{"schema_version":"1.0","run":{"runId":2808,"schemaVersion":2,"startedAt":"2026-10-07T12:43:58.306559906+00:00","completedAt":"2026-10-07T12:44:17.698181624+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"c8cc72b642e936b274382c86f2f0e53a21b04efa","source_hash":"952448262c2e5db06b0f33c2ec5a3db325f2b60d83e86764a20c015b6e73a118","cargo_lock_hash":"6cedf06116823f07ce57852aa90542f5675d1e12eb24d60ceae0662179415155","binary_hash":"df32388bfc5131d255e3b249354e48a920b77ed05e1ea18dc22de2d73833910d"},"policyHash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","targetSetHash":"ae236b1b5f4efe5e24dce501199f008cb5621a13d516a3d72791107788ccb3fb","summary":{"total":5,"verified":1,"partial":4,"failed":0,"unreachable":0},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false,"require_tsme":true}},"targets":[{"provider":"tinfoil","id":"tinfoil-router","label":"Router","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":null,"metadata":{"channel":"gateway","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"llama3-3-70b","metadata":{"model_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gemma4-31b","metadata":{"model_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-120b","metadata":{"model_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-safeguard-120b","metadata":{"model_repo":"tinfoilsh/confidential-gpt-oss-safeguard-120b","repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"26e7dbaeb3b23bc7eddb543cb393d1184f60dbbed54df9ba984b7c62474975b9","runDigest":"c2955e47c99e9f6f596b7eafc42f1a30a1acd2179972edbd6b550e1ccafcb966","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":31138,"check":{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","model":"gemma4-31b","status":"partial","ts":"2026-10-07T12:44:06.302857548+00:00","latency_ms":3642,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gemma4-31b-inf6-3.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"gemma4-31b-inf6-3.tinfoil.containers.tinfoil.dev","upstream_model":"gemma4-31b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"e4e8b9e8b2257585c72aae4a642c887f43b097bc6bf377b5420a99e8c7b97971","parsed_evidence_digest":"0a13ea02a49c41994355988ec49c4ae638b0044ba617010a74aedcbfa4a172ed","artifact_set_digest":"d5ee31bd04570cd2cf7c806647bc29d607d81424c99136b68f8a8ef0aaa2285f"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:44:06.782714514+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:08 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:44:06.941881402+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:44:06.943011042+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:44:07.634023661+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T12:44:09.596641179+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:10 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T12:44:09.944185728+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"c33ef4bb288e6340e785611113d27795a2f97a1edb1edf831a4b77fb73262ab8","size_bytes":668,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:21 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:44:09.944242194+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"d8410de77d12c2ed02cdca863e98591747ace1c5bf9843118cdfe164d1ccb252","size_bytes":182,"encoding":"binary","metadata":{"model":"gemma4-31b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:44:09.944534372+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gemma4","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gemma4-31b","metadata":{"model_repo":"tinfoilsh/confidential-gemma4-31b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"1f1602bf042fbb768c476bc8a9c001ad6fe2a198934d0fe42f75805f9dfb6314","resultDigestValid":true,"artifacts":[{"sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:44:06.943011042+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:44:06.782714514+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:08 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T12:44:09.596641179+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:10 GMT","http_method":"GET","http_status":"200"}},{"sha256":"c33ef4bb288e6340e785611113d27795a2f97a1edb1edf831a4b77fb73262ab8","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":668,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:44:09.944185728+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:21 GMT","http_method":"POST","http_status":"200"}},{"sha256":"d8410de77d12c2ed02cdca863e98591747ace1c5bf9843118cdfe164d1ccb252","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":182,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:44:09.944242194+00:00","metadata":{"model":"gemma4-31b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:44:06.941881402+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:44:07.634023661+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:44:09.944534372+00:00","metadata":{"check_id":"tinfoil-gemma4","provider":"tinfoil","status":"partial"}}]},{"rowId":31139,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","model":"gpt-oss-120b","status":"partial","ts":"2026-10-07T12:44:09.944919836+00:00","latency_ms":4021,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gpt-oss-120b-inf12-2.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"gpt-oss-120b-inf12-2.tinfoil.containers.tinfoil.dev","upstream_model":"gpt-oss-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"a88bbf5f6abe8f5af6be5abb9b2f9acaddaa4a3c95d965a47a1d75ae1ae1e90b","parsed_evidence_digest":"345fd74b397c776d36bd77313625e02a2ccefd42f82bb7a17755aa2c9ba54118","artifact_set_digest":"f01bf2270f41bfda3107716007df96c8573388cab1d6d873bd52a1ed42b34f54"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:44:10.427411967+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:11 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:44:10.587322641+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:44:10.588445067+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:44:11.334134955+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T12:44:13.691385041+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:14 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T12:44:13.965792752+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"ecce992dfb1750a6c07d8338294056e2fec1235b65d851e7e7a8d7badbecf326","size_bytes":629,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:29 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:44:13.965847696+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"a96fc82b8bf4ef29f882e72eea4ad882bd2f621b578140b39664d3338239512c","size_bytes":181,"encoding":"binary","metadata":{"model":"gpt-oss-120b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:44:13.966129354+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gpt-oss-120b","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-120b","metadata":{"model_repo":"tinfoilsh/confidential-gpt-oss-120b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"405c1eb4a7437de5fc66f00bc96f915a19bff3455613782760589365811f9605","resultDigestValid":true,"artifacts":[{"sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:44:10.588445067+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:44:10.427411967+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:11 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T12:44:13.691385041+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:14 GMT","http_method":"GET","http_status":"200"}},{"sha256":"ecce992dfb1750a6c07d8338294056e2fec1235b65d851e7e7a8d7badbecf326","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":629,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:44:13.965792752+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:29 GMT","http_method":"POST","http_status":"200"}},{"sha256":"a96fc82b8bf4ef29f882e72eea4ad882bd2f621b578140b39664d3338239512c","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":181,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:44:13.965847696+00:00","metadata":{"model":"gpt-oss-120b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:44:10.587322641+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:44:11.334134955+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:44:13.966129354+00:00","metadata":{"check_id":"tinfoil-gpt-oss-120b","provider":"tinfoil","status":"partial"}}]},{"rowId":31140,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","model":"gpt-oss-safeguard-120b","status":"partial","ts":"2026-10-07T12:44:13.966571834+00:00","latency_ms":3731,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gpt-oss-safeguard-120b-inf12.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"gpt-oss-safeguard-120b-inf12.tinfoil.containers.tinfoil.dev","upstream_model":"gpt-oss-safeguard-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"b96caccc0b545d9d44138a007cfe4eb6333922658b28a7f26d98308d36d6f3b9","parsed_evidence_digest":"2985082e3ee7e24b3750cf7042decc9c7a4137ffcefd3e568403a68cb2c4c0d8","artifact_set_digest":"3cd10121d3766bf7af492f3fb4f1adefb680bf5e0a7868e4e053902048f08f71"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:44:14.447619485+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:15 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:44:14.607420683+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:44:14.608637887+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:44:15.295883708+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T12:44:17.321052591+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:18 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T12:44:17.697296823+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"5fb5df12b1970858ab1eb9da1d01c6bdc7229417784aba2a0fc99116fa979fee","size_bytes":639,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:33 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:44:17.697353129+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"425aad1cc4888c1e00cc0f5e05f2472716d03de124d8f3fd00f87151089e9283","size_bytes":189,"encoding":"binary","metadata":{"model":"gpt-oss-safeguard-120b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:44:17.697614349+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gpt-oss-safeguard","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-safeguard-120b","metadata":{"model_repo":"tinfoilsh/confidential-gpt-oss-safeguard-120b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"d13451f37b43575b0f9d81b8e70a4a6d77c351a96676bf30260d400250131926","resultDigestValid":true,"artifacts":[{"sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:44:14.608637887+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:44:14.447619485+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:15 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T12:44:17.321052591+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:18 GMT","http_method":"GET","http_status":"200"}},{"sha256":"5fb5df12b1970858ab1eb9da1d01c6bdc7229417784aba2a0fc99116fa979fee","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":639,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:44:17.697296823+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:33 GMT","http_method":"POST","http_status":"200"}},{"sha256":"425aad1cc4888c1e00cc0f5e05f2472716d03de124d8f3fd00f87151089e9283","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":189,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:44:17.697353129+00:00","metadata":{"model":"gpt-oss-safeguard-120b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:44:14.607420683+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:44:15.295883708+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:44:17.697614349+00:00","metadata":{"check_id":"tinfoil-gpt-oss-safeguard","provider":"tinfoil","status":"partial"}}]},{"rowId":31137,"check":{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","model":"llama3-3-70b","status":"partial","ts":"2026-10-07T12:44:03.005517012+00:00","latency_ms":3297,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"llama3-3-70b-inf12.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"llama3-3-70b-inf12.tinfoil.containers.tinfoil.dev","upstream_model":"llama3-3-70b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"8571f29cc78878f75b68623ae7f75049b9e76c37c727c7878ec004e04e69a8e7","parsed_evidence_digest":"b29e85ccfbda43810fc0e94a12ac604254c9fe4086aff5174e728a8fbd1509f9","artifact_set_digest":"ef843524d3e39d3d12d6e0080f2f0a16ccfd16f970a1f8e764cf82f282e78ba2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:44:03.496070569+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:04 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:44:03.657264211+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:44:03.658272703+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:44:04.341633384+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T12:44:05.980263086+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:07 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T12:44:06.302147605+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"713c5feb4e56f82a042648d80dc6516933ced1d96bba9fb95e579b8f5b124f92","size_bytes":631,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:22 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:44:06.302205334+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"5bf9f0631a39131576c1162bacf94b938118e13d579af54b44ee8515e4735588","size_bytes":179,"encoding":"binary","metadata":{"model":"llama3-3-70b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T12:44:06.302444603+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-llama","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"llama3-3-70b","metadata":{"model_repo":"tinfoilsh/confidential-llama3-3-70b","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"2eb05a5f5f34c743c3843c7c2586535ef4e482053f8e39e2cf0045c8f5efbc34","resultDigestValid":true,"artifacts":[{"sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:44:03.658272703+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:44:03.496070569+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:04 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T12:44:05.980263086+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:07 GMT","http_method":"GET","http_status":"200"}},{"sha256":"713c5feb4e56f82a042648d80dc6516933ced1d96bba9fb95e579b8f5b124f92","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":631,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:44:06.302147605+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:22 GMT","http_method":"POST","http_status":"200"}},{"sha256":"5bf9f0631a39131576c1162bacf94b938118e13d579af54b44ee8515e4735588","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":179,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T12:44:06.302205334+00:00","metadata":{"model":"llama3-3-70b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:44:03.657264211+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:44:04.341633384+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:44:06.302444603+00:00","metadata":{"check_id":"tinfoil-llama","provider":"tinfoil","status":"partial"}}]},{"rowId":31136,"check":{"provider":"tinfoil","id":"tinfoil-router","label":"Router","status":"verified","ts":"2026-10-07T12:43:58.307364445+00:00","latency_ms":4698,"snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","trust_tier":"tee-only","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave endpoint (inference.tinfoil.sh)."},"workload_operator":{"organization":"tinfoil","confidence":"verified","evidence":"Backend enclave verification is delegated to the router chain."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-applicable","detail":"This gateway target does not claim a quote-bound client channel."},"channel":{"state":"not-applicable","detail":"Gateway TLS termination is expected for this target."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"not-applicable","detail":"This target is the gateway workload, not a storefront-to-model route."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"3f27670b0e8619a36538c9ee5e2fe769e1cd901e567ad0c00d9cb906fd9a5242","parsed_evidence_digest":"b7f969641f60db50949b1dd13e166f0fa7c901ed42cc97f31af55793d1bd66a5","artifact_set_digest":"0d3d12b0b61eaf28877cc231a862b6254790ba547268a795dd70f45f02142106"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T12:43:58.790501877+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:00 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T12:43:58.951282373+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:43:59.940769354+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T12:44:00.733198545+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-07T12:44:00.975360620+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"cb4d1f5d9bf5a7eee0a1ee3354c673540577655d8c2c6b5dc6899cc3c5b26b2e","size_bytes":6007,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:00 GMT","etag":"W/\"d942f586fa89f74be8a14a1d3cca2158f0417a85ed8a5a178b838b7dfa7e47c6\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-07T12:44:01.571892170+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sha256":"f36da71c36e6c71040dd66d39b712495b7752f0637ed30bff7313d336c177069","size_bytes":21970,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 12:44:01 GMT","etag":"W/\"3b3197eb646df4fd3c56d012aabb9d906450b62c79b6d51b17f8f438499f529f\"","http_method":"GET","http_status":"200"}}]},"target":{"provider":"tinfoil","id":"tinfoil-router","label":"Router","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":null,"metadata":{"channel":"gateway","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"9a0e15710f058d54b5da6d08858947f135ea74f762eb5a3da8579ef7252c829a","resultDigestValid":true,"artifacts":[{"sha256":"52a0da4023f9c015f7c894934fc1045316f1c261564cdf81fd3a0c7d83960c85","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T12:43:59.940769354+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T12:43:58.790501877+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:00 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T12:43:58.951282373+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"cb4d1f5d9bf5a7eee0a1ee3354c673540577655d8c2c6b5dc6899cc3c5b26b2e","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6007,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-10-07T12:44:00.975360620+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:00 GMT","etag":"W/\"d942f586fa89f74be8a14a1d3cca2158f0417a85ed8a5a178b838b7dfa7e47c6\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"sha256":"f36da71c36e6c71040dd66d39b712495b7752f0637ed30bff7313d336c177069","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":21970,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","collected_at":"2026-10-07T12:44:01.571892170+00:00","metadata":{"date":"Wed, 07 Oct 2026 12:44:01 GMT","etag":"W/\"3b3197eb646df4fd3c56d012aabb9d906450b62c79b6d51b17f8f438499f529f\"","http_method":"GET","http_status":"200"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T12:44:00.733198545+00:00","metadata":{"host":"inference.tinfoil.sh"}}]}]}}