{"schema_version":"1.0","run":{"runId":2864,"schemaVersion":2,"startedAt":"2026-10-09T13:00:26.920222533+00:00","completedAt":"2026-10-09T13:00:43.315737193+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"8117a7c1db8b26f71f86dd353c81176e5e16b409","source_hash":"ac0a4839c1eaa05d837628c674395264954e70bd437399cc692e6796c1b6597d","cargo_lock_hash":"6cedf06116823f07ce57852aa90542f5675d1e12eb24d60ceae0662179415155","binary_hash":"6bb4195268d2b8690006fc7f0a5ed3047d01d0b975c400366c8229ce4e5056e9"},"policyHash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","targetSetHash":"89c47de84f62710db8957a436e7b8a7bcc811958de068c7e765d1f99412d3169","summary":{"total":7,"verified":0,"partial":7,"failed":0,"unreachable":0},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false,"require_tsme":true}},"targets":[{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"DeepSeek V4.1 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-1-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-gemma4-31b","label":"Gemma4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-glm-5-3","label":"GLM 5.3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-glm-5-3-flash","label":"GLM 5.3 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-llama3-3-70b","label":"Llama3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"61de4a3d69a8247402a4343c2c66efa4a7e2ff7f44048bdb9b976e71942f3581","runDigest":"36ee1c8a6a9249337259287b52aa62e8d109a83b37c2898999e72e7617209301","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":31631,"check":{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"DeepSeek V4.1 Flash (TEE)","model":"private/deepseek-v4-1-flash","status":"partial","ts":"2026-10-09T13:00:26.922241552+00:00","latency_ms":4820,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"c64e40e2949d9a8fb3f11e52f515c43a0f26e283baa3893593a5d158dcc90871b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","e2ee_public_key":"b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"39682b2a4cc37fadd6c5a6153fe99f722d1d0597073a7b6b0249678b2d09b32e","parsed_evidence_digest":"bacc415b2d8d147be6d558851489240c3ecf6428539a574cbc2e1181db6c3b69","artifact_set_digest":"550776baaed31379bbb52a06673f2666783956cf0fe912c76e9bd76ec2d55c17"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-09T13:00:27.341117145+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","size_bytes":26025,"encoding":"binary","metadata":{"date":"Fri, 09 Oct 2026 13:00:29 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-09T13:00:27.343939552+00:00","sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-09T13:00:27.346436928+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-09T13:00:27.665329633+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"20a6e9c4955b1e3b918dad52949f46dca4f3e96177381d4dfd0d9c2531c5a8c4","size_bytes":6007,"encoding":"binary","metadata":{"date":"Fri, 09 Oct 2026 13:00:27 GMT","etag":"W/\"d2cd58c9ce8bebaa467369f8322e69df6d703666b8126d60cdfb41792d3c9744\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-09T13:00:31.742025113+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-deepseek-v4-1-flash","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"DeepSeek V4.1 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-1-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"c6b9c21564fdca18d66e41ef24a00117fe4908326ccc59564229ae9fa93f2760","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-09T13:00:27.346436928+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26025,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","collected_at":"2026-10-09T13:00:27.341117145+00:00","metadata":{"date":"Fri, 09 Oct 2026 13:00:29 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-09T13:00:27.343939552+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"20a6e9c4955b1e3b918dad52949f46dca4f3e96177381d4dfd0d9c2531c5a8c4","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6007,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-10-09T13:00:27.665329633+00:00","metadata":{"date":"Fri, 09 Oct 2026 13:00:27 GMT","etag":"W/\"d2cd58c9ce8bebaa467369f8322e69df6d703666b8126d60cdfb41792d3c9744\"","http_method":"GET","http_status":"200","last_modified":"Fri, 25 Sep 2026 00:07:42 GMT"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","collected_at":"2026-10-09T13:00:31.742025113+00:00","metadata":{"check_id":"ppq-deepseek-v4-1-flash","provider":"ppq","status":"partial"}}]},{"rowId":31632,"check":{"provider":"ppq","id":"ppq-gemma4-31b","label":"Gemma4 31B (TEE)","model":"private/gemma4-31b","status":"partial","ts":"2026-10-09T13:00:31.742391921+00:00","latency_ms":1737,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"c64e40e2949d9a8fb3f11e52f515c43a0f26e283baa3893593a5d158dcc90871b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","e2ee_public_key":"b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"eb89d78037d4d50c521c37e43f867af2c517896fa577fbd7dfd5f2ce57cffc79","parsed_evidence_digest":"8d8db1750f961856af448052c5a33d866eb843e1c30b3599582287e3d7d6133f","artifact_set_digest":"4fa7de1277735c1584963ee3993bef159f6bd867f084b71994d9f9248ffe41b2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-09T13:00:32.151609892+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","size_bytes":26025,"encoding":"binary","metadata":{"date":"Fri, 09 Oct 2026 13:00:32 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-09T13:00:32.152021825+00:00","sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-09T13:00:32.152838257+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-09T13:00:33.479464832+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-gemma4-31b","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-gemma4-31b","label":"Gemma4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"35c4928321145eaec200d06ee2c9be7921a20757bc49687995e16d9f787275c2","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-09T13:00:32.152838257+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26025,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","collected_at":"2026-10-09T13:00:32.151609892+00:00","metadata":{"date":"Fri, 09 Oct 2026 13:00:32 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-09T13:00:32.152021825+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","collected_at":"2026-10-09T13:00:33.479464832+00:00","metadata":{"check_id":"ppq-gemma4-31b","provider":"ppq","status":"partial"}}]},{"rowId":31633,"check":{"provider":"ppq","id":"ppq-glm-5-3","label":"GLM 5.3 (TEE)","model":"private/glm-5-3","status":"partial","ts":"2026-10-09T13:00:33.479828675+00:00","latency_ms":2082,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"c64e40e2949d9a8fb3f11e52f515c43a0f26e283baa3893593a5d158dcc90871b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","e2ee_public_key":"b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"b3168bca100f9259e792140998c3d67027921578960f0cb1f0197d6e7f05344a","parsed_evidence_digest":"06f24060bd0050e67972fe532490d7c7069309d46fb1edc0266e6764914518c9","artifact_set_digest":"4fa7de1277735c1584963ee3993bef159f6bd867f084b71994d9f9248ffe41b2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-09T13:00:33.898850973+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","size_bytes":26025,"encoding":"binary","metadata":{"date":"Fri, 09 Oct 2026 13:00:34 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-09T13:00:33.899305847+00:00","sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-09T13:00:33.900162164+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-09T13:00:35.561795091+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-glm-5-3","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-glm-5-3","label":"GLM 5.3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"b22d3b48377cdf551324afd50b4f1aa68b92426d44b21a470e7708062ad7f9a0","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-09T13:00:33.900162164+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26025,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","collected_at":"2026-10-09T13:00:33.898850973+00:00","metadata":{"date":"Fri, 09 Oct 2026 13:00:34 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-09T13:00:33.899305847+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","collected_at":"2026-10-09T13:00:35.561795091+00:00","metadata":{"check_id":"ppq-glm-5-3","provider":"ppq","status":"partial"}}]},{"rowId":31634,"check":{"provider":"ppq","id":"ppq-glm-5-3-flash","label":"GLM 5.3 Flash (TEE)","model":"private/glm-5-3-flash","status":"partial","ts":"2026-10-09T13:00:35.562122375+00:00","latency_ms":2164,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"c64e40e2949d9a8fb3f11e52f515c43a0f26e283baa3893593a5d158dcc90871b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","e2ee_public_key":"b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"cb613de37b145133c777155d3a0faaf26ce41eb249de20ffb4da587fce5bb46f","parsed_evidence_digest":"11672b88b8c5fe26a61ca419bfc355f01149779227194f6b80866a991e527360","artifact_set_digest":"4fa7de1277735c1584963ee3993bef159f6bd867f084b71994d9f9248ffe41b2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-09T13:00:36.039026830+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","size_bytes":26025,"encoding":"binary","metadata":{"date":"Fri, 09 Oct 2026 13:00:36 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-09T13:00:36.039540283+00:00","sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-09T13:00:36.040501066+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-09T13:00:37.726461845+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-glm-5-3-flash","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-glm-5-3-flash","label":"GLM 5.3 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"e0fd88b9fda1933af056ba59837aa8c9532d2d13ab6892058e44affbba4982ec","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-09T13:00:36.040501066+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26025,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","collected_at":"2026-10-09T13:00:36.039026830+00:00","metadata":{"date":"Fri, 09 Oct 2026 13:00:36 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-09T13:00:36.039540283+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash","collected_at":"2026-10-09T13:00:37.726461845+00:00","metadata":{"check_id":"ppq-glm-5-3-flash","provider":"ppq","status":"partial"}}]},{"rowId":31635,"check":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT OSS 120B (TEE)","model":"private/gpt-oss-120b","status":"partial","ts":"2026-10-09T13:00:37.726890399+00:00","latency_ms":1755,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"c64e40e2949d9a8fb3f11e52f515c43a0f26e283baa3893593a5d158dcc90871b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","e2ee_public_key":"b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"c14fd4e43b881819a1b26871b788137a1366847f4a6b2f43c7248ce9f01b2684","parsed_evidence_digest":"437afa44692bf1e72a4dbe83eec46255e5fe0e66fc38072d5722c82a43dc6fba","artifact_set_digest":"4fa7de1277735c1584963ee3993bef159f6bd867f084b71994d9f9248ffe41b2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-09T13:00:38.140704504+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","size_bytes":26025,"encoding":"binary","metadata":{"date":"Fri, 09 Oct 2026 13:00:40 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-09T13:00:38.141119944+00:00","sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-09T13:00:38.141937037+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-09T13:00:39.481718527+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"f6039c9320b471dbb0307c66aa287d22087cbb97bf4b9586aba30633d55bd7cd","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-09T13:00:38.141937037+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26025,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","collected_at":"2026-10-09T13:00:38.140704504+00:00","metadata":{"date":"Fri, 09 Oct 2026 13:00:40 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-09T13:00:38.141119944+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","collected_at":"2026-10-09T13:00:39.481718527+00:00","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"partial"}}]},{"rowId":31636,"check":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","model":"private/kimi-k3","status":"partial","ts":"2026-10-09T13:00:39.482151089+00:00","latency_ms":2021,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"c64e40e2949d9a8fb3f11e52f515c43a0f26e283baa3893593a5d158dcc90871b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","e2ee_public_key":"b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"19045ba6d47c64a654a062b1b3ae1a419e335676e766c2c82cec365198cbce31","parsed_evidence_digest":"65d7a0b9ba6cf9193ede8b61f838964f9b8cf4945bf7b471cbfaf9fcde9bfcd9","artifact_set_digest":"4fa7de1277735c1584963ee3993bef159f6bd867f084b71994d9f9248ffe41b2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-09T13:00:39.895446040+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","size_bytes":26025,"encoding":"binary","metadata":{"date":"Fri, 09 Oct 2026 13:00:40 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-09T13:00:39.895870957+00:00","sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-09T13:00:39.896648206+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-09T13:00:41.503482573+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"16318096fd551d584216581b073c1dace35d4be281c731b2f213ec752a4b8f39","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-09T13:00:39.896648206+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26025,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-10-09T13:00:39.895446040+00:00","metadata":{"date":"Fri, 09 Oct 2026 13:00:40 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-09T13:00:39.895870957+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-10-09T13:00:41.503482573+00:00","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},{"rowId":31637,"check":{"provider":"ppq","id":"ppq-llama3-3-70b","label":"Llama3.3 70B (TEE)","model":"private/llama3-3-70b","status":"partial","ts":"2026-10-09T13:00:41.504111313+00:00","latency_ms":1811,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"c64e40e2949d9a8fb3f11e52f515c43a0f26e283baa3893593a5d158dcc90871b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","measurement":"b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.155","release_digest":"ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","e2ee_public_key":"b754e0ac8422958db567022693fa8b8de6453c5493921b6b8508d671bacb0243","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"200732949d7126fb7c3e3a52506cc5ee9d4f5f2cd9b7bf195626221a7d8d8b59","parsed_evidence_digest":"7c26685e351b471219de4b674976907d5349c7a5ce3076a7a8a1beee3492c471","artifact_set_digest":"4fa7de1277735c1584963ee3993bef159f6bd867f084b71994d9f9248ffe41b2"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-09T13:00:41.987793666+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","size_bytes":26025,"encoding":"binary","metadata":{"date":"Fri, 09 Oct 2026 13:00:42 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-09T13:00:41.988219105+00:00","sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-09T13:00:41.989087374+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-09T13:00:43.315237134+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-llama3-3-70b","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-llama3-3-70b","label":"Llama3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"d0b5fc87abc212c40855167f64389aeb46cd3f48173a5d8b5d75c4e837974354","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-09T13:00:41.989087374+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"fd703d9e90816ff655abb9e9c50b58dfaebfae6b47d78cdc532a4b7c19fd901e","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26025,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","collected_at":"2026-10-09T13:00:41.987793666+00:00","metadata":{"date":"Fri, 09 Oct 2026 13:00:42 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1ed833b21c07fded69a7663da639e163e657e3a5dc6dcd53e3fbdfcbf0139491","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-09T13:00:41.988219105+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","collected_at":"2026-10-09T13:00:43.315237134+00:00","metadata":{"check_id":"ppq-llama3-3-70b","provider":"ppq","status":"partial"}}]}]}}