{"schema_version":"1.0","run":{"runId":2810,"schemaVersion":2,"startedAt":"2026-10-07T13:00:26.505248698+00:00","completedAt":"2026-10-07T13:01:14.302471314+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"c8cc72b642e936b274382c86f2f0e53a21b04efa","source_hash":"9c31dffbc45199b2813f2b5d3ae14082b7decc9fd30e088ba5fdb86419cd59e4","cargo_lock_hash":"6cedf06116823f07ce57852aa90542f5675d1e12eb24d60ceae0662179415155","binary_hash":"bfbd6c02858943d9a6acdfc80e0fa86f676d610db96b64fd0d5c43d61722082e"},"policyHash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","targetSetHash":"696bb2c005c8fadb0d6c8224a06018c7604423e9a4b72882d35d3b23c346aec9","summary":{"total":5,"verified":1,"partial":4,"failed":0,"unreachable":0},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false,"require_tsme":true}},"targets":[{"provider":"tinfoil","id":"tinfoil-router","label":"Router","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":null,"metadata":{"channel":"gateway","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-safeguard-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"a005fd427cf672a6c867658f0123012372c0c35053d5a6d9c3f3eaf173bcf458","runDigest":"dc33fce06a34c0a2c1c76c75cf478875e4fca6939fe9afe004e73beb107eb4f0","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":31150,"check":{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","model":"gemma4-31b","status":"partial","ts":"2026-10-07T13:00:34.367520372+00:00","latency_ms":33219,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Inference route probe failed: error sending request for url (https://inference.tinfoil.sh/v1/chat/completions); Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"upstream_model":"gemma4-31b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"55e077b2ccbdb9899dfa67f728a2ac9d37e9009791e3a3004a964f4ce4a01299","parsed_evidence_digest":"f770c7c21b36e2f205db0de234554d8beaee52c73616552ea25a3a5e2b129b05","artifact_set_digest":"fa504da6f523de0f4c996e454a40d622d48fb3bfb4b6de8b895e31d1542c52db"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:00:34.850890129+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:00:36 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:00:35.011214145+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:00:35.012196518+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:00:35.823519956+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T13:00:37.584746355+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:00:38 GMT","http_method":"GET","http_status":"200"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:01:07.586777658+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"689e7d2babb50bf5784239a26b2deb5334ddff77af4360d2121fd76f15fc87e0","size_bytes":333,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gemma4","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"97f203b5f8dfe322ff75e0e68e1316866c54e02e2f3825c79d3d6a844c6d8c6e","resultDigestValid":true,"artifacts":[{"sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:00:35.012196518+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:00:34.850890129+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:00:36 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T13:00:37.584746355+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:00:38 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:00:35.011214145+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:00:35.823519956+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"689e7d2babb50bf5784239a26b2deb5334ddff77af4360d2121fd76f15fc87e0","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":333,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:01:07.586777658+00:00","metadata":{"check_id":"tinfoil-gemma4","provider":"tinfoil","status":"partial"}}]},{"rowId":31151,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","model":"gpt-oss-120b","status":"partial","ts":"2026-10-07T13:01:07.587300069+00:00","latency_ms":3298,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gpt-oss-120b-inf12-2.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"gpt-oss-120b-inf12-2.tinfoil.containers.tinfoil.dev","upstream_model":"gpt-oss-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"aa76e79c1efaf2d0356e65839165a641d0e80296310691bbaf8a75c2c84a1a0e","parsed_evidence_digest":"bbd51494a2c87cffa6390fcb933ad751600c711bd8eafafb4ddad0d9da34ffac","artifact_set_digest":"e2d5306a8ee6a93210c2f23a22bf2aed5412e9318ea2434249f44a1795e2138a"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:01:08.068750865+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:01:09 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:01:08.228291371+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:01:08.229306976+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:01:08.926576380+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T13:01:10.600623464+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:01:11 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T13:01:10.885440292+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"3dd67e26a0fa3d00bbaa7a3ecec29885c9389224199909c07380077bac6bd02e","size_bytes":629,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:01:26 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:01:10.885493602+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"a96fc82b8bf4ef29f882e72eea4ad882bd2f621b578140b39664d3338239512c","size_bytes":181,"encoding":"binary","metadata":{"model":"gpt-oss-120b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:01:10.885741567+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gpt-oss-120b","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"a52105bed7c4d39f44d46214455a0b326107ab11690986d4cf54cdcb8ea4b7d8","resultDigestValid":true,"artifacts":[{"sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:01:08.229306976+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:01:08.068750865+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:01:09 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T13:01:10.600623464+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:01:11 GMT","http_method":"GET","http_status":"200"}},{"sha256":"3dd67e26a0fa3d00bbaa7a3ecec29885c9389224199909c07380077bac6bd02e","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":629,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:01:10.885440292+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:01:26 GMT","http_method":"POST","http_status":"200"}},{"sha256":"a96fc82b8bf4ef29f882e72eea4ad882bd2f621b578140b39664d3338239512c","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":181,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:01:10.885493602+00:00","metadata":{"model":"gpt-oss-120b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:01:08.228291371+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:01:08.926576380+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:01:10.885741567+00:00","metadata":{"check_id":"tinfoil-gpt-oss-120b","provider":"tinfoil","status":"partial"}}]},{"rowId":31152,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","model":"gpt-oss-safeguard-120b","status":"partial","ts":"2026-10-07T13:01:10.886169360+00:00","latency_ms":3416,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gpt-oss-safeguard-120b-inf12.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"gpt-oss-safeguard-120b-inf12.tinfoil.containers.tinfoil.dev","upstream_model":"gpt-oss-safeguard-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"f0d773e39ca84837fc09f0e633861773ff21281618e15716800ad479d3aae9e2","parsed_evidence_digest":"4bbd209d4e1c990dd7b24aeae6762396cc19a92e671af734fda750708ca734c7","artifact_set_digest":"44a7dea8738c4959ef823c790b59ac1c4fb0059f4d6165df513ed547c80626e7"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:01:11.369732890+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:01:12 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:01:11.530820569+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:01:11.532303462+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:01:12.221421660+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T13:01:13.922936616+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:01:15 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T13:01:14.301568640+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"6b6c3405887f171750268d8e302404cee2ac9163ce73df3eeb3aae86253fc4a4","size_bytes":639,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:01:29 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:01:14.301637439+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"425aad1cc4888c1e00cc0f5e05f2472716d03de124d8f3fd00f87151089e9283","size_bytes":189,"encoding":"binary","metadata":{"model":"gpt-oss-safeguard-120b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:01:14.301947672+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gpt-oss-safeguard","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-safeguard-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"566676544a66e15db2792882588d77ef22939f8b62cf5752b33582e9638dc291","resultDigestValid":true,"artifacts":[{"sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:01:11.532303462+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:01:11.369732890+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:01:12 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T13:01:13.922936616+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:01:15 GMT","http_method":"GET","http_status":"200"}},{"sha256":"6b6c3405887f171750268d8e302404cee2ac9163ce73df3eeb3aae86253fc4a4","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":639,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:01:14.301568640+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:01:29 GMT","http_method":"POST","http_status":"200"}},{"sha256":"425aad1cc4888c1e00cc0f5e05f2472716d03de124d8f3fd00f87151089e9283","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":189,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:01:14.301637439+00:00","metadata":{"model":"gpt-oss-safeguard-120b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:01:11.530820569+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:01:12.221421660+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:01:14.301947672+00:00","metadata":{"check_id":"tinfoil-gpt-oss-safeguard","provider":"tinfoil","status":"partial"}}]},{"rowId":31149,"check":{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","model":"llama3-3-70b","status":"partial","ts":"2026-10-07T13:00:31.038049609+00:00","latency_ms":3329,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"llama3-3-70b-inf12.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"llama3-3-70b-inf12.tinfoil.containers.tinfoil.dev","upstream_model":"llama3-3-70b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"5f742d4f7585a540967918e64ab2a363b47860fc7cd5ed2fd5b229213f089b0f","parsed_evidence_digest":"58df5a8617ae1e5178c6f07123503b1bcfe42c1b706c536e92db7c9f6a808d6a","artifact_set_digest":"ea44cc802e3dcaf99dcf4356e234c454706d07257be02570b0c992f8befc5e9f"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:00:31.520195530+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:00:32 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:00:31.679572880+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:00:31.681031998+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:00:32.371321154+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T13:00:34.080444836+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:00:35 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T13:00:34.366749135+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"ea6a2ab79c1525656cc45c72206e748ef5b5b8d8aad4b19867a0712c8b2c9bd0","size_bytes":631,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:00:50 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:00:34.366801503+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"5bf9f0631a39131576c1162bacf94b938118e13d579af54b44ee8515e4735588","size_bytes":179,"encoding":"binary","metadata":{"model":"llama3-3-70b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:00:34.367066079+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-llama","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"dd778f8a9278a574d61400492499f7558e995680f44d2479be541421ba55a694","resultDigestValid":true,"artifacts":[{"sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:00:31.681031998+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:00:31.520195530+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:00:32 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T13:00:34.080444836+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:00:35 GMT","http_method":"GET","http_status":"200"}},{"sha256":"ea6a2ab79c1525656cc45c72206e748ef5b5b8d8aad4b19867a0712c8b2c9bd0","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":631,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:00:34.366749135+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:00:50 GMT","http_method":"POST","http_status":"200"}},{"sha256":"5bf9f0631a39131576c1162bacf94b938118e13d579af54b44ee8515e4735588","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":179,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:00:34.366801503+00:00","metadata":{"model":"llama3-3-70b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:00:31.679572880+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:00:32.371321154+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:00:34.367066079+00:00","metadata":{"check_id":"tinfoil-llama","provider":"tinfoil","status":"partial"}}]},{"rowId":31148,"check":{"provider":"tinfoil","id":"tinfoil-router","label":"Router","status":"verified","ts":"2026-10-07T13:00:26.505360057+00:00","latency_ms":4532,"snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","trust_tier":"tee-only","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave endpoint (inference.tinfoil.sh)."},"workload_operator":{"organization":"tinfoil","confidence":"verified","evidence":"Backend enclave verification is delegated to the router chain."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-applicable","detail":"This gateway target does not claim a quote-bound client channel."},"channel":{"state":"not-applicable","detail":"Gateway TLS termination is expected for this target."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"not-applicable","detail":"This target is the gateway workload, not a storefront-to-model route."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"3f27670b0e8619a36538c9ee5e2fe769e1cd901e567ad0c00d9cb906fd9a5242","parsed_evidence_digest":"0f523eaf8328112a016bbaa3523153786910df02aaf01caeb1b0c76f1f3e1c03","artifact_set_digest":"6bff10e279814ff54cdc6523c85d290c2b9c89bc9b06e21357c58d276f4bd7d6"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:00:26.988268258+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:00:28 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:00:27.147553685+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:00:27.707460368+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:00:28.484812501+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-07T13:00:28.750337629+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"5080e41dca7afbeef58bc9ad6551e950609badbf4803fca8b627b9dd698bb144","size_bytes":6007,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:00:28 GMT","etag":"W/\"fe744f56ab956ac1e8189de6a4b43e82570b04b0f6b89ef6b30fb60e288e7a08\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-07T13:00:29.428680709+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sha256":"46357bc8cfa266438a1548f0fb1dd8be463a282dde3e012657a11d65e0783dcb","size_bytes":21972,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:00:29 GMT","etag":"W/\"38f4008dbf033de026532db94894ad105e91b3a26ea2996b20f7a78fb84ea5ef\"","http_method":"GET","http_status":"200"}}]},"target":{"provider":"tinfoil","id":"tinfoil-router","label":"Router","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":null,"metadata":{"channel":"gateway","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"c880cd94355b585ef2cdccd1bbcb6271ce774803a3becd77c7b7e2472328da78","resultDigestValid":true,"artifacts":[{"sha256":"d8f5caf6b859046f00a9f5cd4b995f246ae13b0bd81e58117588f719b6faf9c8","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:00:27.707460368+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:00:26.988268258+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:00:28 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:00:27.147553685+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"46357bc8cfa266438a1548f0fb1dd8be463a282dde3e012657a11d65e0783dcb","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":21972,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","collected_at":"2026-10-07T13:00:29.428680709+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:00:29 GMT","etag":"W/\"38f4008dbf033de026532db94894ad105e91b3a26ea2996b20f7a78fb84ea5ef\"","http_method":"GET","http_status":"200"}},{"sha256":"5080e41dca7afbeef58bc9ad6551e950609badbf4803fca8b627b9dd698bb144","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6007,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-10-07T13:00:28.750337629+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:00:28 GMT","etag":"W/\"fe744f56ab956ac1e8189de6a4b43e82570b04b0f6b89ef6b30fb60e288e7a08\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:00:28.484812501+00:00","metadata":{"host":"inference.tinfoil.sh"}}]}]}}