{"schema_version":"1.0","run":{"runId":2807,"schemaVersion":2,"startedAt":"2026-10-07T12:21:49.200613712+00:00","completedAt":"2026-10-07T12:22:11.973742907+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"c8cc72b642e936b274382c86f2f0e53a21b04efa","source_hash":"86c448c3be86908058996e5d23d57474e20cc2664312e7e9cbdfbe5867c2a4a6","cargo_lock_hash":"6cedf06116823f07ce57852aa90542f5675d1e12eb24d60ceae0662179415155","binary_hash":"732f49ef4e001231e11d8199e28e0814e16ec6dd9e593d028e8913c93a25fb14"},"policyHash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","targetSetHash":"ae236b1b5f4efe5e24dce501199f008cb5621a13d516a3d72791107788ccb3fb","summary":{"total":5,"verified":1,"partial":0,"failed":4,"unreachable":0},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false,"require_tsme":true}},"targets":[{"provider":"tinfoil","id":"tinfoil-router","label":"Router","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":null,"metadata":{"channel":"gateway","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"llama3-3-70b","metadata":{"model_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gemma4-31b","metadata":{"model_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-120b","metadata":{"model_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-safeguard-120b","metadata":{"model_repo":"tinfoilsh/confidential-gpt-oss-safeguard-120b","repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"c1b685ea64d484caf443f02bdf5c8c2adae1c8529e7e39939a20ecb7f9dfcb71","runDigest":"26e7dbaeb3b23bc7eddb543cb393d1184f60dbbed54df9ba984b7c62474975b9","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":31133,"check":{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","model":"gemma4-31b","status":"failed","ts":"2026-10-07T12:21:56.844722819+00:00","latency_ms":7916,"error":"Trust decision failed: TLS certificate binding to attested report_data is false; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gemma4-31b-inf6-3.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"none","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"corroborated","evidence":"Backend enclave disclosed per-request via the tinfoil-enclave header; its attestation is verified by the router (chained attestation)."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend predicates disclosed via tinfoil-pt."},"deployment_id":"gemma4-31b-inf6-3.tinfoil.containers.tinfoil.dev","upstream_model":"gemma4-31b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"e4e8b9e8b2257585c72aae4a642c887f43b097bc6bf377b5420a99e8c7b97971","parsed_evidence_digest":"65572035eb57b31ab253849c03bc25eaf06a940fd6b59ce5b33e5bf9c6a367f7","artifact_set_digest":"a98ddc1d72640f5b10a7896488e6ebe2349abf60e8e62d3c5fe7a155b251b6de"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:21:57.328816192+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:21:58 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:21:57.488279976+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:21:57.489367738+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:21:58.166154964+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T12:21:59.842108251+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:22:01 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T12:22:04.760098024+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"e9cbf88d724892cad5aa38c17280f49e2dd620164c6a4282495bfaa185f7ce32","size_bytes":668,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:22:11 GMT","http_method":"GET","http_status":"200"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:22:04.760401574+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"3e38cc6639d8023da4f82558d54c1c17b6f8ffb9483177a91adb5b36dd001db4","size_bytes":156,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gemma4","provider":"tinfoil","status":"failed"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gemma4-31b","metadata":{"model_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"cbe47106a603ec444f7b4d7a17169cc4f9be2826260b7613487e7820753a6c80","resultDigestValid":true,"artifacts":[{"sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:21:57.489367738+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:21:57.328816192+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:21:58 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T12:21:59.842108251+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:22:01 GMT","http_method":"GET","http_status":"200"}},{"sha256":"e9cbf88d724892cad5aa38c17280f49e2dd620164c6a4282495bfaa185f7ce32","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":668,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:22:04.760098024+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:22:11 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:21:57.488279976+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:21:58.166154964+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"3e38cc6639d8023da4f82558d54c1c17b6f8ffb9483177a91adb5b36dd001db4","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":156,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:22:04.760401574+00:00","metadata":{"check_id":"tinfoil-gemma4","provider":"tinfoil","status":"failed"}}]},{"rowId":31134,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","model":"gpt-oss-120b","status":"failed","ts":"2026-10-07T12:22:04.760915248+00:00","latency_ms":3561,"error":"Trust decision failed: TLS certificate binding to attested report_data is false; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gpt-oss-120b-inf12-2.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"none","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"corroborated","evidence":"Backend enclave disclosed per-request via the tinfoil-enclave header; its attestation is verified by the router (chained attestation)."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend predicates disclosed via tinfoil-pt."},"deployment_id":"gpt-oss-120b-inf12-2.tinfoil.containers.tinfoil.dev","upstream_model":"gpt-oss-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"a88bbf5f6abe8f5af6be5abb9b2f9acaddaa4a3c95d965a47a1d75ae1ae1e90b","parsed_evidence_digest":"9bd976cec9d9989c37182d498249b59b6a4fa1974a8bf49fda60183862564b3d","artifact_set_digest":"7eea5864a9e7e87786c2f1de9b6388f529b391324aabe0b216d02b6d51efe560"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:22:05.245647610+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:22:06 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:22:05.406290407+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:22:05.407307816+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:22:06.092620341+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T12:22:08.040117298+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:22:09 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T12:22:08.321499761+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"67877f25035921ed683dc8b3e853faedc66e23681ca54e0eed7d3c894cc8715d","size_bytes":629,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:22:24 GMT","http_method":"GET","http_status":"200"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:22:08.321791929+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"3e38cc6639d8023da4f82558d54c1c17b6f8ffb9483177a91adb5b36dd001db4","size_bytes":156,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gpt-oss-120b","provider":"tinfoil","status":"failed"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-120b","metadata":{"model_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"c873006628cc07f47dc32d5951c2a6edd053793029c69d17ebe2bb3dd49c75bf","resultDigestValid":true,"artifacts":[{"sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:22:05.407307816+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:22:05.245647610+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:22:06 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T12:22:08.040117298+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:22:09 GMT","http_method":"GET","http_status":"200"}},{"sha256":"67877f25035921ed683dc8b3e853faedc66e23681ca54e0eed7d3c894cc8715d","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":629,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:22:08.321499761+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:22:24 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:22:05.406290407+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:22:06.092620341+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"3e38cc6639d8023da4f82558d54c1c17b6f8ffb9483177a91adb5b36dd001db4","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":156,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:22:08.321791929+00:00","metadata":{"check_id":"tinfoil-gpt-oss-120b","provider":"tinfoil","status":"failed"}}]},{"rowId":31135,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","model":"gpt-oss-safeguard-120b","status":"failed","ts":"2026-10-07T12:22:08.322355136+00:00","latency_ms":3651,"error":"Trust decision failed: TLS certificate binding to attested report_data is false; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gpt-oss-safeguard-120b-inf12.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"none","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"corroborated","evidence":"Backend enclave disclosed per-request via the tinfoil-enclave header; its attestation is verified by the router (chained attestation)."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend predicates disclosed via tinfoil-pt."},"deployment_id":"gpt-oss-safeguard-120b-inf12.tinfoil.containers.tinfoil.dev","upstream_model":"gpt-oss-safeguard-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"b96caccc0b545d9d44138a007cfe4eb6333922658b28a7f26d98308d36d6f3b9","parsed_evidence_digest":"1815954036c22ccf27bbed0909df832fb7337cd3accc4373257be75722a259d6","artifact_set_digest":"7b844ec9ccf7db90897b16447d4e0d2b64f15804e55e001c83754fab84d1116e"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:22:08.806711573+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:22:10 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:22:08.966454701+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:22:08.967487479+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:22:09.702772741+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T12:22:11.699914139+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:22:12 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T12:22:11.972864228+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"195a86ebdc37012b3356b158c617cc583c70e2928284fce33b415ed0d19810c7","size_bytes":639,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:22:27 GMT","http_method":"GET","http_status":"200"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:22:11.973203344+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"3e38cc6639d8023da4f82558d54c1c17b6f8ffb9483177a91adb5b36dd001db4","size_bytes":156,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gpt-oss-safeguard","provider":"tinfoil","status":"failed"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-safeguard-120b","metadata":{"model_repo":"tinfoilsh/confidential-gpt-oss-safeguard-120b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"919bf90e4e0e1c2a51183b1af9a9227ab092aff0771127481fd3739a696fe894","resultDigestValid":true,"artifacts":[{"sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:22:08.967487479+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:22:08.806711573+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:22:10 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T12:22:11.699914139+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:22:12 GMT","http_method":"GET","http_status":"200"}},{"sha256":"195a86ebdc37012b3356b158c617cc583c70e2928284fce33b415ed0d19810c7","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":639,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:22:11.972864228+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:22:27 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:22:08.966454701+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:22:09.702772741+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"3e38cc6639d8023da4f82558d54c1c17b6f8ffb9483177a91adb5b36dd001db4","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":156,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:22:11.973203344+00:00","metadata":{"check_id":"tinfoil-gpt-oss-safeguard","provider":"tinfoil","status":"failed"}}]},{"rowId":31132,"check":{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","model":"llama3-3-70b","status":"failed","ts":"2026-10-07T12:21:53.478183966+00:00","latency_ms":3366,"error":"Trust decision failed: TLS certificate binding to attested report_data is false; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"llama3-3-70b-inf12.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"none","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"corroborated","evidence":"Backend enclave disclosed per-request via the tinfoil-enclave header; its attestation is verified by the router (chained attestation)."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend predicates disclosed via tinfoil-pt."},"deployment_id":"llama3-3-70b-inf12.tinfoil.containers.tinfoil.dev","upstream_model":"llama3-3-70b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"8571f29cc78878f75b68623ae7f75049b9e76c37c727c7878ec004e04e69a8e7","parsed_evidence_digest":"f1f961ef760e070998789ea041f0a27fae9ee692ef1639aaf91e2dc0db03fe21","artifact_set_digest":"980509e45c1d24b3ff89a8a464db7f3d4b05c6510ed82ae93866264d459b683b"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:21:53.961714783+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:21:55 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:21:54.121805254+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:21:54.122897163+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:21:54.853544411+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T12:21:56.522841477+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:21:57 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T12:21:56.843909583+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"b767d8a4f9a43157ad33a58d0e88f69f992811ddfe75521a499b66d15d38615b","size_bytes":631,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:22:12 GMT","http_method":"GET","http_status":"200"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:21:56.844221648+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"3e38cc6639d8023da4f82558d54c1c17b6f8ffb9483177a91adb5b36dd001db4","size_bytes":156,"encoding":"utf-8","metadata":{"check_id":"tinfoil-llama","provider":"tinfoil","status":"failed"}}]},"target":{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"llama3-3-70b","metadata":{"model_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"9d699098e322626f5fff59b639eb2c6c1fb7eec45580ec9ee21def3fb6424115","resultDigestValid":true,"artifacts":[{"sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:21:54.122897163+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:21:53.961714783+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:21:55 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T12:21:56.522841477+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:21:57 GMT","http_method":"GET","http_status":"200"}},{"sha256":"b767d8a4f9a43157ad33a58d0e88f69f992811ddfe75521a499b66d15d38615b","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":631,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:21:56.843909583+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:22:12 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:21:54.121805254+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:21:54.853544411+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"3e38cc6639d8023da4f82558d54c1c17b6f8ffb9483177a91adb5b36dd001db4","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":156,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:21:56.844221648+00:00","metadata":{"check_id":"tinfoil-llama","provider":"tinfoil","status":"failed"}}]},{"rowId":31131,"check":{"provider":"tinfoil","id":"tinfoil-router","label":"Router","status":"verified","ts":"2026-10-07T12:21:49.200796805+00:00","latency_ms":4277,"snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","trust_tier":"tee-only","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave endpoint (inference.tinfoil.sh)."},"workload_operator":{"organization":"tinfoil","confidence":"verified","evidence":"Backend enclave verification is delegated to the router chain."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-applicable","detail":"This gateway target does not claim a quote-bound client channel."},"channel":{"state":"not-applicable","detail":"Gateway TLS termination is expected for this target."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"not-applicable","detail":"This target is the gateway workload, not a storefront-to-model route."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"3f27670b0e8619a36538c9ee5e2fe769e1cd901e567ad0c00d9cb906fd9a5242","parsed_evidence_digest":"0495b7188b45487153d7bb1da342d5462cde05ba4a2ae0a3f8c03d4252d71f39","artifact_set_digest":"9621b31829c4c9add9594985ccdd2fb44ae98c5099620ce2b1137f197e437cf4"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:21:49.683548291+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:21:50 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:21:49.843457761+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:21:50.425224245+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:21:51.325599068+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-07T12:21:51.609689262+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"46e6a48b567fff71d36f08e20e7f1f44c7cb5aba491b2798fffa236e7a5a1d6c","size_bytes":6007,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:21:51 GMT","etag":"W/\"a23bb94500e3ede6a8c71cca765220d270c9c6ebd975c1fb01b425f408b89813\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-07T12:21:52.064569294+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sha256":"6d48c5924f1363e9a7b763ad6df431534ad52f34185a3353fb5d75eae9994e0f","size_bytes":21976,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:21:51 GMT","etag":"W/\"6089b6553f11fc97be97395cfd6073ff1e2ad5a5901fa84107904c3d435bc6d9\"","http_method":"GET","http_status":"200"}}]},"target":{"provider":"tinfoil","id":"tinfoil-router","label":"Router","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":null,"metadata":{"channel":"gateway","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"a24474563b7922e92049c72e59139208a7f597a691b5b01dfb6d8739dca84396","resultDigestValid":true,"artifacts":[{"sha256":"10b9f248e29b528e352e7b51fc55eb783b8265352a7322121de978dbe6bcd9c2","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:21:50.425224245+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:21:49.683548291+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:21:50 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:21:49.843457761+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"46e6a48b567fff71d36f08e20e7f1f44c7cb5aba491b2798fffa236e7a5a1d6c","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6007,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-10-07T12:21:51.609689262+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:21:51 GMT","etag":"W/\"a23bb94500e3ede6a8c71cca765220d270c9c6ebd975c1fb01b425f408b89813\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"sha256":"6d48c5924f1363e9a7b763ad6df431534ad52f34185a3353fb5d75eae9994e0f","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":21976,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","collected_at":"2026-10-07T12:21:52.064569294+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:21:51 GMT","etag":"W/\"6089b6553f11fc97be97395cfd6073ff1e2ad5a5901fa84107904c3d435bc6d9\"","http_method":"GET","http_status":"200"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:21:51.325599068+00:00","metadata":{"host":"inference.tinfoil.sh"}}]}]}}