453026007+00:00","metadata":{"date":"Sun, 02 Aug 2026 16:00:17 GMT","http_method":"GET","http_status":"200"}},{"sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-02T16:00:17.453633797+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bdcd6ae07e1da7c8cdc9444c2441b24eceb02486fcffeaa9f332c1266121cde2","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6017,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-08-02T16:00:17.740446956+00:00","metadata":{"date":"Sun, 02 Aug 2026 16:00:17 GMT","etag":"W/\"055e8e37c5d253c90ab1ae0a0858f88833f25fb630cb44a1988a1a90083b2e91\"","http_method":"GET","http_status":"200","last_modified":"Wed, 29 Jul 2026 06:58:33 GMT"}},{"sha256":"7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":182,"source_url":"https://api.ppq.ai/private","collected_at":"2026-08-02T16:00:19.709467194+00:00","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"unreachable"}}]},{"rowId":16738,"check":{"provider":"ppq","id":"ppq-kimi-k2-6","label":"Kimi K2.6 (TEE)","model":"private/kimi-k2-6","status":"unreachable","ts":"2026-08-02T16:00:29.597847270+00:00","latency_ms":2483,"error":"Network error: Tinfoil attestation request to kimi-k2-6.inf13.tinfoil.sh: error sending request for url (https://kimi-k2-6.inf13.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"897f17c5c0f5be4474bf11108c77519c85aab6a4a9ed87f1f846c6976763d230","parsed_evidence_digest":"c2f7937f9df975538ce01f68018fe0336e57c6e4fde4dfab68d69016a4fbce43","artifact_set_digest":"3baf52b82123a805701710fe572ec373b06fb80f6f27dfdf066f898c9ae45aa1"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-02T16:00:30.371110927+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k2-6","sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","size_bytes":18273,"encoding":"binary","metadata":{"date":"Sun, 02 Aug 2026 16:00:30 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-02T16:00:30.371700514+00:00","sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-02T16:00:30.372705119+00:00","sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-02T16:00:32.080896952+00:00","source_url":"https://api.ppq.ai/private","sha256":"56bf93b0ca2e26adbe1494a33b034fc67d752354c6e50eef01e9bcc4c6aa6cea","size_bytes":172,"encoding":"utf-8","metadata":{"check_id":"ppq-kimi-k2-6","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-kimi-k2-6","label":"Kimi K2.6 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k2-6","metadata":{"backend_host":"kimi-k2-6.inf13.tinfoil.sh","backend_repo":"tinfoilsh/confidential-kimi-k2-6-b200","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"ef39e8fdc6d7de35c5ec60fe960f2ecb484cc1c11a72a946792ff1df231fbe2b","resultDigestValid":true,"artifacts":[{"sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-02T16:00:30.372705119+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18273,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k2-6","collected_at":"2026-08-02T16:00:30.371110927+00:00","metadata":{"date":"Sun, 02 Aug 2026 16:00:30 GMT","http_method":"GET","http_status":"200"}},{"sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-02T16:00:30.371700514+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"56bf93b0ca2e26adbe1494a33b034fc67d752354c6e50eef01e9bcc4c6aa6cea","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":172,"source_url":"https://api.ppq.ai/private","collected_at":"2026-08-02T16:00:32.080896952+00:00","metadata":{"check_id":"ppq-kimi-k2-6","provider":"ppq","status":"unreachable"}}]},{"rowId":16734,"check":{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","model":"private/llama3-3-70b","status":"unreachable","ts":"2026-08-02T16:00:19.709871813+00:00","latency_ms":1859,"error":"Network error: Tinfoil attestation request to llama3-3-70b.tinfoil.containers.tinfoil.dev: error sending request for url (https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"33a7ffbd436564136c95f2f4d703c2e193db3f89829eefa548ed5b3184f8131f","parsed_evidence_digest":"65d0af1ff2826ae303551af74a1f0493e1473596c4684fc824de80cfdba41659","artifact_set_digest":"baf71ac56c1ec2cd65dbe41177fd83983522f82fe603e3a5da9d8ef65cfab609"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-02T16:00:20.476411221+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","size_bytes":18273,"encoding":"binary","metadata":{"date":"Sun, 02 Aug 2026 16:00:20 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-02T16:00:20.477058816+00:00","sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-02T16:00:20.477844351+00:00","sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-02T16:00:21.568927816+00:00","source_url":"https://api.ppq.ai/private","sha256":"4a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9","size_bytes":206,"encoding":"utf-8","metadata":{"check_id":"ppq-llama3-70b","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"backend_host":"llama3-3-70b.tinfoil.containers.tinfoil.dev","backend_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"f674decdd39072ed0dd4cd0780be122874c76aacb113bbfab6913e5a671d0b8c","resultDigestValid":true,"artifacts":[{"sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-02T16:00:20.477844351+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18273,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","collected_at":"2026-08-02T16:00:20.476411221+00:00","metadata":{"date":"Sun, 02 Aug 2026 16:00:20 GMT","http_method":"GET","http_status":"200"}},{"sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-02T16:00:20.477058816+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"4a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":206,"source_url":"https://api.ppq.ai/private","collected_at":"2026-08-02T16:00:21.568927816+00:00","metadata":{"check_id":"ppq-llama3-70b","provider":"ppq","status":"unreachable"}}]},{"rowId":16735,"check":{"provider":"ppq","id":"ppq-qwen3-vl","label":"Qwen3-VL 30B (TEE)","model":"private/qwen3-vl-30b","status":"unreachable","ts":"2026-08-02T16:00:21.569342253+00:00","latency_ms":2130,"error":"Network error: Tinfoil attestation request to qwen3-vl-30b.inf10.tinfoil.sh: error sending request for url (https://qwen3-vl-30b.inf10.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"a1fc72320cd732a446984f7d85ffbdccdd169d083b560c9be92ee48e74165e14","parsed_evidence_digest":"a2597e9845be832b73b10f96d9a44a5d3246ae345392a63e62e150570096ac56","artifact_set_digest":"4024ca14c26ed442702951c4a3724a31cf0816caa79f08888374c42b7e9c3fbc"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-02T16:00:22.343649028+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fqwen3-vl-30b","sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","size_bytes":18273,"encoding":"binary","metadata":{"date":"Sun, 02 Aug 2026 16:00:22 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-02T16:00:22.344140260+00:00","sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-02T16:00:22.345023798+00:00","sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-02T16:00:23.699495672+00:00","source_url":"https://api.ppq.ai/private","sha256":"44ee160627d45b8e8dc1cc3d6de191c93df60b998779c6a9c0698f08d051b6bd","size_bytes":178,"encoding":"utf-8","metadata":{"check_id":"ppq-qwen3-vl","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-qwen3-vl","label":"Qwen3-VL 30B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/qwen3-vl-30b","metadata":{"backend_host":"qwen3-vl-30b.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-qwen3-vl-30b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"0c96360e986bbd773b4800d8d436891f20fce342b682d1f2064652f2672f2f17","resultDigestValid":true,"artifacts":[{"sha256":"9d39b8c17fec59350b123f374d77a6a22e83d04db84a145b8ffb9e40b4ae95c5","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-02T16:00:22.345023798+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"970ab0ef931ecac28479501ee0766e5af071a236b3c22c010f23227e0378b82a","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18273,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fqwen3-vl-30b","collected_at":"2026-08-02T16:00:22.343649028+00:00","metadata":{"date":"Sun, 02 Aug 2026 16:00:22 GMT","http_method":"GET","http_status":"200"}},{"sha256":"8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-02T16:00:22.344140260+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"44ee160627d45b8e8dc1cc3d6de191c93df60b998779c6a9c0698f08d051b6bd","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":178,"source_url":"https://api.ppq.ai/private","collected_at":"2026-08-02T16:00:23.699495672+00:00","metadata":{"check_id":"ppq-qwen3-vl","provider":"ppq","status":"unreachable"}}]}]}}