{"schema_version":"1.0","run":{"runId":2984,"schemaVersion":2,"startedAt":"2026-10-14T13:00:20.591374073+00:00","completedAt":"2026-10-14T13:00:38.111986820+00:00","verifierVersion":"0.2.2","verifierBuild":{"git_commit":"8117a7c1db8b26f71f86dd353c81176e5e16b409","source_hash":"ac0a4839c1eaa05d837628c674395264954e70bd437399cc692e6796c1b6597d","cargo_lock_hash":"6cedf06116823f07ce57852aa90542f5675d1e12eb24d60ceae0662179415155","binary_hash":"6bb4195268d2b8690006fc7f0a5ed3047d01d0b975c400366c8229ce4e5056e9"},"policyHash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","targetSetHash":"2717a2809ec0afdcb138f162d42996238a367581e6a51bff27ce4ee8acb9b6cb","summary":{"total":6,"verified":0,"partial":6,"failed":0,"unreachable":0},"policy":{"version":"2026-07-16.2","tdx":{"minimum_tee_tcb_svn":"03010200000000000000000000000000","accepted_mr_seams":[]},"snp":{"minimum_bootloader":7,"minimum_tee":0,"minimum_snp":14,"minimum_microcode":72,"require_smt_disabled":false,"require_tsme":true}},"targets":[{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"DeepSeek V4.1 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-1-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-gemma4-31b","label":"Gemma4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-glm-5-3","label":"GLM 5.3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},{"provider":"ppq","id":"ppq-llama3-3-70b","label":"Llama3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}}],"integrity":{"previousRunDigest":"17ffa67f2a706b828e23b3d430ffde721d141d3bb8e537713ae616cc805c6de7","runDigest":"c88b719d7c6dc98eca8feb1beb3eba0f13c0b9379a9ec8f983f8a98cf2ec2f8c","previousLinkValid":true,"runDigestValid":true,"checkResultDigestsValid":true},"reconstructionLevel":"artifact-backed","checks":[{"rowId":32706,"check":{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"DeepSeek V4.1 Flash (TEE)","model":"private/deepseek-v4-1-flash","status":"partial","ts":"2026-10-14T13:00:20.593556118+00:00","latency_ms":3231,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","measurement":"5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.157","release_digest":"ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","e2ee_public_key":"b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"39682b2a4cc37fadd6c5a6153fe99f722d1d0597073a7b6b0249678b2d09b32e","parsed_evidence_digest":"41e0ca24ce65b36df943318310397a8cf37a9a7276d5452f4cdf78daf5df91db","artifact_set_digest":"662165a15292b77ba1ab0e903228bb5ba0a178815f6efad17aa0d5d4c8303661"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-14T13:00:21.273445617+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","size_bytes":26345,"encoding":"binary","metadata":{"date":"Wed, 14 Oct 2026 13:00:21 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-14T13:00:21.276476324+00:00","sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-14T13:00:21.279106138+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"source-provenance-response","media_type":"application/json; charset=utf-8","collected_at":"2026-10-14T13:00:21.642876303+00:00","source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","sha256":"efb291807330a8f5dbeca691fb190612310ac4ba8c7392af15999b4e55945b91","size_bytes":6007,"encoding":"binary","metadata":{"date":"Wed, 14 Oct 2026 13:00:21 GMT","etag":"W/\"36e88e6fff2027bd3599efa5f4c335d8ba93e7b4c6ca55b4ab22dcad7aecd52a\"","http_method":"GET","http_status":"200","last_modified":"Mon, 12 Oct 2026 06:31:58 GMT"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-14T13:00:23.824318727+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-deepseek-v4-1-flash","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-deepseek-v4-1-flash","label":"DeepSeek V4.1 Flash (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/deepseek-v4-1-flash","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"17b635d7adc57d4010dbfa19889886fc32e241ab024ee96297361be6328b4bfe","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-14T13:00:21.279106138+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26345,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","collected_at":"2026-10-14T13:00:21.273445617+00:00","metadata":{"date":"Wed, 14 Oct 2026 13:00:21 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-14T13:00:21.276476324+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"efb291807330a8f5dbeca691fb190612310ac4ba8c7392af15999b4e55945b91","kind":"source-provenance-response","media_type":"application/json; charset=utf-8","encoding":"binary","size_bytes":6007,"source_url":"https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest","collected_at":"2026-10-14T13:00:21.642876303+00:00","metadata":{"date":"Wed, 14 Oct 2026 13:00:21 GMT","etag":"W/\"36e88e6fff2027bd3599efa5f4c335d8ba93e7b4c6ca55b4ab22dcad7aecd52a\"","http_method":"GET","http_status":"200","last_modified":"Mon, 12 Oct 2026 06:31:58 GMT"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash","collected_at":"2026-10-14T13:00:23.824318727+00:00","metadata":{"check_id":"ppq-deepseek-v4-1-flash","provider":"ppq","status":"partial"}}]},{"rowId":32707,"check":{"provider":"ppq","id":"ppq-gemma4-31b","label":"Gemma4 31B (TEE)","model":"private/gemma4-31b","status":"partial","ts":"2026-10-14T13:00:23.824725761+00:00","latency_ms":2116,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","measurement":"5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.157","release_digest":"ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","e2ee_public_key":"b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"eb89d78037d4d50c521c37e43f867af2c517896fa577fbd7dfd5f2ce57cffc79","parsed_evidence_digest":"32508b60fd68fda7668a3e0523a501b0dff7ae80d7813bae80bef4cfca4cc262","artifact_set_digest":"6aae1066bb1ef29c7ab27606cfa7e0f093c6c893cce2bbbbbb0bf0fb911ce345"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-14T13:00:24.318126425+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","size_bytes":26345,"encoding":"binary","metadata":{"date":"Wed, 14 Oct 2026 13:00:24 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-14T13:00:24.318572552+00:00","sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-14T13:00:24.319406427+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-14T13:00:25.940744940+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-gemma4-31b","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-gemma4-31b","label":"Gemma4 31B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gemma4-31b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"7cb1c2fdca45a63a69ad052ca04ad13cc7af63473f2c3e40188bdd30c79e5645","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-14T13:00:24.319406427+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26345,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","collected_at":"2026-10-14T13:00:24.318126425+00:00","metadata":{"date":"Wed, 14 Oct 2026 13:00:24 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-14T13:00:24.318572552+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","collected_at":"2026-10-14T13:00:25.940744940+00:00","metadata":{"check_id":"ppq-gemma4-31b","provider":"ppq","status":"partial"}}]},{"rowId":32708,"check":{"provider":"ppq","id":"ppq-glm-5-3","label":"GLM 5.3 (TEE)","model":"private/glm-5-3","status":"partial","ts":"2026-10-14T13:00:25.941215993+00:00","latency_ms":4639,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","measurement":"5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.157","release_digest":"ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","e2ee_public_key":"b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"b3168bca100f9259e792140998c3d67027921578960f0cb1f0197d6e7f05344a","parsed_evidence_digest":"305109bfb39787b958afcc48a66ac80d3d9de260de841501bbf02c1c7dd388b0","artifact_set_digest":"6aae1066bb1ef29c7ab27606cfa7e0f093c6c893cce2bbbbbb0bf0fb911ce345"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-14T13:00:26.616473091+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","size_bytes":26345,"encoding":"binary","metadata":{"date":"Wed, 14 Oct 2026 13:00:26 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-14T13:00:26.616930329+00:00","sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-14T13:00:26.617797296+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-14T13:00:30.580706367+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-glm-5-3","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-glm-5-3","label":"GLM 5.3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/glm-5-3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"94eeb6c362acedf69bb9fdef8e0e6bf330b3fd61e89174e2fefbaee5152cd9ab","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-14T13:00:26.617797296+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26345,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","collected_at":"2026-10-14T13:00:26.616473091+00:00","metadata":{"date":"Wed, 14 Oct 2026 13:00:26 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-14T13:00:26.616930329+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3","collected_at":"2026-10-14T13:00:30.580706367+00:00","metadata":{"check_id":"ppq-glm-5-3","provider":"ppq","status":"partial"}}]},{"rowId":32709,"check":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT OSS 120B (TEE)","model":"private/gpt-oss-120b","status":"partial","ts":"2026-10-14T13:00:30.581156050+00:00","latency_ms":2009,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","measurement":"5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.157","release_digest":"ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","e2ee_public_key":"b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"c14fd4e43b881819a1b26871b788137a1366847f4a6b2f43c7248ce9f01b2684","parsed_evidence_digest":"45c719a0af6875ccfdc52140b851b99928124e6d17a40766a11412eed834dadc","artifact_set_digest":"6aae1066bb1ef29c7ab27606cfa7e0f093c6c893cce2bbbbbb0bf0fb911ce345"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-14T13:00:31.276733416+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","size_bytes":26345,"encoding":"binary","metadata":{"date":"Wed, 14 Oct 2026 13:00:31 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-14T13:00:31.277317221+00:00","sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-14T13:00:31.278494080+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-14T13:00:32.589792413+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT OSS 120B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/gpt-oss-120b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"c39e2d7deb6b42765ae6a9bdf1cf717b764cb25c3e11ca4089621c9e0238305f","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-14T13:00:31.278494080+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26345,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","collected_at":"2026-10-14T13:00:31.276733416+00:00","metadata":{"date":"Wed, 14 Oct 2026 13:00:31 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-14T13:00:31.277317221+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","collected_at":"2026-10-14T13:00:32.589792413+00:00","metadata":{"check_id":"ppq-gpt-oss-120b","provider":"ppq","status":"partial"}}]},{"rowId":32710,"check":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","model":"private/kimi-k3","status":"partial","ts":"2026-10-14T13:00:32.590326054+00:00","latency_ms":3473,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","measurement":"5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.157","release_digest":"ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","e2ee_public_key":"b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"19045ba6d47c64a654a062b1b3ae1a419e335676e766c2c82cec365198cbce31","parsed_evidence_digest":"231c47de45612a6e78ca7c38df27ed611e4d2f082ca790e4ecadcc838aaa6a60","artifact_set_digest":"6aae1066bb1ef29c7ab27606cfa7e0f093c6c893cce2bbbbbb0bf0fb911ce345"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-14T13:00:33.259428955+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","size_bytes":26345,"encoding":"binary","metadata":{"date":"Wed, 14 Oct 2026 13:00:33 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-14T13:00:33.259877056+00:00","sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-14T13:00:33.260715108+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-14T13:00:36.063423200+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-kimi-k3","label":"Kimi K3 (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/kimi-k3","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"cebbb40581f48c9c8b2956071e792dd6c53b9ee34df45a0231126cd26b31cf9b","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-14T13:00:33.260715108+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26345,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-10-14T13:00:33.259428955+00:00","metadata":{"date":"Wed, 14 Oct 2026 13:00:33 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-14T13:00:33.259877056+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3","collected_at":"2026-10-14T13:00:36.063423200+00:00","metadata":{"check_id":"ppq-kimi-k3","provider":"ppq","status":"partial"}}]},{"rowId":32711,"check":{"provider":"ppq","id":"ppq-llama3-3-70b","label":"Llama3.3 70B (TEE)","model":"private/llama3-3-70b","status":"partial","ts":"2026-10-14T13:00:36.063878314+00:00","latency_ms":2047,"error":"Evidence incomplete: Backend model enclave attestation is delegated to the verified router chain; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"b90b0faf6fef7d4999639ad93143768388abf263dd839338e35d40c5fa73df97b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","measurement":"5a2f5576ff6b2850c8a7cc363bd22d164247bad743e6633f4637193251de2c8d717beb69bf7992df4ed35809694637f0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.157","release_digest":"ec99fa87cbde94786fdc80000d7f4a790bbde5f8581e60741cccd6a882dc6227","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:5ebdf1f8fab833dce8ddaa589238e079ca0b772015c45ace26f788c830936809","ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","e2ee_public_key":"b92b915ff41ef5d78a75b81def1de14ba9e6e892d15e9f2cfd151049197be375","e2ee_key_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private models run on Tinfoil backends; backend enclave attestation is delegated to the verified router chain."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b","target_hash":"200732949d7126fb7c3e3a52506cc5ee9d4f5f2cd9b7bf195626221a7d8d8b59","parsed_evidence_digest":"4ab9a56204bc2db52a3a3a513faa30a5473f4fb1985f708a4727b3550c483b49","artifact_set_digest":"6aae1066bb1ef29c7ab27606cfa7e0f093c6c893cce2bbbbbb0bf0fb911ce345"},"evidence_artifacts":[{"kind":"provider-attestation-response","media_type":"application/json","collected_at":"2026-10-14T13:00:36.477380104+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","size_bytes":26345,"encoding":"binary","metadata":{"date":"Wed, 14 Oct 2026 13:00:36 GMT","http_method":"GET","http_status":"200"}},{"kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","collected_at":"2026-10-14T13:00:36.477869022+00:00","sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","size_bytes":1184,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh"}},{"kind":"amd-vcek-certificate","media_type":"application/pkix-cert","collected_at":"2026-10-14T13:00:36.478695894+00:00","sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","size_bytes":1347,"encoding":"binary","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"kind":"verification-error","media_type":"text/plain; charset=utf-8","collected_at":"2026-10-14T13:00:38.111042247+00:00","source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","size_bytes":248,"encoding":"utf-8","metadata":{"check_id":"ppq-llama3-3-70b","provider":"ppq","status":"partial"}}]},"target":{"provider":"ppq","id":"ppq-llama3-3-70b","label":"Llama3.3 70B (TEE)","type":"ppq","url":"https://api.ppq.ai/private","host":"api.ppq.ai","model":"private/llama3-3-70b","metadata":{"repo":"tinfoilsh/confidential-model-router"}},"resultDigest":"cc05c34f25ea47db0065a1758f3f660e51dd27e4ac7cda152bd772b4c2ff62d1","resultDigestValid":true,"artifacts":[{"sha256":"3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6","kind":"amd-vcek-certificate","media_type":"application/pkix-cert","encoding":"binary","size_bytes":1347,"collected_at":"2026-10-14T13:00:36.478695894+00:00","metadata":{"backend_id":"inference.tinfoil.sh","product":"Genoa","source":"provider-bundle"}},{"sha256":"b2eaff53eb241b36ee572fdb2b67105b622821f150a1f58ae9c995ff407fd43c","kind":"provider-attestation-response","media_type":"application/json","encoding":"binary","size_bytes":26345,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","collected_at":"2026-10-14T13:00:36.477380104+00:00","metadata":{"date":"Wed, 14 Oct 2026 13:00:36 GMT","http_method":"GET","http_status":"200"}},{"sha256":"1898e4accc2ec27d46661484d6a0b0180c74ba897373657223a77bc0ba25139a","kind":"sev-snp-report","media_type":"application/vnd.amd.sev-snp.report","encoding":"binary","size_bytes":1184,"collected_at":"2026-10-14T13:00:36.477869022+00:00","metadata":{"backend_id":"inference.tinfoil.sh"}},{"sha256":"bc0d7abbf89916553ee34bdb6c212dbd091c446a7b720662fbe6bac7ae171ea6","kind":"verification-error","media_type":"text/plain; charset=utf-8","encoding":"utf-8","size_bytes":248,"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","collected_at":"2026-10-14T13:00:38.111042247+00:00","metadata":{"check_id":"ppq-llama3-3-70b","provider":"ppq","status":"partial"}}]}]}}