{"schema_version":"1.0","run":{"runId":2811,"schemaVersion":2,"startedAt":"2026-10-07T13:30:31.961618072+00:00","completedAt":"2026-10-07T13:30:50.307574262+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"c8cc72b642e936b274382c86f2f0e53a21b04efa","source_hash":"8a6751561ad8952105fa21f194e182c978d0a393f14173fefb07043130f354f8","cargo_lock_hash":"6cedf06116823f07ce57852aa90542f5675d1e12eb24d60ceae0662179415155","binary_hash":"29a7504292d1007a236b6c8761a3e9fc8d83a7f8cdbd1fad2a43c5096ded4764"},"policyHash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","targetSetHash":"696bb2c005c8fadb0d6c8224a06018c7604423e9a4b72882d35d3b23c346aec9","summary":{"total":5,"verified":1,"partial":3,"failed":0,"unreachable":1},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false,"require_tsme":true}},"targets":[{"provider":"tinfoil","id":"tinfoil-router","label":"Router","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":null,"metadata":{"channel":"gateway","repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-safeguard-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"dc33fce06a34c0a2c1c76c75cf478875e4fca6939fe9afe004e73beb107eb4f0","runDigest":"280dba18e394dc49dbcfeadaab3802800038abe36daa9548d1668093e27a56b3","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":31155,"check":{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","model":"gemma4-31b","status":"partial","ts":"2026-10-07T13:30:39.685665827+00:00","latency_ms":3757,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gemma4-31b-inf6-3.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"gemma4-31b-inf6-3.tinfoil.containers.tinfoil.dev","upstream_model":"gemma4-31b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"55e077b2ccbdb9899dfa67f728a2ac9d37e9009791e3a3004a964f4ce4a01299","parsed_evidence_digest":"c3065349c3108686d02edfee9ae0ab4a53c121d8a6936abd4c15a1ec657ae7b6","artifact_set_digest":"4805b16f6faba33cbaf2f82cde0815c307da208260d813611ea2a9d2784fa66b"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:30:40.167930118+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:41 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:30:40.327496098+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:40.328550276+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:41.035853269+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T13:30:43.040447892+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:44 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T13:30:43.441937047+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"21b62cfa611fcfc76a725d29c90b21efeead7b404f32012b90679fb42d1f4255","size_bytes":668,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:55 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:30:43.442000566+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"d8410de77d12c2ed02cdca863e98591747ace1c5bf9843118cdfe164d1ccb252","size_bytes":182,"encoding":"binary","metadata":{"model":"gemma4-31b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:30:43.442251226+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gemma4","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"7bf3544ade7312e576a17e0d10f4f7f97cb57c010c045905b7a410d5e2b09cf0","resultDigestValid":true,"artifacts":[{"sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:30:40.328550276+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:30:40.167930118+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:41 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T13:30:43.040447892+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:44 GMT","http_method":"GET","http_status":"200"}},{"sha256":"21b62cfa611fcfc76a725d29c90b21efeead7b404f32012b90679fb42d1f4255","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":668,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:30:43.441937047+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:55 GMT","http_method":"POST","http_status":"200"}},{"sha256":"d8410de77d12c2ed02cdca863e98591747ace1c5bf9843118cdfe164d1ccb252","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":182,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:30:43.442000566+00:00","metadata":{"model":"gemma4-31b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:30:40.327496098+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:30:41.035853269+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:30:43.442251226+00:00","metadata":{"check_id":"tinfoil-gemma4","provider":"tinfoil","status":"partial"}}]},{"rowId":31156,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","model":"gpt-oss-120b","status":"partial","ts":"2026-10-07T13:30:43.442711109+00:00","latency_ms":3637,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gpt-oss-120b-inf12-2.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"gpt-oss-120b-inf12-2.tinfoil.containers.tinfoil.dev","upstream_model":"gpt-oss-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"aa76e79c1efaf2d0356e65839165a641d0e80296310691bbaf8a75c2c84a1a0e","parsed_evidence_digest":"f7d794df51bef78828382938f7ff4af0364f16d03ef839f386d556b29bf159d4","artifact_set_digest":"3e8aa2a000fd3ed72157e64a3a0d8f3ccb0590ed04feddebab7d2d90a56d97bc"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:30:43.923745423+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:45 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:30:44.083233175+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:44.084277615+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:44.803189652+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T13:30:46.813244672+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:48 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T13:30:47.079880391+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"dbccd062f03abe8c954a77261711cd037133ec060dc5ceaa86ce606e23a805f2","size_bytes":629,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:31:03 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:30:47.079932729+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"a96fc82b8bf4ef29f882e72eea4ad882bd2f621b578140b39664d3338239512c","size_bytes":181,"encoding":"binary","metadata":{"model":"gpt-oss-120b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:30:47.080227212+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gpt-oss-120b","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"097df44cb6fbe867944c810c77c97c522b6abd4c016a8536f34b4f71d75e4e2c","resultDigestValid":true,"artifacts":[{"sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:30:44.084277615+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:30:43.923745423+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:45 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T13:30:46.813244672+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:48 GMT","http_method":"GET","http_status":"200"}},{"sha256":"dbccd062f03abe8c954a77261711cd037133ec060dc5ceaa86ce606e23a805f2","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":629,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:30:47.079880391+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:31:03 GMT","http_method":"POST","http_status":"200"}},{"sha256":"a96fc82b8bf4ef29f882e72eea4ad882bd2f621b578140b39664d3338239512c","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":181,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:30:47.079932729+00:00","metadata":{"model":"gpt-oss-120b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:30:44.083233175+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:30:44.803189652+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:30:47.080227212+00:00","metadata":{"check_id":"tinfoil-gpt-oss-120b","provider":"tinfoil","status":"partial"}}]},{"rowId":31157,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","model":"gpt-oss-safeguard-120b","status":"unreachable","ts":"2026-10-07T13:30:47.080662629+00:00","latency_ms":3226,"error":"Inference route probe for gpt-oss-safeguard-120b could not be observed: HTTP 429","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gpt-oss-safeguard-120b-inf12.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"none","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"gpt-oss-safeguard-120b-inf12.tinfoil.containers.tinfoil.dev","upstream_model":"gpt-oss-safeguard-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"f0d773e39ca84837fc09f0e633861773ff21281618e15716800ad479d3aae9e2","parsed_evidence_digest":"b0de7ab3861c6f8cb30c8607785e2d1ac71d07ffb1d4905e59ed26a9d559e658","artifact_set_digest":"1b23ec81c67e6e3e2c3ee42f041abacafae9994e3d36196bbf1df1d5b0446fd0"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:30:47.563182039+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:48 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:30:47.722814544+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:47.723777451+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:48.396394664+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T13:30:50.054629535+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:51 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T13:30:50.306782286+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abc","size_bytes":109,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:31:06 GMT","http_method":"POST","http_status":"429"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:30:50.306843250+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"425aad1cc4888c1e00cc0f5e05f2472716d03de124d8f3fd00f87151089e9283","size_bytes":189,"encoding":"binary","metadata":{"model":"gpt-oss-safeguard-120b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:30:50.307111463+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"23c8690ba534e5ce51379dbd98a6e40ecdaaf80947abc56e7e0e3fbd0a726662","size_bytes":80,"encoding":"utf-8","metadata":{"check_id":"tinfoil-gpt-oss-safeguard","provider":"tinfoil","status":"unreachable"}}]},"target":{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"gpt-oss-safeguard-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"130d329f4546cab83a4f7e83b829309c5d246c9c974c5c1a649c3242ba094637","resultDigestValid":true,"artifacts":[{"sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:30:47.723777451+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:30:47.563182039+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:48 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T13:30:50.054629535+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:51 GMT","http_method":"GET","http_status":"200"}},{"sha256":"253375e4f98182bc37782faeff2b48bff504448fb0cb7dc38f4e671b7bff2abc","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":109,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:30:50.306782286+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:31:06 GMT","http_method":"POST","http_status":"429"}},{"sha256":"425aad1cc4888c1e00cc0f5e05f2472716d03de124d8f3fd00f87151089e9283","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":189,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:30:50.306843250+00:00","metadata":{"model":"gpt-oss-safeguard-120b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:30:47.722814544+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:30:48.396394664+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"23c8690ba534e5ce51379dbd98a6e40ecdaaf80947abc56e7e0e3fbd0a726662","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":80,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:30:50.307111463+00:00","metadata":{"check_id":"tinfoil-gpt-oss-safeguard","provider":"tinfoil","status":"unreachable"}}]},{"rowId":31154,"check":{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","model":"llama3-3-70b","status":"partial","ts":"2026-10-07T13:30:36.359038485+00:00","latency_ms":3326,"error":"Evidence incomplete: TLS did not terminate at the enclave-bound certificate this run; payload confidentiality relies on the quote-bound EHBP key; Backend model enclave attestation is delegated to the verified router chain","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"llama3-3-70b-inf12.tinfoil.containers.tinfoil.dev","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave attestation verified at inference.tinfoil.sh."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Backend enclave host disclosed per-request via the tinfoil-enclave header; per Tinfoil's documented architecture the router attests backend enclaves (chained attestation) — not independently verified by this monitor."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Router quote verified; backend hop predicates disclosed via tinfoil-pt headers."},"deployment_id":"llama3-3-70b-inf12.tinfoil.containers.tinfoil.dev","upstream_model":"llama3-3-70b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"5f742d4f7585a540967918e64ab2a363b47860fc7cd5ed2fd5b229213f089b0f","parsed_evidence_digest":"8b971aff28c2c360163b682c2a7f85222a16a896ac993acb9b632197b75eb585","artifact_set_digest":"90d6d035a2e16e5e1f1d41b27c90e4714037a181680a8ae2197fa33a4845ec3b"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:30:36.845696381+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:38 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:30:37.006867703+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:37.008222315+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:37.674475236+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","collected_at":"2026-10-07T13:30:39.340304397+00:00","source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","size_bytes":41,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:40 GMT","http_method":"GET","http_status":"200"}},{"kind":"provider-inference-probe-response","media_type":"application/json","collected_at":"2026-10-07T13:30:39.684882146+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"7df19745ba9a8389af221a0ac3d62f84110d5447ad88d1df5824e8f582bebd0b","size_bytes":631,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:55 GMT","http_method":"POST","http_status":"200"}},{"kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:30:39.684935386+00:00","source_url":"https://inference.tinfoil.sh/v1/chat/completions","sha256":"5bf9f0631a39131576c1162bacf94b938118e13d579af54b44ee8515e4735588","size_bytes":179,"encoding":"binary","metadata":{"model":"llama3-3-70b"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T13:30:39.685227955+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","size_bytes":221,"encoding":"utf-8","metadata":{"check_id":"tinfoil-llama","provider":"tinfoil","status":"partial"}}]},"target":{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":"llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"975995f58f5c87fd20661ce337a12d9bfb976bec859aeaac74cbf475de2c172b","resultDigestValid":true,"artifacts":[{"sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:30:37.008222315+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:30:36.845696381+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:38 GMT","http_method":"GET","http_status":"200"}},{"sha256":"48e6a3fdfac49c73df74ff36307f0e25f480f4cbac5b058cf3d9d02e8ed24281","kind":"provider-ehbp-keys-response","media_type":"application/ohttp-keys","encoding":"binary","size_bytes":41,"source_url":"https://inference.tinfoil.sh/.well-known/hpke-keys","collected_at":"2026-10-07T13:30:39.340304397+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:40 GMT","http_method":"GET","http_status":"200"}},{"sha256":"7df19745ba9a8389af221a0ac3d62f84110d5447ad88d1df5824e8f582bebd0b","kind":"provider-inference-probe-response","media_type":"application/json","encoding":"binary","size_bytes":631,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:30:39.684882146+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:55 GMT","http_method":"POST","http_status":"200"}},{"sha256":"5bf9f0631a39131576c1162bacf94b938118e13d579af54b44ee8515e4735588","kind":"provider-inference-route-headers","media_type":"text/plain; charset=utf-8","encoding":"binary","size_bytes":179,"source_url":"https://inference.tinfoil.sh/v1/chat/completions","collected_at":"2026-10-07T13:30:39.684935386+00:00","metadata":{"model":"llama3-3-70b"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:30:37.006867703+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:30:37.674475236+00:00","metadata":{"host":"inference.tinfoil.sh"}},{"sha256":"300197c2a9d40d415960d45d32f33f3888b154a1cc4b800e48fd53f7c642919b","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":221,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:30:39.685227955+00:00","metadata":{"check_id":"tinfoil-llama","provider":"tinfoil","status":"partial"}}]},{"rowId":31153,"check":{"provider":"tinfoil","id":"tinfoil-router","label":"Router","status":"verified","ts":"2026-10-07T13:30:31.961733990+00:00","latency_ms":4397,"snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722"},"images_verified":true,"tls_fingerprint":"74b9ed58bcc8aaaca7686e18918c544ccc4b310267378a2da2f7fba7196e3d77","tls_matches":false,"version":"v0.0.155","sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","trust_tier":"tee-only","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil router enclave endpoint (inference.tinfoil.sh)."},"workload_operator":{"organization":"tinfoil","confidence":"verified","evidence":"Backend enclave verification is delegated to the router chain."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-applicable","detail":"This gateway target does not claim a quote-bound client channel."},"channel":{"state":"not-applicable","detail":"Gateway TLS termination is expected for this target."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"not-applicable","detail":"This target is the gateway workload, not a storefront-to-model route."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"3f27670b0e8619a36538c9ee5e2fe769e1cd901e567ad0c00d9cb906fd9a5242","parsed_evidence_digest":"201fee5fb9c1235542c14993f03ad616b9dd4dc0a8c917a61ec134f5c77e43e1","artifact_set_digest":"81b97ca8d59c00094f8e1b889fe8e52a45bad6bea62a9507008d6ce1c81f1283"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T13:30:32.450054937+00:00","source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","size_bytes":605,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:33 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T13:30:32.611824612+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:33.189293948+00:00","source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"kind":"tls-leaf-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T13:30:34.003703649+00:00","source_url":"https://inference.tinfoil.sh/","sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","size_bytes":895,"encoding":"binary","metadata":{"host":"inference.tinfoil.sh"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-07T13:30:34.247469682+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"e989765afc5ddbc69437853ef9084a03154c1a9dbe030b916a36b0fc08eb1c57","size_bytes":6007,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:34 GMT","etag":"W/\"5d0f58fd02191368e27bc9d1ba32ac1acabdec13c5088292d03b3f440008f993\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-07T13:30:34.915764604+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sha256":"d7f38f2f01bf60dfbc929a6d0d3f9098d2880df95af7ac41baf58ecaa8eda0fd","size_bytes":21972,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 13:30:34 GMT","etag":"W/\"6b4149c8531cde72af199b6a0523b7f838052cdfc7ab0559176a98de50efe723\"","http_method":"GET","http_status":"200"}}]},"target":{"provider":"tinfoil","id":"tinfoil-router","label":"Router","type":"tinfoil","url":"https://inference.tinfoil.sh/","host":"inference.tinfoil.sh","model":null,"metadata":{"channel":"gateway","repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"e79679b5546e1ac30d9be8582afe5037144672b7e40a644d068f4ab2f7cbc324","resultDigestValid":true,"artifacts":[{"sha256":"f6f172cb0c9f2c3c14fd59c59eee263dd788ad7dfc91f21bcee80ad76ef9b722","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"source_url":"https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84","collected_at":"2026-10-07T13:30:33.189293948+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"amd-kds"}},{"sha256":"a9b982b578a35c536944e8e89cbcd84d09c2d834f578d2fb2c64d836eebaddc3","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":605,"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","collected_at":"2026-10-07T13:30:32.450054937+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:33 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T13:30:32.611824612+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"d7f38f2f01bf60dfbc929a6d0d3f9098d2880df95af7ac41baf58ecaa8eda0fd","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":21972,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","collected_at":"2026-10-07T13:30:34.915764604+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:34 GMT","etag":"W/\"6b4149c8531cde72af199b6a0523b7f838052cdfc7ab0559176a98de50efe723\"","http_method":"GET","http_status":"200"}},{"sha256":"e989765afc5ddbc69437853ef9084a03154c1a9dbe030b916a36b0fc08eb1c57","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6007,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-10-07T13:30:34.247469682+00:00","metadata":{"date":"Wed, 07 Oct 2026 13:30:34 GMT","etag":"W/\"5d0f58fd02191368e27bc9d1ba32ac1acabdec13c5088292d03b3f440008f993\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"sha256":"35175a25ef289f1e64c4c37137ef64664487c308eef7d6a13c3381df8be52f03","kind":"tls-leaf-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":895,"source_url":"https://inference.tinfoil.sh/","collected_at":"2026-10-07T13:30:34.003703649+00:00","metadata":{"host":"inference.tinfoil.sh"}}]}],"providerAttempts":[]}}