{"schema_version":"1.0","run":{"runId":2814,"schemaVersion":2,"startedAt":"2026-10-07T14:01:37.759708605+00:00","completedAt":"2026-10-07T14:01:50.921170924+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"a85de8d62cec9be33b25660659d1892ead3b23a7","source_hash":"ff79b6e434e45a8cfac43f9b0841448169f038258b10f45c70fe56362bdbf35d","cargo_lock_hash":"6cedf06116823f07ce57852aa90542f5675d1e12eb24d60ceae0662179415155","binary_hash":"61a4786a363c9cdffea139cac8c4e1d5d742b9c98342b0769746f458b0ce281f"},"policyHash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","targetSetHash":"25a41841df48531d42d22d8de5ba29cf626d9049d93e607bd3d8d21669466650","summary":{"total":7,"verified":0,"partial":7,"failed":0,"unreachable":0},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false,"require_tsme":true}},"targets":[{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"Deepseek V4 1 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-1-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-gemma4-31b","label":"Gemma4 31b (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-glm-5-3","label":"Glm 5 3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-glm-5-3-flash","label":"Glm 5 3 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"Gpt Oss 120b (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-llama3-3-70b","label":"Llama3 3 70b (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"44f5e907ce363270538e1179ea1933d09a20bf05f87c7901335b88947700f3dc","runDigest":"741bd9756d7a72ce34ccca5a549231fc127fad86fa255d6e72e1a9dc4aa7ee76","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":31168,"check":{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"Deepseek V4 1 Flash (TEE)","model":"private/deepseek-v4-1-flash","status":"partial","ts":"2026-10-07T14:01:37.759852325+00:00","latency_ms":2316,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"50290897fff5218ae3bdece9c57e7f86f4e2754b129b83c4ab6df9b0f53ad769","parsed_evidence_digest":"89c2abce46f73f956836bd0e1360b21cc6f85fa25cfc9825232eeec986b1bc90","artifact_set_digest":"eafe721a6b46db7f298dd181a3937b20882ed661840d892e5ddd6a7f8b601717"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T14:01:38.170367553+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 14:01:38 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T14:01:38.170944576+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T14:01:38.171777690+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-07T14:01:38.478692427+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"18dc495cbb3f266bd7059db6c02e5453db457d0b744e5b2ecbe97ea65deae3fd","size_bytes":6007,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 14:01:38 GMT","etag":"W/\"0f823b5db7dc9730e6e6f7337a95fe977ea7133ecde114979e9ee00d9a13d65b\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T14:01:40.075530417+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-deepseek-v4-1-flash","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"Deepseek V4 1 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-1-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"abc19575336a42f7b34377edebbbb5aaab5b9518663d4cb736c60f698cb20cc2","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-07T14:01:38.171777690+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","collected_at":"2026-10-07T14:01:38.170367553+00:00","metadata":{"date":"Wed, 07 Oct 2026 14:01:38 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T14:01:38.170944576+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"18dc495cbb3f266bd7059db6c02e5453db457d0b744e5b2ecbe97ea65deae3fd","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6007,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-10-07T14:01:38.478692427+00:00","metadata":{"date":"Wed, 07 Oct 2026 14:01:38 GMT","etag":"W/\"0f823b5db7dc9730e6e6f7337a95fe977ea7133ecde114979e9ee00d9a13d65b\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","collected_at":"2026-10-07T14:01:40.075530417+00:00","metadata":{"check_id":"ppq-deepseek-v4-1-flash","provider":"ppq","status":"partial"}}]},{"rowId":31169,"check":{"provider":"ppq","id":"ppq-gemma4-31b","label":"Gemma4 31b (TEE)","model":"private/gemma4-31b","status":"partial","ts":"2026-10-07T14:01:40.075940727+00:00","latency_ms":1667,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"319ce9b9eacdcf7a9cfdfad0a56c3e76168b926d7ab156a35ae2951304d50c52","parsed_evidence_digest":"aab70188a2ea73e45ad395d83534af1c798a7c84b6ad11efef7bae4c33e18ffe","artifact_set_digest":"29eb060daa359181d9404ebbc2dcf5d924630066525349c641be8b1023e0aee2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T14:01:40.510204491+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 14:01:40 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T14:01:40.510637142+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T14:01:40.511483701+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T14:01:41.743395122+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-gemma4-31b","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-gemma4-31b","label":"Gemma4 31b (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"eeafde14692137a978583ebc8c0f89f35d8f5e4e57b758f85a59244af5e11e88","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-07T14:01:40.511483701+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","collected_at":"2026-10-07T14:01:40.510204491+00:00","metadata":{"date":"Wed, 07 Oct 2026 14:01:40 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T14:01:40.510637142+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","collected_at":"2026-10-07T14:01:41.743395122+00:00","metadata":{"check_id":"ppq-gemma4-31b","provider":"ppq","status":"partial"}}]},{"rowId":31170,"check":{"provider":"ppq","id":"ppq-glm-5-3","label":"Glm 5 3 (TEE)","model":"private/glm-5-3","status":"partial","ts":"2026-10-07T14:01:41.743790434+00:00","latency_ms":1685,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"d5888c5d21c8f770f55d41c039b0195dd92a88a63d4f6ea6d6fed0d78396891f","parsed_evidence_digest":"5cb09c7cc9a10a0662b60496d071c3e73966c59bf8a4ef52eb99139e5dace4e7","artifact_set_digest":"29eb060daa359181d9404ebbc2dcf5d924630066525349c641be8b1023e0aee2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T14:01:42.153258988+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 14:01:42 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T14:01:42.153645463+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T14:01:42.154441006+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T14:01:43.428611508+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-glm-5-3","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-glm-5-3","label":"Glm 5 3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"58f2ea986b7d88a6845a2efbbbb6dcfc5b570b11963d770e5764f010b5537918","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-07T14:01:42.154441006+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","collected_at":"2026-10-07T14:01:42.153258988+00:00","metadata":{"date":"Wed, 07 Oct 2026 14:01:42 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T14:01:42.153645463+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","collected_at":"2026-10-07T14:01:43.428611508+00:00","metadata":{"check_id":"ppq-glm-5-3","provider":"ppq","status":"partial"}}]},{"rowId":31171,"check":{"provider":"ppq","id":"ppq-glm-5-3-flash","label":"Glm 5 3 Flash (TEE)","model":"private/glm-5-3-flash","status":"partial","ts":"2026-10-07T14:01:43.428972515+00:00","latency_ms":1767,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"3b825ea5aafc52150a5d331a83b2cc60eff66730911dcb4b79a342f10e95f8cd","parsed_evidence_digest":"0e617b82fee5ad149e67cc7862448fae031a642ef5864a76b79759e23a1bd41b","artifact_set_digest":"29eb060daa359181d9404ebbc2dcf5d924630066525349c641be8b1023e0aee2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T14:01:43.863482851+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 14:01:43 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T14:01:43.863950990+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T14:01:43.864920328+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T14:01:45.195946652+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-glm-5-3-flash","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-glm-5-3-flash","label":"Glm 5 3 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"1187d0baf52c2d456df128300def8b12bcb44054422bebade66093eab181fe95","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-07T14:01:43.864920328+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","collected_at":"2026-10-07T14:01:43.863482851+00:00","metadata":{"date":"Wed, 07 Oct 2026 14:01:43 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T14:01:43.863950990+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","collected_at":"2026-10-07T14:01:45.195946652+00:00","metadata":{"check_id":"ppq-glm-5-3-flash","provider":"ppq","status":"partial"}}]},{"rowId":31172,"check":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"Gpt Oss 120b (TEE)","model":"private/gpt-oss-120b","status":"partial","ts":"2026-10-07T14:01:45.196360659+00:00","latency_ms":2019,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"412fd3d0266425e4aae4430eba9ae28e60a6a6065b0e4808283eeecac9dfc7d3","parsed_evidence_digest":"03d16c55a55ea025a4e0982212bfe082564b665773d6ecb9e0d8dc534627cac4","artifact_set_digest":"29eb060daa359181d9404ebbc2dcf5d924630066525349c641be8b1023e0aee2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T14:01:45.666231992+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 14:01:45 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T14:01:45.666619889+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T14:01:45.667413950+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T14:01:47.215785871+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"Gpt Oss 120b (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"39e77f124239c5c76a38085531cbfea20628377781b3731dd8152513fcb9be13","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-07T14:01:45.667413950+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","collected_at":"2026-10-07T14:01:45.666231992+00:00","metadata":{"date":"Wed, 07 Oct 2026 14:01:45 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T14:01:45.666619889+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","collected_at":"2026-10-07T14:01:47.215785871+00:00","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"partial"}}]},{"rowId":31173,"check":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","model":"private/kimi-k3","status":"partial","ts":"2026-10-07T14:01:47.216167277+00:00","latency_ms":1679,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"19045ba6d47c64a654a062b1b3ae1a419e335676e766c2c82cec365198cbce31","parsed_evidence_digest":"42e17ab4d86e1402b998684c067e13c8bafab6e4987ae7f400f611f7ea0edb01","artifact_set_digest":"29eb060daa359181d9404ebbc2dcf5d924630066525349c641be8b1023e0aee2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T14:01:47.650841240+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 14:01:47 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T14:01:47.651332692+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T14:01:47.652190382+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T14:01:48.894840063+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"42a565d6370d75e09173863f95573434593bf11f1e92613b19fa97058ca9f0b5","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-07T14:01:47.652190382+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-10-07T14:01:47.650841240+00:00","metadata":{"date":"Wed, 07 Oct 2026 14:01:47 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T14:01:47.651332692+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-10-07T14:01:48.894840063+00:00","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},{"rowId":31174,"check":{"provider":"ppq","id":"ppq-llama3-3-70b","label":"Llama3 3 70b (TEE)","model":"private/llama3-3-70b","status":"partial","ts":"2026-10-07T14:01:48.895281161+00:00","latency_ms":2025,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","e2ee_public_key":"6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"6e9028e64f6f48327ba2523e94278d851375c7d51c0c5f4e18552f63acd979b7","parsed_evidence_digest":"048aa83f7a32a611937020ddcfc8d0eac6cb32e05b096c5b8d7be5eed89d67b5","artifact_set_digest":"29eb060daa359181d9404ebbc2dcf5d924630066525349c641be8b1023e0aee2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-07T14:01:49.344973016+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","size_bytes":26017,"encoding":"binary","metadata":{"date":"Wed, 07 Oct 2026 14:01:48 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-07T14:01:49.345388606+00:00","sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-07T14:01:49.346229494+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-07T14:01:50.920777956+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-llama3-3-70b","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-llama3-3-70b","label":"Llama3 3 70b (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"e60411706de1400232ed1ab6552b601aed38304f2273dbe6855b5759f1ce26c1","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-07T14:01:49.346229494+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26017,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","collected_at":"2026-10-07T14:01:49.344973016+00:00","metadata":{"date":"Wed, 07 Oct 2026 14:01:48 GMT","http_method":"GET","http_status":"200"}},{"sha256":"59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-07T14:01:49.345388606+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","collected_at":"2026-10-07T14:01:50.920777956+00:00","metadata":{"check_id":"ppq-llama3-3-70b","provider":"ppq","status":"partial"}}]}]}}