{"schema_version":"1.0","run":{"runId":1835,"schemaVersion":2,"startedAt":"2026-08-28T04:00:20.491172640+00:00","completedAt":"2026-08-28T04:01:34.134029053+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"9c2a052f8254e431700926c2bdc5a4d5fe851407","source_hash":"51ab5a82963d196d6b4c5ed9b3380d712ad87dbd417764aede22f9934125fd8f","cargo_lock_hash":"916728b60957f15171dc5c31be7fe3bf8cdb0c7b5eca32b8286cd50316d94479","binary_hash":"fba9438dff3db9fbdb52af7c32d6c92d60acdc3dbff024623bd497ebebe31211"},"policyHash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","targetSetHash":"1aad2f0585b45930b29c5f16947a6d3886b41ff222615ab37debdf1b520bd9b9","summary":{"total":6,"verified":0,"partial":3,"failed":0,"unreachable":3},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false}},"targets":[{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"backend_host":"gpt-oss-120b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"backend_host":"llama3-3-70b.tinfoil.containers.tinfoil.dev","backend_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-glm-5-2","label":"GLM 5.2 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-2","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"backend_host":"gemma4-31b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-deepseek-v4-flash","label":"Deepseek V4 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"db0532861fd2c0d3478aa445c5ae6faa528f00e54c596a10196337c1c271c81f","runDigest":"6b884eac47acb45e20dcd8ba4dddddb7c3b1d12131b250e410ce0b2f861ee9d3","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":22267,"check":{"provider":"ppq","id":"ppq-deepseek-v4-flash","label":"Deepseek V4 Flash (TEE)","model":"private/deepseek-v4-flash","status":"partial","ts":"2026-08-28T04:01:29.623292866+00:00","latency_ms":2653,"error":"Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"337f5b317aac6edb6e22b07380fc8dc1126e7450d1cb9eee85e30052b41407d50b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c","measurement":"6dd91ce3a9b812c7b22f4fb0bd53c025c0b4fb6f4469a97f966ad50a0bc71496fb2723ddabe96a6c79da746a64af129a","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.142","release_digest":"7299507cca23c4af0c289564778885d37d9c36dcf13eeb3fe74677b4639c5c91","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-flash","signing_public_key":"0b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c","signing_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"fd9cf9bd230acc0c24aba81778a15e6b183358294a7d834b2270dc85f9b992cc","parsed_evidence_digest":"bea15d8f067619133580514e71984855473b985417a175ae5b0affcfa0dd1048","artifact_set_digest":"e567c5b8461419bb58796e5ea260e0d385ae1a43788d99838c587565971ee876"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-28T04:01:30.835514245+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-flash","sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","size_bytes":18467,"encoding":"binary","metadata":{"date":"Fri, 28 Aug 2026 04:01:30 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-28T04:01:30.835927731+00:00","sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-28T04:01:30.836825275+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-28T04:01:32.276189119+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-flash","sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","size_bytes":230,"encoding":"utf-8","metadata":{"check_id":"ppq-deepseek-v4-flash","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-deepseek-v4-flash","label":"Deepseek V4 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"2afa3397fad667a9e0f7dc14c260632c143ea15bd7858e6372f40325e378f50f","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-28T04:01:30.836825275+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18467,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-flash","collected_at":"2026-08-28T04:01:30.835514245+00:00","metadata":{"date":"Fri, 28 Aug 2026 04:01:30 GMT","http_method":"GET","http_status":"200"}},{"sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-28T04:01:30.835927731+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":230,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-flash","collected_at":"2026-08-28T04:01:32.276189119+00:00","metadata":{"check_id":"ppq-deepseek-v4-flash","provider":"ppq","status":"partial"}}]},{"rowId":22266,"check":{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","model":"private/gemma4-31b","status":"unreachable","ts":"2026-08-28T04:00:57.426379042+00:00","latency_ms":32196,"error":"Network error: Tinfoil attestation request to gemma4-31b-1.inf10.tinfoil.sh: error sending request for url (https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"4bc79df7e73dc310c6faedd024d5ab7a421d11e9a24cb27c13ee0fe2f6c6d57a","parsed_evidence_digest":"36f36326fa90452f01476b3e2bacfc89892cb723129778f023d9121bacf0bb69","artifact_set_digest":"1c23014abddcc3e96510ce154656ce0530249d5a1698de80a74e618f757898c2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-28T04:00:58.267577341+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","size_bytes":18467,"encoding":"binary","metadata":{"date":"Fri, 28 Aug 2026 04:00:58 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-28T04:00:58.268079053+00:00","sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-28T04:00:58.269011473+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-28T04:01:29.622860665+00:00","source_url":"https://api.ppq.ai/private","sha256":"f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4","size_bytes":178,"encoding":"utf-8","metadata":{"check_id":"ppq-gemma4","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"backend_host":"gemma4-31b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"b100c73166b51285c848eefc321f1b0ab467185113f14ae3ff750a9f2c4b0b21","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-28T04:00:58.269011473+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18467,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","collected_at":"2026-08-28T04:00:58.267577341+00:00","metadata":{"date":"Fri, 28 Aug 2026 04:00:58 GMT","http_method":"GET","http_status":"200"}},{"sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-28T04:00:58.268079053+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":178,"source_url":"https://api.ppq.ai/private","collected_at":"2026-08-28T04:01:29.622860665+00:00","metadata":{"check_id":"ppq-gemma4","provider":"ppq","status":"unreachable"}}]},{"rowId":22265,"check":{"provider":"ppq","id":"ppq-glm-5-2","label":"GLM 5.2 (TEE)","model":"private/glm-5-2","status":"partial","ts":"2026-08-28T04:00:55.633460660+00:00","latency_ms":1792,"error":"Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"337f5b317aac6edb6e22b07380fc8dc1126e7450d1cb9eee85e30052b41407d50b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c","measurement":"6dd91ce3a9b812c7b22f4fb0bd53c025c0b4fb6f4469a97f966ad50a0bc71496fb2723ddabe96a6c79da746a64af129a","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.142","release_digest":"7299507cca23c4af0c289564778885d37d9c36dcf13eeb3fe74677b4639c5c91","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","signing_public_key":"0b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c","signing_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"173d9586f5d428b1d4387fb6cdbda568fd2fb897a01c752f3ff34099d5582d94","parsed_evidence_digest":"007e29f2f20413b9e10ada1c79b4d40998de3826b75526a55320831f55ce250b","artifact_set_digest":"e567c5b8461419bb58796e5ea260e0d385ae1a43788d99838c587565971ee876"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-28T04:00:56.401660560+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","size_bytes":18467,"encoding":"binary","metadata":{"date":"Fri, 28 Aug 2026 04:00:56 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-28T04:00:56.402061412+00:00","sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-28T04:00:56.402850784+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-28T04:00:57.425852134+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","size_bytes":230,"encoding":"utf-8","metadata":{"check_id":"ppq-glm-5-2","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-glm-5-2","label":"GLM 5.2 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-2","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"60f9edb541603a8e09feb18cb4ece2ba51095423aaff779e69800cda65ca2a30","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-28T04:00:56.402850784+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18467,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","collected_at":"2026-08-28T04:00:56.401660560+00:00","metadata":{"date":"Fri, 28 Aug 2026 04:00:56 GMT","http_method":"GET","http_status":"200"}},{"sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-28T04:00:56.402061412+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":230,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","collected_at":"2026-08-28T04:00:57.425852134+00:00","metadata":{"check_id":"ppq-glm-5-2","provider":"ppq","status":"partial"}}]},{"rowId":22263,"check":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","model":"private/gpt-oss-120b","status":"unreachable","ts":"2026-08-28T04:00:20.492430551+00:00","latency_ms":33145,"error":"Network error: Tinfoil attestation request to gpt-oss-120b-1.inf10.tinfoil.sh: error sending request for url (https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"d4eae8541256c6665eb682a665171cedbc8a8c506c94be8b72c2fd1702b0d04f","parsed_evidence_digest":"b3b1f0c2850936413873ac7cfedb2a6ef9cf3b5da8021b2447685ba7c09b817e","artifact_set_digest":"badaeafbf86fdbf267f11b2526995d92787baf9c27b0ef705e6ef793366bb554"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-28T04:00:21.318658266+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","size_bytes":18467,"encoding":"binary","metadata":{"date":"Fri, 28 Aug 2026 04:00:21 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-28T04:00:21.320827697+00:00","sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-28T04:00:21.323948594+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-08-28T04:00:21.628702885+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"3bde35873a0987ee06f2f4afa90fc1a626d288df671e214f0f1f4de34d46b397","size_bytes":6018,"encoding":"binary","metadata":{"date":"Fri, 28 Aug 2026 04:00:21 GMT","etag":"W/\"24a26da4fe03d9366bf5910cce244aaecaf5474bf1c513f2774b5e67f8f2f642\"","http_method":"GET","http_status":"200","last_modified":"Wed, 19 Aug 2026 03:54:38 GMT"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-28T04:00:53.637409960+00:00","source_url":"https://api.ppq.ai/private","sha256":"7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6","size_bytes":182,"encoding":"utf-8","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"backend_host":"gpt-oss-120b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"8133272cb70517a575599590c23ffc9fd499f7cca944a6d5159166ad2202f5de","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-28T04:00:21.323948594+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18467,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","collected_at":"2026-08-28T04:00:21.318658266+00:00","metadata":{"date":"Fri, 28 Aug 2026 04:00:21 GMT","http_method":"GET","http_status":"200"}},{"sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-28T04:00:21.320827697+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"3bde35873a0987ee06f2f4afa90fc1a626d288df671e214f0f1f4de34d46b397","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6018,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-08-28T04:00:21.628702885+00:00","metadata":{"date":"Fri, 28 Aug 2026 04:00:21 GMT","etag":"W/\"24a26da4fe03d9366bf5910cce244aaecaf5474bf1c513f2774b5e67f8f2f642\"","http_method":"GET","http_status":"200","last_modified":"Wed, 19 Aug 2026 03:54:38 GMT"}},{"sha256":"7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":182,"source_url":"https://api.ppq.ai/private","collected_at":"2026-08-28T04:00:53.637409960+00:00","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"unreachable"}}]},{"rowId":22268,"check":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","model":"private/kimi-k3","status":"partial","ts":"2026-08-28T04:01:32.276693966+00:00","latency_ms":1856,"error":"Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"337f5b317aac6edb6e22b07380fc8dc1126e7450d1cb9eee85e30052b41407d50b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c","measurement":"6dd91ce3a9b812c7b22f4fb0bd53c025c0b4fb6f4469a97f966ad50a0bc71496fb2723ddabe96a6c79da746a64af129a","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.142","release_digest":"7299507cca23c4af0c289564778885d37d9c36dcf13eeb3fe74677b4639c5c91","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","signing_public_key":"0b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c","signing_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"19045ba6d47c64a654a062b1b3ae1a419e335676e766c2c82cec365198cbce31","parsed_evidence_digest":"79c7b3b2e9597b53860eb054f3407935b2d85eb26b320154c26a9a8df980fcb9","artifact_set_digest":"e567c5b8461419bb58796e5ea260e0d385ae1a43788d99838c587565971ee876"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-28T04:01:33.110014732+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","size_bytes":18467,"encoding":"binary","metadata":{"date":"Fri, 28 Aug 2026 04:01:32 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-28T04:01:33.110804825+00:00","sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-28T04:01:33.112380171+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-28T04:01:34.133195749+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","size_bytes":230,"encoding":"utf-8","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"22e70b7700807cb8553a84febbcfb62587f326b4a8f6b943ea5095057fbef258","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-28T04:01:33.112380171+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18467,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-08-28T04:01:33.110014732+00:00","metadata":{"date":"Fri, 28 Aug 2026 04:01:32 GMT","http_method":"GET","http_status":"200"}},{"sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-28T04:01:33.110804825+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":230,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-08-28T04:01:34.133195749+00:00","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},{"rowId":22264,"check":{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","model":"private/llama3-3-70b","status":"unreachable","ts":"2026-08-28T04:00:53.638019774+00:00","latency_ms":1995,"error":"Network error: Tinfoil attestation request to llama3-3-70b.tinfoil.containers.tinfoil.dev: error sending request for url (https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"33a7ffbd436564136c95f2f4d703c2e193db3f89829eefa548ed5b3184f8131f","parsed_evidence_digest":"65d0af1ff2826ae303551af74a1f0493e1473596c4684fc824de80cfdba41659","artifact_set_digest":"b0ec6ebc2e4f5e76e4b69ba8eeebb9c12ab548a5adda43ca5ee3208fe638d985"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-08-28T04:00:54.476108738+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","size_bytes":18467,"encoding":"binary","metadata":{"date":"Fri, 28 Aug 2026 04:00:54 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-08-28T04:00:54.476548644+00:00","sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-08-28T04:00:54.477358694+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-08-28T04:00:55.633069055+00:00","source_url":"https://api.ppq.ai/private","sha256":"4a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9","size_bytes":206,"encoding":"utf-8","metadata":{"check_id":"ppq-llama3-70b","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"backend_host":"llama3-3-70b.tinfoil.containers.tinfoil.dev","backend_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"883cd61a5fb6910fbebea495804da4d5a1d074ad2cf5d916b44f0db144921f93","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-08-28T04:00:54.477358694+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"4889b3408a5a61a1e4c584cc18b0a7737ad718fa37460aeb232ff33bb81d7bdc","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":18467,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","collected_at":"2026-08-28T04:00:54.476108738+00:00","metadata":{"date":"Fri, 28 Aug 2026 04:00:54 GMT","http_method":"GET","http_status":"200"}},{"sha256":"77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-08-28T04:00:54.476548644+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"4a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":206,"source_url":"https://api.ppq.ai/private","collected_at":"2026-08-28T04:00:55.633069055+00:00","metadata":{"check_id":"ppq-llama3-70b","provider":"ppq","status":"unreachable"}}]}]}}