{"schema_version":"1.0","run":{"runId":2773,"schemaVersion":2,"startedAt":"2026-10-06T05:00:26.638899851+00:00","completedAt":"2026-10-06T05:01:39.977789546+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"d34c6bbb34721d09f1255415b64992098915a04b","source_hash":"867ff30b2a769c6313d946e6eed2c96c89cb6d7d669f4b4b3ba8f7456b2a4faa","cargo_lock_hash":"6cedf06116823f07ce57852aa90542f5675d1e12eb24d60ceae0662179415155","binary_hash":"7704e8eda9baac198e2fc2f75b9380d6f73142c2fa189e33f17387ca04a4fc07"},"policyHash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","targetSetHash":"beddcfae4d6cfbb327c66e4a44d2065352a5b4b854aaab6d56bb86170fa7b6a8","summary":{"total":7,"verified":0,"partial":4,"failed":0,"unreachable":3},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false,"require_tsme":true}},"targets":[{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"backend_host":"gpt-oss-120b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"backend_host":"llama3-3-70b.tinfoil.containers.tinfoil.dev","backend_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-glm-5-3","label":"GLM 5.3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"backend_host":"gemma4-31b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"Deepseek V4 1 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-1-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-glm-5-3-flash","label":"Glm 5 3 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"ce4c34d73d7257fcd525d4d84821a48384db3ec77273dcfddc41f59285df9a70","runDigest":"bedd33bbdf7516ce4ee473738d2a4615c7ccce5c8dd6374353574e9203c121f9","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":30833,"check":{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"Deepseek V4 1 Flash (TEE)","model":"private/deepseek-v4-1-flash","status":"partial","ts":"2026-10-06T05:01:36.171747358+00:00","latency_ms":1946,"error":"Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"50290897fff5218ae3bdece9c57e7f86f4e2754b129b83c4ab6df9b0f53ad769","parsed_evidence_digest":"6edb9ab59fe2d5533070190465b7a6703f26dfeed5576e923311ad73ad43067f","artifact_set_digest":"37f980a8307d0f65c1f2173272a2b15065df1bd0d86a5add7bc61dbc1fafd291"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-06T05:01:36.580620145+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Tue, 06 Oct 2026 05:01:36 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-06T05:01:36.581009225+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-06T05:01:36.581768059+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-06T05:01:38.118222938+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","size_bytes":230,"encoding":"utf-8","metadata":{"check_id":"ppq-deepseek-v4-1-flash","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"Deepseek V4 1 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-1-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"387a5c066f361cb0a250faa885de96f3b605391fb182569f7ce3196a3ee7d96a","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-06T05:01:36.581768059+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","collected_at":"2026-10-06T05:01:36.580620145+00:00","metadata":{"date":"Tue, 06 Oct 2026 05:01:36 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-06T05:01:36.581009225+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":230,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","collected_at":"2026-10-06T05:01:38.118222938+00:00","metadata":{"check_id":"ppq-deepseek-v4-1-flash","provider":"ppq","status":"partial"}}]},{"rowId":30831,"check":{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","model":"private/gemma4-31b","status":"unreachable","ts":"2026-10-06T05:01:02.400376686+00:00","latency_ms":32045,"error":"Network error: Tinfoil attestation request to gemma4-31b-1.inf10.tinfoil.sh: error sending request for url (https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"4bc79df7e73dc310c6faedd024d5ab7a421d11e9a24cb27c13ee0fe2f6c6d57a","parsed_evidence_digest":"12d636e48dd8bf1ebc3a6764032dfd628133fb1b6793847c0c80593a02695b6b","artifact_set_digest":"d18b223a05f50171e0b27e80f0d9b98d1e94588e0a0b3cfe4d03000cb618eff4"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-06T05:01:02.810284004+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Tue, 06 Oct 2026 05:01:02 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-06T05:01:02.810722948+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-06T05:01:02.811677670+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-06T05:01:34.445302499+00:00","source_url":"https://api.ppq.ai/private","sha256":"f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4","size_bytes":178,"encoding":"utf-8","metadata":{"check_id":"ppq-gemma4","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"backend_host":"gemma4-31b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"8c54fb7552a18b99b2ef75d3cced21cf55c493787c14352460997113fe19917e","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-06T05:01:02.811677670+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","collected_at":"2026-10-06T05:01:02.810284004+00:00","metadata":{"date":"Tue, 06 Oct 2026 05:01:02 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-06T05:01:02.810722948+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":178,"source_url":"https://api.ppq.ai/private","collected_at":"2026-10-06T05:01:34.445302499+00:00","metadata":{"check_id":"ppq-gemma4","provider":"ppq","status":"unreachable"}}]},{"rowId":30830,"check":{"provider":"ppq","id":"ppq-glm-5-3","label":"GLM 5.3 (TEE)","model":"private/glm-5-3","status":"partial","ts":"2026-10-06T05:01:00.760792879+00:00","latency_ms":1639,"error":"Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"b3168bca100f9259e792140998c3d67027921578960f0cb1f0197d6e7f05344a","parsed_evidence_digest":"6c9612201af7951be680f28eb60809cc684deb50d67c1370866a4cc09e168011","artifact_set_digest":"37f980a8307d0f65c1f2173272a2b15065df1bd0d86a5add7bc61dbc1fafd291"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-06T05:01:01.192572209+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Tue, 06 Oct 2026 05:01:00 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-06T05:01:01.193061277+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-06T05:01:01.194026568+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-06T05:01:02.399950216+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","size_bytes":230,"encoding":"utf-8","metadata":{"check_id":"ppq-glm-5-3","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-glm-5-3","label":"GLM 5.3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"bf2800af73b2b06857db1ad0cbc61489056101d34c5e4fc7a84409b25bcce5fe","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-06T05:01:01.194026568+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","collected_at":"2026-10-06T05:01:01.192572209+00:00","metadata":{"date":"Tue, 06 Oct 2026 05:01:00 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-06T05:01:01.193061277+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":230,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","collected_at":"2026-10-06T05:01:02.399950216+00:00","metadata":{"check_id":"ppq-glm-5-3","provider":"ppq","status":"partial"}}]},{"rowId":30834,"check":{"provider":"ppq","id":"ppq-glm-5-3-flash","label":"Glm 5 3 Flash (TEE)","model":"private/glm-5-3-flash","status":"partial","ts":"2026-10-06T05:01:38.118617398+00:00","latency_ms":1859,"error":"Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"3b825ea5aafc52150a5d331a83b2cc60eff66730911dcb4b79a342f10e95f8cd","parsed_evidence_digest":"fd18c88853b152ed71f91764846d70118aa79a17fa81f67e99eec2dcff677632","artifact_set_digest":"37f980a8307d0f65c1f2173272a2b15065df1bd0d86a5add7bc61dbc1fafd291"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-06T05:01:38.757382641+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Tue, 06 Oct 2026 05:01:38 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-06T05:01:38.757791278+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-06T05:01:38.758620955+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-06T05:01:39.977396439+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","size_bytes":230,"encoding":"utf-8","metadata":{"check_id":"ppq-glm-5-3-flash","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-glm-5-3-flash","label":"Glm 5 3 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"672f936fa3833523032d32491f8824c6a7c0f23606c59cf266f7b2389fb0cbb5","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-06T05:01:38.758620955+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","collected_at":"2026-10-06T05:01:38.757382641+00:00","metadata":{"date":"Tue, 06 Oct 2026 05:01:38 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-06T05:01:38.757791278+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":230,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","collected_at":"2026-10-06T05:01:39.977396439+00:00","metadata":{"check_id":"ppq-glm-5-3-flash","provider":"ppq","status":"partial"}}]},{"rowId":30828,"check":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","model":"private/gpt-oss-120b","status":"unreachable","ts":"2026-10-06T05:00:26.639048210+00:00","latency_ms":32403,"error":"Network error: Tinfoil attestation request to gpt-oss-120b-1.inf10.tinfoil.sh: error sending request for url (https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"d4eae8541256c6665eb682a665171cedbc8a8c506c94be8b72c2fd1702b0d04f","parsed_evidence_digest":"4aa990d31b4c8a67222119bab965a1db3a76e9e9521dd13ce2bd3365934a985d","artifact_set_digest":"c2f9577731999d9b3c93bec8902492844e0930ca98b7bdcc28a8e7419ce85152"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-06T05:00:27.071208755+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Tue, 06 Oct 2026 05:00:27 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-06T05:00:27.071673407+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-06T05:00:27.072472146+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-06T05:00:27.351918565+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"e405de05b3a6be0b440302c2952bbb6cc4d8fc0c3fed78af2928d2eeb7fec06e","size_bytes":6007,"encoding":"binary","metadata":{"date":"Tue, 06 Oct 2026 05:00:27 GMT","etag":"W/\"6f3f7c13ca126f985bdb851510f97a5e2f0462a0e6b7676716bdc4f4d498846c\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-06T05:00:59.041868592+00:00","source_url":"https://api.ppq.ai/private","sha256":"7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6","size_bytes":182,"encoding":"utf-8","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"backend_host":"gpt-oss-120b-1.inf10.tinfoil.sh","backend_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"904b867ba1fcd2718e654668e714b72eb86d23862df7b146bb8b539ae062b1e3","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-06T05:00:27.072472146+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","collected_at":"2026-10-06T05:00:27.071208755+00:00","metadata":{"date":"Tue, 06 Oct 2026 05:00:27 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-06T05:00:27.071673407+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"e405de05b3a6be0b440302c2952bbb6cc4d8fc0c3fed78af2928d2eeb7fec06e","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6007,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-10-06T05:00:27.351918565+00:00","metadata":{"date":"Tue, 06 Oct 2026 05:00:27 GMT","etag":"W/\"6f3f7c13ca126f985bdb851510f97a5e2f0462a0e6b7676716bdc4f4d498846c\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"sha256":"7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":182,"source_url":"https://api.ppq.ai/private","collected_at":"2026-10-06T05:00:59.041868592+00:00","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"unreachable"}}]},{"rowId":30832,"check":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","model":"private/kimi-k3","status":"partial","ts":"2026-10-06T05:01:34.445712077+00:00","latency_ms":1726,"error":"Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"19045ba6d47c64a654a062b1b3ae1a419e335676e766c2c82cec365198cbce31","parsed_evidence_digest":"f8d6a5e706af5be3c443dec15c593fbf99fccf0e7666e8d8a736c3ebe87e9122","artifact_set_digest":"37f980a8307d0f65c1f2173272a2b15065df1bd0d86a5add7bc61dbc1fafd291"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-06T05:01:34.900830844+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Tue, 06 Oct 2026 05:01:34 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-06T05:01:34.901237557+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-06T05:01:34.902057074+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-06T05:01:36.171380951+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","size_bytes":230,"encoding":"utf-8","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"7e9d3bb93093ec970d294227b11c3c62242cb279aec4c1eafa3c16367a80c7e3","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-06T05:01:34.902057074+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-10-06T05:01:34.900830844+00:00","metadata":{"date":"Tue, 06 Oct 2026 05:01:34 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-06T05:01:34.901237557+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":230,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-10-06T05:01:36.171380951+00:00","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},{"rowId":30829,"check":{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","model":"private/llama3-3-70b","status":"unreachable","ts":"2026-10-06T05:00:59.042240249+00:00","latency_ms":1718,"error":"Network error: Tinfoil attestation request to llama3-3-70b.tinfoil.containers.tinfoil.dev: error sending request for url (https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"33a7ffbd436564136c95f2f4d703c2e193db3f89829eefa548ed5b3184f8131f","parsed_evidence_digest":"92447dd20e2e1fd4066d1cf86b3ccb79263f98ae2cab5482976395e1a72f9cd5","artifact_set_digest":"6f96ea72326010ceb2d5d12c740d1d0b1f84d6c2896fc92e789f412ccadbbc35"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-06T05:00:59.478469850+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Tue, 06 Oct 2026 05:00:59 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-06T05:00:59.478883326+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-06T05:00:59.479692054+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-06T05:01:00.760492936+00:00","source_url":"https://api.ppq.ai/private","sha256":"4a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9","size_bytes":206,"encoding":"utf-8","metadata":{"check_id":"ppq-llama3-70b","provider":"ppq","status":"unreachable"}}]},"target":{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"backend_host":"llama3-3-70b.tinfoil.containers.tinfoil.dev","backend_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"8d2a0d06faf8635185207ff38fee7d25ad1e9c868c6ac57a6d23cb7cf9f2b37a","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-06T05:00:59.479692054+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","collected_at":"2026-10-06T05:00:59.478469850+00:00","metadata":{"date":"Tue, 06 Oct 2026 05:00:59 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-06T05:00:59.478883326+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"4a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":206,"source_url":"https://api.ppq.ai/private","collected_at":"2026-10-06T05:01:00.760492936+00:00","metadata":{"check_id":"ppq-llama3-70b","provider":"ppq","status":"unreachable"}}]}]}}