{"schema_version":"1.0","run":{"runId":803,"schemaVersion":1,"startedAt":"2026-07-16T12:49:05.105950985+00:00","completedAt":"2026-07-16T12:49:05.105950985+00:00","verifierVersion":"0.1.0","verifierBuild":{},"policyHash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","targetSetHash":"9550e816fcfde5a2dc3d0a23bda303a1c97f476c54e365c21e131efb60d4631d","summary":{"total":89,"verified":5,"partial":64,"failed":15,"unreachable":5},"policy":{},"targets":[],"integrity":{"previousRunDigest":"","runDigest":"","previousLinkValid":null,"runDigestValid":null,"checkResultDigestsValid":null},"reconstructionLevel":"parsed-only","checks":[{"rowId":12258,"check":{"provider":"chutes","id":"chutes-deepseek-ai-deepseek-v3-2-tee","label":"Deepseek Ai/DeepSeek V3.2 TEE (TEE)","model":"deepseek-ai/DeepSeek-V3.2-TEE","status":"partial","ts":"2026-07-16T12:47:12.302779531+00:00","latency_ms":9314,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0b010400000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"eb0d85fe1a00a4bb9e4dddfec468318670a60aac05953677c6dced130710cbae8379daffb33191ac9d80dd93d0016582202d0ed782af9e57027dffa7886ab7f1","rtmr0":"7e76988fae31dda82f0043b331d908f0716e9da24fed80b6ea6cec9b6615ff84f24321056a8befbea3fff67bd1e59205","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"eb0d85fe1a00a4bb9e4dddfec468318670a60aac05953677c6dced130710cbae"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:nightly-2026031300-7f2b15c9e6e9"],"manifest_workloads":["chute:deepseek-ai/DeepSeek-V3.2-TEE","instance:b3f938b1-1e57-4fef-ba6b-ff4d152e39ac","certificate-present:true","gpu-evidence-count:8","revision:a7e62ac04ecb2c0a54d736dc46601c5606cf10a6","lock-modules:true","external-egress:false","chutes-version:0.6.6","image-id:d63d064c-4add-5213-b278-d3125c8078fd","image-status:built and pushed","image-chutes-version:0.6.6"],"source_url":"https://api.chutes.ai/chutes/398651e1-5f85-5e50-a513-7c5324e8e839/evidence?nonce=522f931d1f6a0eeff36349621ebb3dcdaba8c6f21e9b3a5e54073e4ea2747633","signing_public_key":"ml-kem-768:b3f938b1-1e57-4fef-ba6b-ff4d152e39ac","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"07bf2a3a9d8e95343a0c35405effb4c1e365c255c5556a2cd0680484579524aa","parsed_evidence_digest":"44268cc46c7b7ca9526d55ff4af60600821b2fb5fe47e9acf93dd38211bf77b8"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12255,"check":{"provider":"chutes","id":"chutes-google-gemma-4-31b-turbo-tee","label":"Google/gemma 4 31B Turbo TEE (TEE)","model":"google/gemma-4-31B-turbo-TEE","status":"partial","ts":"2026-07-16T12:46:50.079919368+00:00","latency_ms":20213,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0d010600000000000000000000000000","mr_seam":"fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"20537f7ee2189110b27d7b86f0dd36aa00ac7508e592c362486caf5cef5153935a798a590b5a86ecd2c99c6e89b489a390430544b0828076099ec0aebad24289","rtmr0":"0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"20537f7ee2189110b27d7b86f0dd36aa00ac7508e592c362486caf5cef515393"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:0.5.13-post1c"],"manifest_workloads":["chute:google/gemma-4-31B-turbo-TEE","instance:a74dbf3b-5726-40ee-9756-6ca9fb45a61f","certificate-present:true","gpu-evidence-count:1","revision:e5ef03afa233c35cb000323ff098d4291e1dd07c","lock-modules:true","external-egress:false","chutes-version:0.6.11.rc2","image-id:a3028618-6f8f-5afc-9a51-8eff25f2e5c8","image-status:built and pushed","image-chutes-version:0.6.11.rc2"],"source_url":"https://api.chutes.ai/chutes/42ee92ba-a537-5a73-8741-876067750db7/evidence?nonce=a541d04c659d4c2cf88b8c61106dc690518f61fd7aee935344691915aa0a310c","signing_public_key":"ml-kem-768:a74dbf3b-5726-40ee-9756-6ca9fb45a61f","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"d00f9b114e76f734d4ce1702b85a8c3f96d553260ec27ce558cb545096d6ee24","parsed_evidence_digest":"0782c575725e2d60ce8b5387cb01a8d1908f4527dae8702a6c014c18a8190a12"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12265,"check":{"provider":"chutes","id":"chutes-minimaxai-minimax-m2-5-tee","label":"MiniMaxAI/MiniMax M2.5 TEE (TEE)","model":"MiniMaxAI/MiniMax-M2.5-TEE","status":"partial","ts":"2026-07-16T12:47:39.563763678+00:00","latency_ms":7236,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0e010400000000000000000000000000","mr_seam":"346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"fddd6012b9dfd422bd6e1f6071783b5ae0cac74fd3ab3c8e23bbc67ab8cccf9b547717537a4216cf6a61a37a128ffee2b435b6205c7de68bf996a06e8c4caeb1","rtmr0":"212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"fddd6012b9dfd422bd6e1f6071783b5ae0cac74fd3ab3c8e23bbc67ab8cccf9b"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:nightly-2026043000"],"manifest_workloads":["chute:MiniMaxAI/MiniMax-M2.5-TEE","instance:7178e1ce-0a4f-4e88-b083-a891d64b96ca","certificate-present:true","gpu-evidence-count:8","revision:37649bdaab7de76902236a546b2df436a93a33ba","lock-modules:true","external-egress:false","chutes-version:0.6.5","image-id:fef3b089-b516-5c04-bf72-ae56ad48492a","image-status:built and pushed","image-chutes-version:0.6.5"],"source_url":"https://api.chutes.ai/chutes/ce6a92e4-5c2f-5681-9742-c80a4447bbdf/evidence?nonce=27c460af66dfb8ecde568f687fb6b65a13675cd64d189dbb95d72673a369b13f","signing_public_key":"ml-kem-768:7178e1ce-0a4f-4e88-b083-a891d64b96ca","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"d2ffad2aaff903c7c6ef3173b1d910a92cf46ee94f4ee48eff29a1ed296c1d54","parsed_evidence_digest":"3c77fbfabc7535a6df2b9de56349d1af25b5ee87301d0ae0b4f428d50a7ab2e2"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12264,"check":{"provider":"chutes","id":"chutes-moonshotai-kimi-k2-5-tee","label":"Moonshotai/Kimi K2.5 TEE (TEE)","model":"moonshotai/Kimi-K2.5-TEE","status":"partial","ts":"2026-07-16T12:47:34.451476636+00:00","latency_ms":8732,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0e010400000000000000000000000000","mr_seam":"346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"d620eb9e27fca4cf25d026c50918f7eb3dfe1b872d34e27161485a2e09dc445c7ac02748c685ac38cf9eecb77158577938356939204afbbada67c8650f3bcdd1","rtmr0":"212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"d620eb9e27fca4cf25d026c50918f7eb3dfe1b872d34e27161485a2e09dc445c"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:0.5.13-post1b"],"manifest_workloads":["chute:moonshotai/Kimi-K2.5-TEE","instance:245b7ff2-4f05-4fd5-a96c-ea79b756f633","certificate-present:true","gpu-evidence-count:8","revision:3367c8d1c68584429fab7faf845a32d5195b6ac1","lock-modules:true","external-egress:false","chutes-version:0.6.11.rc2","image-id:cc46d5fd-9059-59f4-b208-83ff6ff11c31","image-status:built and pushed","image-chutes-version:0.6.11.rc2"],"source_url":"https://api.chutes.ai/chutes/2ff25e81-4586-5ec8-b892-3a6f342693d7/evidence?nonce=df8bc499e8986e19f0c7f56975f10067f6894b361d58173089f6b4597aa53c68","signing_public_key":"ml-kem-768:245b7ff2-4f05-4fd5-a96c-ea79b756f633","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"2d2211f35445f701e203b3d619de2a4fd012cc919c293130cd4830ac1370938d","parsed_evidence_digest":"97f5c67eaa29d5392aef272fda2baaf0c9009b0d043c62f305d928fc6c921d0b"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12262,"check":{"provider":"chutes","id":"chutes-moonshotai-kimi-k2-6-tee","label":"Moonshotai/Kimi K2.6 TEE (TEE)","model":"moonshotai/Kimi-K2.6-TEE","status":"partial","ts":"2026-07-16T12:47:31.052396197+00:00","latency_ms":8511,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0d010400000000000000000000000000","mr_seam":"489e585f1c54bc5a02066c8c6ec21619ff0334ec6f21e07e2a35202c59183789c8057e7d97dd591bb08314b185819e72","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"937455921cf442420338310370106732fa79e6338a3f449da178c1a17d4725d92b497e7f8273a7e45b6f8b4536d75324ab310c82cfd45d998c448beb21cf4d1f","rtmr0":"7e76988fae31dda82f0043b331d908f0716e9da24fed80b6ea6cec9b6615ff84f24321056a8befbea3fff67bd1e59205","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"937455921cf442420338310370106732fa79e6338a3f449da178c1a17d4725d9"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/vllm:nightly-2026031400-03df6abfe49f"],"manifest_workloads":["chute:moonshotai/Kimi-K2.6-TEE","instance:883407b8-d497-4657-a2ba-fcaff9f2b4ea","certificate-present:true","gpu-evidence-count:8","revision:d9cb81bc88b9bd2dc89877599f23c614ded72b9c","lock-modules:true","external-egress:false","chutes-version:0.6.6","image-id:5bbb13bc-c050-518d-bb55-79994b540ec2","image-status:built and pushed","image-chutes-version:0.6.6"],"source_url":"https://api.chutes.ai/chutes/aac09863-35b4-5d9b-9b67-6e6a9d54273a/evidence?nonce=77c2925770ccfdb5902c08a432fac725f3e2b3a89122561aa9f65a12e95501cb","signing_public_key":"ml-kem-768:883407b8-d497-4657-a2ba-fcaff9f2b4ea","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"ec64250c1bc814c2afb985778508120b91381f1fd745302fc79024fe96c73730","parsed_evidence_digest":"21f99f018032242a164c04dbe52db8be8665dec5d010b7460a44d6ed9df95737"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12263,"check":{"provider":"chutes","id":"chutes-qwen-qwen3-235b-a22b-thinking-2507-tee","label":"Qwen/Qwen3 235B A22B Thinking 2507 TEE (TEE)","model":"Qwen/Qwen3-235B-A22B-Thinking-2507-TEE","status":"unreachable","ts":"2026-07-16T12:47:33.770127797+00:00","latency_ms":681,"error":"Chutes evidence returned HTTP 400 Bad Request","source_url":"https://api.chutes.ai/chutes/21d129e5-8426-5c29-a6be-844e0f5f5e30/evidence?nonce=7bc128a5643598e6f9f3709a901defc500b06a63bdc694bbe1c8373f272e389f","trust_tier":"none","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"declared","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"declared","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"5cd9d9c30899bb0cc6a08da52ee5e9f97892a326fec5c5639125ccfae64d04f6","parsed_evidence_digest":"b61e208914185ada15eeefae693424349eb83409b7aade067cf35e813b6001ea"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12254,"check":{"provider":"chutes","id":"chutes-qwen-qwen3-32b-tee","label":"Qwen/Qwen3 32B TEE (TEE)","model":"Qwen/Qwen3-32B-TEE","status":"partial","ts":"2026-07-16T12:46:50.079387069+00:00","latency_ms":7529,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0d010600000000000000000000000000","mr_seam":"fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"ddc6efcdd2309e10837f8a7f64b71272b7ef003b129460410fe715bdfffec38c7c0c1686dddb2a23d4fd623d145e8455","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"295962c036e9c6d957aa18b6dd9445ffd679f1fd7214f4a9103c41de9729ea3710e7fec6345109965fe245e43c186e5d29fa1828ad567507c673933488f82048","rtmr0":"5064826bfd530ca9f823ceecb74899d7dbd014b60897a77317a14200c8706f2368ecbbc0a04cec8ceef90474b8c955e1","rtmr1":"f858ed2aecba4ecd29084352c6b5c6e403c0bec89b8c852f90fa5a8cee796ffa095518c5cd8b92c25c1856e932a95877","rtmr2":"7719f4fde518994a5dd6767a8b8b87a38168cc0f3480e7498d4ace99e49319be6a7fed26c21ad43310d2d488fc68ab1c","rtmr3":"bfac8bbe97148d00c0bc5dea273ccd926e2415511f08f5dedaa96d3c19e824d2bf01fae86e8987ff509fd3ad31374a60","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"295962c036e9c6d957aa18b6dd9445ffd679f1fd7214f4a9103c41de9729ea37"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:0.5.13-post1c"],"manifest_workloads":["chute:Qwen/Qwen3-32B-TEE","instance:9c890849-8462-4827-94c3-c16c18a564f2","certificate-present:true","gpu-evidence-count:8","revision:aa55da1ecc13d006e8b8e4f54579b1ea8c3db2df","lock-modules:true","external-egress:false","chutes-version:0.6.11.rc2","image-id:a3028618-6f8f-5afc-9a51-8eff25f2e5c8","image-status:built and pushed","image-chutes-version:0.6.11.rc2"],"source_url":"https://api.chutes.ai/chutes/ac059e33-eb27-541c-b9a9-24b214036475/evidence?nonce=872ad5d975cb7fad6ba679dd58f8ce10d94fe627c2c70382ad097c2562e8a857","signing_public_key":"ml-kem-768:9c890849-8462-4827-94c3-c16c18a564f2","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"c891eaf0bcc3badb306b83762cce633e1f2be6ab0bc2a5dce18c5eb853b25a0d","parsed_evidence_digest":"15eb765407152bcfe1a8b441e7b0a803cd17c46168bcb78745b7d3de00dad001"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12257,"check":{"provider":"chutes","id":"chutes-qwen-qwen3-5-397b-a17b-tee","label":"Qwen/Qwen3.5 397B A17B TEE (TEE)","model":"Qwen/Qwen3.5-397B-A17B-TEE","status":"partial","ts":"2026-07-16T12:47:10.293601992+00:00","latency_ms":11486,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0b010400000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"25787d76f3efeec343c71a6d6b6139ff7a7e1ec164c36e10649155663ef23178ab240009c3493cfdf4217d35a9e7538333ed4dd6b41e3df8a2b3506ebb862e3f","rtmr0":"212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"25787d76f3efeec343c71a6d6b6139ff7a7e1ec164c36e10649155663ef23178"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:0.5.13-post1b"],"manifest_workloads":["chute:Qwen/Qwen3.5-397B-A17B-TEE","instance:71baed3f-98e0-48aa-aefe-52cc4ef9c33f","certificate-present:true","gpu-evidence-count:8","revision:9f1f3de9a3a48cfd340fd73ca98c02625b7afb3b","lock-modules:true","external-egress:false","chutes-version:0.6.11.rc2","image-id:cc46d5fd-9059-59f4-b208-83ff6ff11c31","image-status:built and pushed","image-chutes-version:0.6.11.rc2"],"source_url":"https://api.chutes.ai/chutes/51a4284a-a5a0-5e44-a9cc-6af5a2abfbcf/evidence?nonce=c8c1efb9ec01b4d55478c96a0256fbc8f996697d1bcda91ec5c622fd7b5bb072","signing_public_key":"ml-kem-768:71baed3f-98e0-48aa-aefe-52cc4ef9c33f","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"bce90b0775287652c0edaa7ad4c619f46742562363203ce1885e679d136dbaf7","parsed_evidence_digest":"c466c5eec6844e913165f8bf8e35d7663d1839524946126087b30866c532afaf"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12256,"check":{"provider":"chutes","id":"chutes-qwen-qwen3-6-27b-tee","label":"Qwen/Qwen3.6 27B TEE (TEE)","model":"Qwen/Qwen3.6-27B-TEE","status":"partial","ts":"2026-07-16T12:46:57.608562627+00:00","latency_ms":14694,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0d010600000000000000000000000000","mr_seam":"fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"63b232c871e447b587e738c0d2d5cadab13fdaa93302e4d4f1a58fb876a4a993c659171c1e0dff9169f2a0a26805670ee83a2a1d10bf0dc4a7effb19522bd421","rtmr0":"0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"63b232c871e447b587e738c0d2d5cadab13fdaa93302e4d4f1a58fb876a4a993"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:0.5.13-post1c"],"manifest_workloads":["chute:Qwen/Qwen3.6-27B-TEE","instance:5e0de849-004a-43f8-b614-3afed94996d6","certificate-present:true","gpu-evidence-count:1","revision:e89b16ebf1988b3d6befa7de50abc2d76f26eb09","lock-modules:true","external-egress:false","chutes-version:0.6.11.rc2","image-id:a3028618-6f8f-5afc-9a51-8eff25f2e5c8","image-status:built and pushed","image-chutes-version:0.6.11.rc2"],"source_url":"https://api.chutes.ai/chutes/7aa5e899-c0ba-5482-af48-d3f31d635c9f/evidence?nonce=d9d7f45fb0df1d0949b7ccd8e6ea161fa1808e992f9fc30003b82b4229c7ea97","signing_public_key":"ml-kem-768:5e0de849-004a-43f8-b614-3afed94996d6","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"2666b65ef0f7a94c047038f447c54b93d44ffa0d4f10a7fb0c8fc37b2d74ad7a","parsed_evidence_digest":"059eb00b024aeb665663b4ac14d0d3fd16b7fe20742c52094e952bb8ce1ca7f9"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12261,"check":{"provider":"chutes","id":"chutes-unsloth-mistral-nemo-instruct-2407-tee","label":"Unsloth/Mistral Nemo Instruct 2407 TEE (TEE)","model":"unsloth/Mistral-Nemo-Instruct-2407-TEE","status":"partial","ts":"2026-07-16T12:47:29.057711804+00:00","latency_ms":4712,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0d010600000000000000000000000000","mr_seam":"fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"11ae1028418422feb7cf473a477176cc0c2b90e3bfd53410b47313e3d812101bc659171c1e0dff9169f2a0a26805670ee83a2a1d10bf0dc4a7effb19522bd421","rtmr0":"0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"11ae1028418422feb7cf473a477176cc0c2b90e3bfd53410b47313e3d812101b"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:nightly-2026050600-9bf2c6dee5f7"],"manifest_workloads":["chute:unsloth/Mistral-Nemo-Instruct-2407-TEE","instance:a3866ade-226c-41a5-8231-89de33590c4b","certificate-present:true","gpu-evidence-count:1","revision:e9976040f42d8a5590ed58cefe973061b3f973b5","lock-modules:true","external-egress:false","chutes-version:0.6.8","image-id:e8a097de-bebd-5dfe-b69f-532a6c06a57e","image-status:built and pushed","image-chutes-version:0.6.8"],"source_url":"https://api.chutes.ai/chutes/7725a31d-28df-5bb7-9d29-c23b49df5472/evidence?nonce=018f0cdedac717b45297167e5da29a8c6cefa7a21cc3983527f488a8a017a97e","signing_public_key":"ml-kem-768:a3866ade-226c-41a5-8231-89de33590c4b","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"390946768b31d16be5209974bdc32623c7760125bfe7c1516a9d8a5312ccd8b9","parsed_evidence_digest":"639a4a301a2a7e843dfd49194b4d49d9cbffb7b9e8ff33472876b69780b89571"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12259,"check":{"provider":"chutes","id":"chutes-zai-org-glm-5-1-tee","label":"Zai Org/GLM 5.1 TEE (TEE)","model":"zai-org/GLM-5.1-TEE","status":"partial","ts":"2026-07-16T12:47:21.617546739+00:00","latency_ms":9434,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"07010300000000000000000000000000","mr_seam":"49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"5df879c5bf0d4b08582e921c5d080a22024b8efa1baaa3e564985cbd87100a070c7428cec02f3359bae81630ea9ded77072976469ac93288a45deeda8f48366b","rtmr0":"7e76988fae31dda82f0043b331d908f0716e9da24fed80b6ea6cec9b6615ff84f24321056a8befbea3fff67bd1e59205","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"5df879c5bf0d4b08582e921c5d080a22024b8efa1baaa3e564985cbd87100a07"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:nightly-2026032100-6483b7da6ccd"],"manifest_workloads":["chute:zai-org/GLM-5.1-TEE","instance:0dccf736-cc77-4b3d-a07e-76bd87844c4e","certificate-present:true","gpu-evidence-count:8","revision:f396cf805182f4ca10fa675e1a99815b3ca384db","lock-modules:true","external-egress:false","chutes-version:0.6.6","image-id:ae476f71-ed8f-562e-b1af-49d49c948d6f","image-status:built and pushed","image-chutes-version:0.6.6"],"source_url":"https://api.chutes.ai/chutes/b048fe26-0352-5c46-acf7-335e527e7f3d/evidence?nonce=53b9ea25aaa8f37611d1bdd7ddba900096767564bfb5ca6dc4b891f0a37cd262","signing_public_key":"ml-kem-768:0dccf736-cc77-4b3d-a07e-76bd87844c4e","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"69ef3de27eaf4a117b372e2e5eed01426b7db527f5e868cf09ab8ccc70dd7a00","parsed_evidence_digest":"850730ac41429049f038a70931095a95af184e1bcb37fc92194d46f639fda6d1"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12260,"check":{"provider":"chutes","id":"chutes-zai-org-glm-5-2-tee","label":"Zai Org/GLM 5.2 TEE (TEE)","model":"zai-org/GLM-5.2-TEE","status":"failed","ts":"2026-07-16T12:47:21.780505125+00:00","latency_ms":7277,"error":"TDX quote verification failed: Quote verification failed: No matching TCB level found","trust_tier":"none","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"declared","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"declared","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"failed","detail":"Required hardware evidence was not verified."},"tcb":{"state":"failed","detail":"TCB policy did not produce verified evidence."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"010b8b43fb30d29f74d3c217877ddb6acfba8ce6854102a780d9bbb856d1275b","parsed_evidence_digest":"19b1dffacf6e78adfb4546db1d63adde6a893d78a517397dd0ee8d57d41e8dd3"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12266,"check":{"provider":"chutes","id":"chutes-zai-org-glm-5-tee","label":"Zai Org/GLM 5 TEE (TEE)","model":"zai-org/GLM-5-TEE","status":"partial","ts":"2026-07-16T12:47:43.183939392+00:00","latency_ms":8666,"error":"Evidence incomplete: Container images are not all digest-pinned; The provider-declared image digest is not cryptographically bound to the workload quote","tdx":{"tee_tcb_svn":"0d010400000000000000000000000000","mr_seam":"489e585f1c54bc5a02066c8c6ec21619ff0334ec6f21e07e2a35202c59183789c8057e7d97dd591bb08314b185819e72","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"82d57e99ccef2fffd114130a74c6e0b5ace8195323b7c151e62cdf37ff881b8444a8df888a1a040ae04314cee9f765205d855d05894e9e721e1a8525ba0ba844","rtmr0":"212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"82d57e99ccef2fffd114130a74c6e0b5ace8195323b7c151e62cdf37ff881b84"},"report_data_binds_signer":true,"report_data_binds_nonce":true,"config_images":["registry.chutes.ai/chutes/sglang:nightly-2026050600-9bf2c6dee5f7"],"manifest_workloads":["chute:zai-org/GLM-5-TEE","instance:03aabc20-7230-4761-bf57-e9e5cedb685c","certificate-present:true","gpu-evidence-count:8","revision:949e09d70b611943740a3d79a0f46a63947498a6","lock-modules:true","external-egress:false","chutes-version:0.6.8","image-id:e8a097de-bebd-5dfe-b69f-532a6c06a57e","image-status:built and pushed","image-chutes-version:0.6.8"],"source_url":"https://api.chutes.ai/chutes/e51e818e-fa63-570d-9f68-49d7d1b4d12f/evidence?nonce=db97c762b94aef09d27352bb56a5094c5ba094cfc734f6196234a95da6174c3d","signing_public_key":"ml-kem-768:03aabc20-7230-4761-bf57-e9e5cedb685c","signing_algo":"ML-KEM-768 E2E","trust_tier":"app-e2ee","e2ee_capability":"ML-KEM-768 E2E","route":{"route_binding":"not-verified","workload_operator":{"organization":"chutes","confidence":"corroborated","evidence":"Direct Chutes target and deployment evidence."},"tee_platform":{"organization":"chutes","confidence":"corroborated","evidence":"Chutes TEE target and evidence format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"9135e6f03592a4caa16574be2e6edac58db27edc10d2973b2ce1d74ea15fb45f","parsed_evidence_digest":"2e4ecc190faa6d17846050befadeaba6b5d3c59611ac5c9a7d21e9d328904a77"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12253,"check":{"provider":"maple","id":"maple-enclave","label":"Maple Enclave (AWS Nitro)","status":"partial","ts":"2026-07-16T12:46:50.078912939+00:00","latency_ms":1806,"error":"Evidence incomplete: No Maple workload/PCR provenance policy configured","report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://enclave.trymaple.ai/attestation/228da60f-4c7f-48ca-9104-6d14ee2dc799","signing_public_key":"x25519-nitro-enclave","signing_algo":"x25519","trust_tier":"app-e2ee","e2ee_capability":"x25519","route":{"route_binding":"not-verified","workload_operator":{"organization":"maple","confidence":"declared","evidence":"Maple service endpoint."},"cloud_host":{"organization":"aws","confidence":"declared","evidence":"AWS Nitro attestation format."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"3f0f1c752de53089fc3d5a2bbdccd41277f8c84d10ec064bec4c96df794cd9d6","parsed_evidence_digest":"dc2f60b42b02063e098dc339ac3e6c7eff1f45ee1adaa9ad3c1d7b9a5427e0bd"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12224,"check":{"provider":"nanogpt","id":"nanogpt-deepseek-v3.2","label":"DeepSeek V3.2 (TEE)","model":"TEE/deepseek-v3.2","status":"partial","ts":"2026-07-16T12:47:14.522470897+00:00","latency_ms":1556,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000b5c6a449fa0660106ca12cbf52cbe906f7bfec20a850a4ed68ce68d44c1a2e37","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fdeepseek-v3.2","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/deepseek-v3.2"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"cd7f4cd83e32e3715c4968413e7153ea88c5878d62af09c54167c2e96599c536","parsed_evidence_digest":"5154da864405383897733713cb94964c44903c959149b1dc75eaf1ac0feff32d"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12220,"check":{"provider":"nanogpt","id":"nanogpt-gemma4-31b","label":"Gemma 4 31B (TEE)","model":"TEE/gemma4-31b","status":"partial","ts":"2026-07-16T12:46:54.583444146+00:00","latency_ms":1984,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"07030600000000000000000000000000","mr_seam":"aef4ed3e686fe6cf44c9a8d1cc63105443b558ac4f40c282abf78271e9a4586c50408c8584c7b43fd21edb736700ba5f","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"ad017f09ec425f1783266895ee2d17f31d565b1e77f9a910963ede0874d0300a58264e488c7aec13e3a7ca0ecd40e6869eabfa0df5f4076af96710db4ec48672","rtmr0":"67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591","rtmr1":"46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51","rtmr2":"48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b","rtmr3":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","tcb_level":"status=UpToDate, advisories=[]"},"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma4-31b","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"tinfoil","confidence":"inferred","evidence":"The upstream evidence matches the Tinfoil attestation format; the request route is not bound."},"tee_platform":{"organization":"tinfoil","confidence":"inferred","evidence":"The upstream evidence matches the Tinfoil attestation format."},"upstream_model":"TEE/gemma4-31b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"dafc1e915f589dbdb0ea448c0c9c96070b5b5834019f45f595d26be64f8f4ea8","parsed_evidence_digest":"0d14d398c88dab11690b5bf353a801133d205d993b1411965adbee6855d26e34"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12221,"check":{"provider":"nanogpt","id":"nanogpt-glm-5-1","label":"GLM 5.1 (TEE)","model":"TEE/glm-5.1","status":"partial","ts":"2026-07-16T12:46:56.568150113+00:00","latency_ms":4634,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000dceaac88eb92b5de8eedddb72f8cb94f34771a63605651ec1981a6a0df0b2390","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.1","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/glm-5.1"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"b067e40884a3ac9f74277deb22536929798c34f55129750cbe807bb5b351c1f4","parsed_evidence_digest":"4286a21218ca11171230ce30bda8c26b147871f6cd2864762577b82c3cb172ff"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12219,"check":{"provider":"nanogpt","id":"nanogpt-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","model":"TEE/gpt-oss-120b","status":"partial","ts":"2026-07-16T12:46:52.611204312+00:00","latency_ms":1972,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000b453b884488e4697d8763d9fce4e8069dcc09b11274baca449094c8d47acde10","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgpt-oss-120b","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/gpt-oss-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"fcb028798628584e45b783a356839253a060d185930916a3445e2d473d0a1dd7","parsed_evidence_digest":"eb7347a93a0b5e126cd4feff1fb9f89b641dd91fff96ba62bcd73347acd05601"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12222,"check":{"provider":"nanogpt","id":"nanogpt-kimi-k2-6","label":"Kimi K2.6 (TEE)","model":"TEE/kimi-k2.6","status":"partial","ts":"2026-07-16T12:47:01.202795173+00:00","latency_ms":1416,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000010c9b62925ff80f81ae2ef4c7872508fcd3ec1ad89e4b240de36055dba7a65da","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fkimi-k2.6","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/kimi-k2.6"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"bdfbbabeb5f736ddb6481e58bf3ce03bc771262935bce71d74c87432f448beb0","parsed_evidence_digest":"5b86a531d81d008311cfaf39b76e6619fe26b1c5b9b7fa5bba2c5007858ee0c2"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12218,"check":{"provider":"nanogpt","id":"nanogpt-llama3-70b","label":"Llama 3.3 70B (TEE)","model":"TEE/llama3-3-70b","status":"partial","ts":"2026-07-16T12:46:50.078048948+00:00","latency_ms":2533,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d","measurement":"be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"6a6caf2d148e6cb189a677324aa77a46ba1d150d9663bf71532f49c64234394d"},"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fllama3-3-70b","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"tinfoil","confidence":"inferred","evidence":"The upstream evidence matches the Tinfoil attestation format; the request route is not bound."},"tee_platform":{"organization":"tinfoil","confidence":"inferred","evidence":"The upstream evidence matches the Tinfoil attestation format."},"upstream_model":"TEE/llama3-3-70b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"a227546dd52bb67b54532ca7074de4ea5346958d4275957f268cb86e95edb7d3","parsed_evidence_digest":"9df3960643c05b67a22a71d94d7da9a981312d3edc05a43ee9a933291d768b7f"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12223,"check":{"provider":"nanogpt","id":"nanogpt-qwen3.5-397b","label":"Qwen3.5 397B (TEE)","model":"TEE/qwen3.5-397b-a17b","status":"partial","ts":"2026-07-16T12:47:02.619694739+00:00","latency_ms":11902,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010400000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"ca237ab74fc6f1c50b53bce470e6dbfe43c486b3c17ec95f37a8d7cca666301dab240009c3493cfdf4217d35a9e7538333ed4dd6b41e3df8a2b3506ebb862e3f","rtmr0":"212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.5-397b-a17b","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/qwen3.5-397b-a17b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"656469b1d08ed8fb3fed7417c3e3fb5a8895efae74c9a0196e1e215d85213116","parsed_evidence_digest":"c74f35fda205e920e53ccacc4a8f6f5a975ce9dce51fb077e245e9ffdcfca09a"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12225,"check":{"provider":"nanogpt","id":"nanogpt-tee-deepseek-v3-1","label":"TEE/deepseek V3.1 (TEE)","model":"TEE/deepseek-v3.1","status":"partial","ts":"2026-07-16T12:47:16.078798516+00:00","latency_ms":2537,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000002c5bd3679d712fce8429fa87fa95f95e3f548bf0cf16625fcc852bbfaab112a4","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fdeepseek-v3.1","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/deepseek-v3.1"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"3532db4bf9f480dbdff716dba87bbb3913dd7c3b73a2389c993473631c728090","parsed_evidence_digest":"f23d61172ed4ee46cfba9f6d87096b4beb63d395766a5fe91a6322caaab1ccb9"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12226,"check":{"provider":"nanogpt","id":"nanogpt-tee-deepseek-v4-flash","label":"TEE/deepseek V4 Flash (TEE)","model":"TEE/deepseek-v4-flash","status":"partial","ts":"2026-07-16T12:47:18.616473250+00:00","latency_ms":1524,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000007e06a7df0bfea13cfbb1a1c2a5e7dcec824742f057e40dfe728b301ead0f4a7c","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fdeepseek-v4-flash","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/deepseek-v4-flash"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"f62c84b53e79bf950d328ca361ae74e5b7d0cb811fb5f1c638bcf593ec6da71b","parsed_evidence_digest":"c365306dd21d0c28233ba288a0287fa6121951eddea2b2ebeb550a1c267eff1d"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12227,"check":{"provider":"nanogpt","id":"nanogpt-tee-gemma-3-27b-it","label":"TEE/gemma 3 27b It (TEE)","model":"TEE/gemma-3-27b-it","status":"partial","ts":"2026-07-16T12:47:20.141385367+00:00","latency_ms":2163,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000031088a6b5bc103160f50f6065b5a782196417caa61886c49553b7d3635b057cf","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma-3-27b-it","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/gemma-3-27b-it"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"2f14050215dfc8edb5fc522fc7996b563f09f671386a388a12baa5efdbfcdc87","parsed_evidence_digest":"a9870f1f1e21d5cb8542f52c301cd96b69c00096e1231978b2ce386ee7ecead9"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12228,"check":{"provider":"nanogpt","id":"nanogpt-tee-gemma-4-26b-a4b-uncensored","label":"TEE/gemma 4 26b A4b Uncensored (TEE)","model":"TEE/gemma-4-26b-a4b-uncensored","status":"partial","ts":"2026-07-16T12:47:22.304480469+00:00","latency_ms":2352,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000042a61a181df573385af122b29e4e67ae4c298257383f183dd30aba4bd9f7794c","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma-4-26b-a4b-uncensored","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/gemma-4-26b-a4b-uncensored"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"e48a1d4b4f00b371f4faa292befb0d2cb42adeadd3bd12588b5b1748afe39b75","parsed_evidence_digest":"7b75edb2f4d89e665297b4ef7bae20aa07b6fc5d3bfa090b4adf1789937e765a"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12229,"check":{"provider":"nanogpt","id":"nanogpt-tee-gemma-4-31b-it","label":"TEE/gemma 4 31b It (TEE)","model":"TEE/gemma-4-31b-it","status":"partial","ts":"2026-07-16T12:47:24.657382045+00:00","latency_ms":1929,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000b8dfcaf56635be7e53b9cc19131cd787d50f16e434d501c87d8c66f76f90e942","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma-4-31b-it","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/gemma-4-31b-it"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"36310e994e0dc12660ebe49dc9a902f8a858dfe9f029fa46f238ba4c95d70d45","parsed_evidence_digest":"1bbb74536cf72a1911c1b5d32888b2cc4bb3456beb4b96700798a2fda712a390"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12230,"check":{"provider":"nanogpt","id":"nanogpt-tee-gemma4-31b-thinking","label":"TEE/gemma4 31b:thinking (TEE)","model":"TEE/gemma4-31b:thinking","status":"partial","ts":"2026-07-16T12:47:26.587245755+00:00","latency_ms":2123,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"07030600000000000000000000000000","mr_seam":"aef4ed3e686fe6cf44c9a8d1cc63105443b558ac4f40c282abf78271e9a4586c50408c8584c7b43fd21edb736700ba5f","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"ce689670f86508a26ec8d679bc52ac362ec5ad14795e6d8d817fa12def21fb300e5931337b62da3a759e046bce4b6716320c3f9ce20f808f6640ac72a456a27a","rtmr0":"67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591","rtmr1":"46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51","rtmr2":"48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b","rtmr3":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","tcb_level":"status=UpToDate, advisories=[]"},"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgemma4-31b%3Athinking","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"tinfoil","confidence":"inferred","evidence":"The upstream evidence matches the Tinfoil attestation format; the request route is not bound."},"tee_platform":{"organization":"tinfoil","confidence":"inferred","evidence":"The upstream evidence matches the Tinfoil attestation format."},"upstream_model":"TEE/gemma4-31b:thinking"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"ca1449c38f11150cef44a4716e506bfcd838ce5e02121dbd8117a696d4e2acc0","parsed_evidence_digest":"014983e516c9a57a2d2e59896b63d09fefffb657e58c8e1a0da7a34b5c686b5f"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12231,"check":{"provider":"nanogpt","id":"nanogpt-tee-glm-4-7","label":"TEE/glm 4.7 (TEE)","model":"TEE/glm-4.7","status":"partial","ts":"2026-07-16T12:47:28.710850002+00:00","latency_ms":3242,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000009694f7799256642487bac792a4c69e18b56aa24c82d7cca9ee46b3842f2ee6b1","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-4.7","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/glm-4.7"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"a6f1ab3963de81dadf7300aac1133c09c0b9df799ad50aae9f701f425df15c32","parsed_evidence_digest":"341177b9d545c4372e7f1824ae688abc6bda3c35b607b6c9f8b9363e109990d2"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12232,"check":{"provider":"nanogpt","id":"nanogpt-tee-glm-5","label":"TEE/glm 5 (TEE)","model":"TEE/glm-5","status":"partial","ts":"2026-07-16T12:47:31.953080629+00:00","latency_ms":8409,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0d010400000000000000000000000000","mr_seam":"489e585f1c54bc5a02066c8c6ec21619ff0334ec6f21e07e2a35202c59183789c8057e7d97dd591bb08314b185819e72","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"f0040775ee8bbe810b7b405d15a93abe3e18f7faa1a420ba19db4868f833f6ee44a8df888a1a040ae04314cee9f765205d855d05894e9e721e1a8525ba0ba844","rtmr0":"212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/glm-5"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"afff96018f528c3c1d3dc8bdb3b9aa27a6ce389ebde780909e82cb50b2d873af","parsed_evidence_digest":"9f7718001a3256a4f863fa6bd5ae52107ecc686861653effc317937a712840cd"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12233,"check":{"provider":"nanogpt","id":"nanogpt-tee-glm-5-1-thinking","label":"TEE/glm 5.1 Thinking (TEE)","model":"TEE/glm-5.1-thinking","status":"partial","ts":"2026-07-16T12:47:40.362386954+00:00","latency_ms":2523,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000068d4a2ae97d03cf0efe35f13542327bc5aa60474715ef48ee07c714096353147","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.1-thinking","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/glm-5.1-thinking"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"a0cad05852b955e0872bf3bf3e8a6270d534c186d48f2cacb67226432e66a4c7","parsed_evidence_digest":"faf230480464f1ab593af4f1ab6db0e8d3d6fb2dab21a1b96e65c3664029b72e"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12234,"check":{"provider":"nanogpt","id":"nanogpt-tee-glm-5-2","label":"TEE/glm 5.2 (TEE)","model":"TEE/glm-5.2","status":"partial","ts":"2026-07-16T12:47:42.885470634+00:00","latency_ms":3582,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000001f339b91a26ef351e4d60d2f9e23cea7f61fe020c8c9483ae16ada6d788accd7","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.2","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/glm-5.2"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"0fc72635adc746e0d6726a82526be5e2aeb42659f8766ce5a4ed0be4672264b4","parsed_evidence_digest":"04e2eb86740689368f1c1700485d79ade6648b9af75b22350a99903c51c3ddea"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12235,"check":{"provider":"nanogpt","id":"nanogpt-tee-glm-5-2-thinking","label":"TEE/glm 5.2:thinking (TEE)","model":"TEE/glm-5.2:thinking","status":"partial","ts":"2026-07-16T12:47:46.467683842+00:00","latency_ms":3902,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000001d1a0491e0deae07c2ebd391999eb13fe8199dfdcea89ccc8db477f1e68d9d3f","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fglm-5.2%3Athinking","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/glm-5.2:thinking"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"bff62b8094234a52d485afd245e0f18ef6280ff4e5f9e0866a35b90f7b5cc378","parsed_evidence_digest":"96e031c2e78f9208defa83ed45169ea3b1bbbc4e59de7bbe141e411f1a429db0"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12236,"check":{"provider":"nanogpt","id":"nanogpt-tee-gpt-oss-20b","label":"TEE/gpt Oss 20b (TEE)","model":"TEE/gpt-oss-20b","status":"partial","ts":"2026-07-16T12:47:50.370024587+00:00","latency_ms":1696,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000dcd16f68215e6329caf2bf7db5e459352507cc10774af0087dd829e8e139d8dc","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fgpt-oss-20b","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/gpt-oss-20b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"11e9839237034b0fa7b467f146b33c0dea22574c596e7c715f22df210be16c1a","parsed_evidence_digest":"d88155f6f11ae171e7f401203fe274911675fbccc0e1490327f21700409860ea"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12237,"check":{"provider":"nanogpt","id":"nanogpt-tee-kimi-k2-5","label":"TEE/kimi K2.5 (TEE)","model":"TEE/kimi-k2.5","status":"partial","ts":"2026-07-16T12:47:52.066435037+00:00","latency_ms":8273,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0e010400000000000000000000000000","mr_seam":"346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"3daea55f828b89b4c40b395ceb96d9c1b709af40fd9e7020e49a38a52fe4739b7ac02748c685ac38cf9eecb77158577938356939204afbbada67c8650f3bcdd1","rtmr0":"212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fkimi-k2.5","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/kimi-k2.5"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"0412ef7134ac709c3f251d5179017f6d6fdcf3843a3966364b32ca329a4e5ff7","parsed_evidence_digest":"28fa3af24d258d32312c399fb2fa8e3c7e41e7baa1476cb39d2f3a979f8dc4cf"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12238,"check":{"provider":"nanogpt","id":"nanogpt-tee-kimi-k2-5-thinking","label":"TEE/kimi K2.5 Thinking (TEE)","model":"TEE/kimi-k2.5-thinking","status":"partial","ts":"2026-07-16T12:48:00.340138977+00:00","latency_ms":8028,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0e010400000000000000000000000000","mr_seam":"346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"1de87a9047a7226e5c0f0f504e32c89710e190ef10da5d337cd261db2df830387ac02748c685ac38cf9eecb77158577938356939204afbbada67c8650f3bcdd1","rtmr0":"212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fkimi-k2.5-thinking","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/kimi-k2.5-thinking"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"4f621246a3dedb5cfe18332a2eb657dfa3d17a5654dda1f785ea003bd55576ec","parsed_evidence_digest":"a40447891b551a28da87d5be0915d0bd2b024975b46ca53e89e67ac0428dc7da"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12239,"check":{"provider":"nanogpt","id":"nanogpt-tee-minimax-m2-5","label":"TEE/minimax M2.5 (TEE)","model":"TEE/minimax-m2.5","status":"partial","ts":"2026-07-16T12:48:08.368394635+00:00","latency_ms":8057,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0e010400000000000000000000000000","mr_seam":"346bc77a1846cac214dd2e8edeb9ee4349449d6c3f9ff2c52149a634c27b7fd1bd314c2ef6b973eeebd55742952531a1","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"29eddbc114cbdb54262abc79d1cd348616de64746c1cc81d8e158b67111f8866547717537a4216cf6a61a37a128ffee2b435b6205c7de68bf996a06e8c4caeb1","rtmr0":"212d8284fe29a52a033cd662763e452915d2002bcc3c3e73aa660b100087bd3cce8aef414c3d7012f6a857f392c1919b","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fminimax-m2.5","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/minimax-m2.5"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"28ba1d077d20a3bf1d1fbd65f4e2504b8670667082397388a16b4d4ef39e49a6","parsed_evidence_digest":"ba71fd14cef24713c529a77eafc154c0e6a54086b119d8bc7ccb5e35321e30a7"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12240,"check":{"provider":"nanogpt","id":"nanogpt-tee-qwen2-5-vl-72b-instruct","label":"TEE/qwen2.5 Vl 72b Instruct (TEE)","model":"TEE/qwen2.5-vl-72b-instruct","status":"partial","ts":"2026-07-16T12:48:16.425699653+00:00","latency_ms":1719,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000001273bd9f503cab4c23cd309bd30fa6cbc9ba71e9af4501e107bef7c5b06f94a2","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen2.5-vl-72b-instruct","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/qwen2.5-vl-72b-instruct"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"a525219e649f0fd207a94b79c145255f3cabed23a5d562b75243521c2755e62d","parsed_evidence_digest":"0631d668183787b024e480e97123aeb79dcce10556b7a9c5fa3e17e1504153aa"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12241,"check":{"provider":"nanogpt","id":"nanogpt-tee-qwen3-30b-a3b-instruct-2507","label":"TEE/qwen3 30b A3b Instruct 2507 (TEE)","model":"TEE/qwen3-30b-a3b-instruct-2507","status":"partial","ts":"2026-07-16T12:48:18.145013448+00:00","latency_ms":3398,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000006ddf692a2cc745d2ac5318ac9a42ed19886cbe9b9114fda99c7bca4f395b85af","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3-30b-a3b-instruct-2507","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/qwen3-30b-a3b-instruct-2507"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"a2f689f5aae23dc2970883a2d9dd449fff93c830e72292d7c1df984d50c21eff","parsed_evidence_digest":"8e1d1276668eb65a0d260734d117f12ebfff02f842aceebf418fe0b9e38165ab"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12242,"check":{"provider":"nanogpt","id":"nanogpt-tee-qwen3-5-122b-a10b","label":"TEE/qwen3.5 122b A10b (TEE)","model":"TEE/qwen3.5-122b-a10b","status":"partial","ts":"2026-07-16T12:48:21.543173359+00:00","latency_ms":3457,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000031196714956a7b01b6add3668430601769c6069a149f0510a940beea95c2f940","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.5-122b-a10b","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/qwen3.5-122b-a10b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"f89eda7ffbb85ca69a40962b5628f1f079e897e1a072a98384e4e35ca4969716","parsed_evidence_digest":"f9db94c0617a6b32f0b7e9eeeae4a3a7a48a87107f4f68ec5282e5f5431f3864"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12243,"check":{"provider":"nanogpt","id":"nanogpt-tee-qwen3-5-27b","label":"TEE/qwen3.5 27b (TEE)","model":"TEE/qwen3.5-27b","status":"partial","ts":"2026-07-16T12:48:25.001151576+00:00","latency_ms":10615,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0d010600000000000000000000000000","mr_seam":"fca4ff221293807e3d247416299ca39a236872df4eb414567ca96072d3fde7dead740f807eefe2f7d938499c03cc8aba","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"261ce538b435e2d0e85fc97e254bc99154c507b7a8e13d59b69f8532384f1d0bfaadfddf3fccc6e0a411203840bbee8d","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"e5c2b7fe1d7d9ccfe9752ddfd70992635d8fe611cdd3d03eca79d13072007d87c659171c1e0dff9169f2a0a26805670ee83a2a1d10bf0dc4a7effb19522bd421","rtmr0":"0917443cc41e9a5afebc8e87e69a63f32208c47d4b4b4fd410fbc1a705e1880c1383a4ad51903a5ed20cb4090420185a","rtmr1":"9b8b2915351a3166f742024edafb6cce244c1df4056eb1f9eb608c3616b9d63729ae00c98d1dc108009c0978b19dc207","rtmr2":"8471360414fe80b4343fb17dd59e442bdc55b5955df0adf610b1de15ad7b454e98fb8e9d38cc188b82369f4f620b6968","rtmr3":"51204be641a2af357f5f4e6a121d348d6cb1cbe53c4c35d9dcc3364196b4d41a6e1de75025bb2e76f3b00cc7192f9433","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.5-27b","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/qwen3.5-27b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"0a8c6a760131181bd3bd0a2b64a15faf157fde4b889291d9a467bf1a121fbb87","parsed_evidence_digest":"1492094e33018f3e065bf11b476fcc4da2e8e90fe40d6f492b267a5fc6489d15"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12244,"check":{"provider":"nanogpt","id":"nanogpt-tee-qwen3-6-27b","label":"TEE/qwen3.6 27b (TEE)","model":"TEE/qwen3.6-27b","status":"partial","ts":"2026-07-16T12:48:35.616564716+00:00","latency_ms":3118,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000058a00f0b96661130e2f6a8318ed622d365380020f946835ae13d17d91a564fc","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.6-27b","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/qwen3.6-27b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"875294333242454856e620cafb6a28081d0c30d656799e4243651d15739f21fe","parsed_evidence_digest":"021766ce2c95e1dffc2ae6406638cf8598cb2f058fecbeeddd565d55f3fa36fb"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12245,"check":{"provider":"nanogpt","id":"nanogpt-tee-qwen3-6-35b-a3b","label":"TEE/qwen3.6 35b A3b (TEE)","model":"TEE/qwen3.6-35b-a3b","status":"partial","ts":"2026-07-16T12:48:38.735564397+00:00","latency_ms":3166,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000009362cea6433efb135c6903731e0428c9b99c1927cf636d7831d9449a91e6dd05","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.6-35b-a3b","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/qwen3.6-35b-a3b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"8ab6d0571e75116067dab0955a5ac41b6a8e78efd8d283b8e720fa70a10eb7a9","parsed_evidence_digest":"6e6efa3869ceb6268766a87efcd22ee001b3d76503a0d2c788b61fce6cb4bb91"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12246,"check":{"provider":"nanogpt","id":"nanogpt-tee-qwen3-6-35b-a3b-uncensored","label":"TEE/qwen3.6 35b A3b Uncensored (TEE)","model":"TEE/qwen3.6-35b-a3b-uncensored","status":"partial","ts":"2026-07-16T12:48:41.902565845+00:00","latency_ms":2278,"error":"Evidence incomplete: No NanoGPT workload/image provenance evidence was verified; No verifier challenge, channel binding, or request-bound upstream route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000091971199a8aaf51c5806422e9de6f80f3924056f95909e5a22e75c4a7ab9fecf","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"993daa286650eedd76f6c7d11d6ddd9bb0bf4e160fd4ba2f146eba0f9ff06aa7","tls_matches":false,"report_data_binds_signer":true,"source_url":"https://api.nano-gpt.com/v1/tee/attestation?model=TEE%2Fqwen3.6-35b-a3b-uncensored","trust_tier":"tee-only","route":{"route_binding":"not-verified","upstream_model":"TEE/qwen3.6-35b-a3b-uncensored"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"failed","detail":"The expected channel key binding failed."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"124c7ef35ce1006a7f41432ded498933ef89a6ae721c12e460933d74b7849546","parsed_evidence_digest":"b773598f01ac2ccb471f5b0668a7a52f08823c1fbbdf4989518270086bb870b1"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12214,"check":{"provider":"near","id":"near-gemma-4-31b","label":"Gemma 4 31B (TEE)","model":"google/gemma-4-31B-it","status":"partial","ts":"2026-07-16T12:47:14.642771767+00:00","latency_ms":7475,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010400000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000","report_data":"2ad96997ac5762e37f81b72c404c21f0d6baa53a9c6b8872113fb42716710b9b53a799034c7ca1c8cb35d28a94eff34ac7035609b6160c2e3d0ee8ed305ef957","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"53a799034c7ca1c8cb35d28a94eff34ac7035609b6160c2e3d0ee8ed305ef957"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5","tls_matches":false,"last_deploy_tag":"v0.0.309","app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6","nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://cloud-api.near.ai/v1/attestation/report?model=google/gemma-4-31B-it&signing_algo=ed25519&nonce=53a799034c7ca1c8cb35d28a94eff34ac7035609b6160c2e3d0ee8ed305ef957","signing_public_key":"2ad96997ac5762e37f81b72c404c21f0d6baa53a9c6b8872113fb42716710b9b","signing_algo":"ed25519","trust_tier":"app-e2ee","e2ee_capability":"ed25519","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"09fc0bbd8a2dfe10b982adbf82e9046b9c483e64e7f48a083b5eb9ec1bbd8694","parsed_evidence_digest":"06c225e9a8ed0131497f64e95c3b56c1766bde2327a01b577a8a8db8fc8274e7"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12213,"check":{"provider":"near","id":"near-glm-5-1","label":"GLM 5.1 (TEE)","model":"zai-org/GLM-5.1-FP8","status":"partial","ts":"2026-07-16T12:47:09.300758202+00:00","latency_ms":5342,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010400000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"012c650eae81601afade86d1aa5ad898473b992081998026bb42ee1524ce99ee38000000000000000000000000000000","report_data":"40ef1aadbb12f26cf4c2d499b9e7a7b043da4388200715abed573fa135a561bba190614d40e4139bc0a4328b30765a49a5ccdc40fe6c6ebf05f7e721e1e80af0","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"6464dcacd5c7ca6f0de0e081327df1fa842f29ec8038176554c816809977796603c874530219ddeeaf068c20209f5b1d","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"a190614d40e4139bc0a4328b30765a49a5ccdc40fe6c6ebf05f7e721e1e80af0"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5","tls_matches":false,"app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6","nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://cloud-api.near.ai/v1/attestation/report?model=zai-org/GLM-5.1-FP8&signing_algo=ed25519&nonce=a190614d40e4139bc0a4328b30765a49a5ccdc40fe6c6ebf05f7e721e1e80af0","signing_public_key":"40ef1aadbb12f26cf4c2d499b9e7a7b043da4388200715abed573fa135a561bb","signing_algo":"ed25519","trust_tier":"app-e2ee","e2ee_capability":"ed25519","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"118a0671a172cca8eda92c22d5c6154690b0cc856e008dc8c7740890075dbdca","parsed_evidence_digest":"bf7dda48cc8731f5e452d2b2f4474ea6b4051244a933f963963256ae2d61ddc7"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12212,"check":{"provider":"near","id":"near-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","model":"openai/gpt-oss-120b","status":"partial","ts":"2026-07-16T12:47:02.388351004+00:00","latency_ms":6912,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"07010300000000000000000000000000","mr_seam":"49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000","report_data":"21189bb96e2e0ff7598bd618bed473045cd6da886ddc844dc23f30bd2bfdb62d11b4872f5c1693b14bc9a2b62da0c7627fe8493e69385dbcb011bf4a5676af34","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"11b4872f5c1693b14bc9a2b62da0c7627fe8493e69385dbcb011bf4a5676af34"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5","tls_matches":false,"app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b","nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://cloud-api.near.ai/v1/attestation/report?model=openai/gpt-oss-120b&signing_algo=ed25519&nonce=11b4872f5c1693b14bc9a2b62da0c7627fe8493e69385dbcb011bf4a5676af34","signing_public_key":"21189bb96e2e0ff7598bd618bed473045cd6da886ddc844dc23f30bd2bfdb62d","signing_algo":"ed25519","trust_tier":"app-e2ee","e2ee_capability":"ed25519","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"de264c7782d01fcbaf8016716890bbfb4a68a67ca29efacfa1362b1463cadcb2","parsed_evidence_digest":"ffa00d9c477fd93284bfd5f6e9e56385339251da85e4914af264ecfc57711f5a"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12211,"check":{"provider":"near","id":"near-qwen-3.5-122b","label":"Qwen 3.5 122B (TEE)","model":"Qwen/Qwen3.5-122B-A10B","status":"partial","ts":"2026-07-16T12:46:50.077997572+00:00","latency_ms":12310,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010400000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"0166007399f064f058af68771c552bcae150c9f88622305631b5141da1aa2f7b7e000000000000000000000000000000","report_data":"d0aa20bcf567cc0c7c914608967dbd4c7a17e10b600802d45923434ce323f82399379c8f934b924ac9e12ab02033477927782e9fa67f72f4067e1a9b0de8c856","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"18c28d262ab4733031c19fa1af233686e227a789955ba9dba2065b398c9f5dbfb76133d751dac412540dc5ac992b1b73","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"99379c8f934b924ac9e12ab02033477927782e9fa67f72f4067e1a9b0de8c856"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5","tls_matches":false,"last_deploy_tag":"v0.0.309","app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6","nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://cloud-api.near.ai/v1/attestation/report?model=Qwen/Qwen3.5-122B-A10B&signing_algo=ed25519&nonce=99379c8f934b924ac9e12ab02033477927782e9fa67f72f4067e1a9b0de8c856","signing_public_key":"d0aa20bcf567cc0c7c914608967dbd4c7a17e10b600802d45923434ce323f823","signing_algo":"ed25519","trust_tier":"app-e2ee","e2ee_capability":"ed25519","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"7598215e3ad8c0b74fa1ba9f95f134f4689f01b0f2c7967635e9d44c7221ff91","parsed_evidence_digest":"05fb170587fbad9089553488fc433319a966e2bc6f15d61384faaa5436b83e2d"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12217,"check":{"provider":"near","id":"near-qwen-qwen3-6-27b-fp8","label":"Qwen/Qwen3.6 27B FP8 (TEE)","model":"Qwen/Qwen3.6-27B-FP8","status":"partial","ts":"2026-07-16T12:47:56.928483107+00:00","latency_ms":7162,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010400000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000","report_data":"052233b7fb537337f2f4f9c8a239297f8a5d8876b2ccce49dfa684bb53361c24f1a610509049e49428df61d4df63c2467a2b66bdd177a99915cb8e5b76d88664","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"f1a610509049e49428df61d4df63c2467a2b66bdd177a99915cb8e5b76d88664"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5","tls_matches":false,"last_deploy_tag":"v0.0.309","app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6","nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://cloud-api.near.ai/v1/attestation/report?model=Qwen/Qwen3.6-27B-FP8&signing_algo=ed25519&nonce=f1a610509049e49428df61d4df63c2467a2b66bdd177a99915cb8e5b76d88664","signing_public_key":"052233b7fb537337f2f4f9c8a239297f8a5d8876b2ccce49dfa684bb53361c24","signing_algo":"ed25519","trust_tier":"app-e2ee","e2ee_capability":"ed25519","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"9596eccc405f6b72d261d7b4329156a6a7cde8e29e633dd8afbf581e2bff5f09","parsed_evidence_digest":"eb706c96740b1f28ff426ba6a88c3ebb7d656d3b0513042156c9079d3cc16ab3"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12215,"check":{"provider":"near","id":"near-qwen3-vl-30b","label":"Qwen3-VL 30B (TEE)","model":"Qwen/Qwen3-VL-30B-A3B-Instruct","status":"partial","ts":"2026-07-16T12:47:22.117981362+00:00","latency_ms":28728,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"07010300000000000000000000000000","mr_seam":"49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000","report_data":"31ddf80d420921b91ff4a41d933a15b46a3840e80031804c1c5ba4f25c4e88ccddc0e906abf18e01615f8d63c8c1b3d37ea4f67606b72b9712121d3ff3a76cc7","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"ddc0e906abf18e01615f8d63c8c1b3d37ea4f67606b72b9712121d3ff3a76cc7"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5","tls_matches":false,"app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b","nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://cloud-api.near.ai/v1/attestation/report?model=Qwen/Qwen3-VL-30B-A3B-Instruct&signing_algo=ed25519&nonce=ddc0e906abf18e01615f8d63c8c1b3d37ea4f67606b72b9712121d3ff3a76cc7","signing_public_key":"31ddf80d420921b91ff4a41d933a15b46a3840e80031804c1c5ba4f25c4e88cc","signing_algo":"ed25519","trust_tier":"app-e2ee","e2ee_capability":"ed25519","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"3641a8d7d30ca020154461e01012c5706e51a055406d5858119881ef158caf1c","parsed_evidence_digest":"d2b751ec858cf16bba0e17d6e15f909986156e8a0e0096e3e332531ceb8b0e46"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12216,"check":{"provider":"near","id":"near-qwen3.6-35b","label":"Qwen3.6 35B (TEE)","model":"Qwen/Qwen3.6-35B-A3B-FP8","status":"partial","ts":"2026-07-16T12:47:50.846540370+00:00","latency_ms":6081,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"07010300000000000000000000000000","mr_seam":"49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000","report_data":"aba45f0b8f90869baab26db02e8b01354bb8f8730769c60650cb7a635da602d41f4b860aa3e97f1c6fd3e26f728765c5ce2af47b87c39acdee63e9c8c8071641","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"1f4b860aa3e97f1c6fd3e26f728765c5ce2af47b87c39acdee63e9c8c8071641"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"0355dbe22c22a762cb063cfc3d7ebe775fe6ce0fa88aa583c2f3ed2b93a79de5","tls_matches":false,"app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b","nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://cloud-api.near.ai/v1/attestation/report?model=Qwen/Qwen3.6-35B-A3B-FP8&signing_algo=ed25519&nonce=1f4b860aa3e97f1c6fd3e26f728765c5ce2af47b87c39acdee63e9c8c8071641","signing_public_key":"aba45f0b8f90869baab26db02e8b01354bb8f8730769c60650cb7a635da602d4","signing_algo":"ed25519","trust_tier":"app-e2ee","e2ee_capability":"ed25519","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"0ecf6512119786b365f5517969bc9ee073cb4e3b00e2c30020464f49157b38c2","parsed_evidence_digest":"416f836e213f5f6e16e3a95ecd1348f752c7ffd544653ea5af50a39f28709733"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12251,"check":{"provider":"ppq","id":"ppq-gemma4","label":"Gemma 4 31B (TEE)","model":"private/gemma4-31b","status":"partial","ts":"2026-07-16T12:47:08.974713627+00:00","latency_ms":5273,"error":"Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b","measurement":"98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.121","release_digest":"a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gemma4-31b-1.inf10.tinfoil.sh","backend_tdx":{"tee_tcb_svn":"0b010300000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a0394825e3555b92558d6130d1193bf3049e06a67633ed2a735bb3203cdf6ff1f","rtmr0":"67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591","rtmr1":"46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51","rtmr2":"48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b","rtmr3":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","tcb_level":"status=UpToDate, advisories=[]"},"backend_tls_matches":true,"backend_sigstore_repo":"tinfoilsh/confidential-gemma4-31b","backend_sigstore_tag":"v0.0.18","backend_sigstore_match":true,"backend_sigstore_bundle_verified":true,"backend_sigstore_error_is_transient":false,"backend_release_digest":"c387c254054c0d74662a26ff6ee767649196b07d35694f54edd7601a7729bd85","backend_images_verified":true,"certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"],"backend_config_images":["ghcr.io/tinfoilsh/confidential-gemma4-31b@sha256:73cec121874dd0a40192d1e5074f9a674f74fe0749d58eb0aee76d5cc351257b"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104","ghcr.io/tinfoilsh/confidential-gemma4-31b@sha256:73cec121874dd0a40192d1e5074f9a674f74fe0749d58eb0aee76d5cc351257b"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b","signing_public_key":"48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b","signing_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"corroborated","evidence":"The configured Tinfoil backend enclave independently attested; the request route is not bound."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"acf306b477fc284e3f62c7bb43a10196639cc2f77c5c5912c59b85ae1a1afed9","parsed_evidence_digest":"08b9b4e524cfb59f2aa5e8d3ac35376eea1302ad86a8ced5dd21f1ef451b617a"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12250,"check":{"provider":"ppq","id":"ppq-glm-5-2","label":"GLM 5.2 (TEE)","model":"private/glm-5-2","status":"partial","ts":"2026-07-16T12:47:06.957477055+00:00","latency_ms":2017,"error":"Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"1411760c573593161a23f75f6be22d8910958b53cc17867963ade74b7d02b3aca080168d24bcda66bbf37864a380caa2b16f6512ca26578e9904af70a8277732","measurement":"98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.121","release_digest":"a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef","sigstore_repo":"tinfoilsh/confidential-model-router","certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2","signing_public_key":"a080168d24bcda66bbf37864a380caa2b16f6512ca26578e9904af70a8277732","signing_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"057e53d29b2a0c93814e3d1952064ce88f5037d3c6df62c1a4a4dee4a8c6be49","parsed_evidence_digest":"a58c794f5d4704ad6f65967ff6b2085980fea8f7cb109415909120f1ebcf63b9"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12247,"check":{"provider":"ppq","id":"ppq-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","model":"private/gpt-oss-120b","status":"partial","ts":"2026-07-16T12:46:50.078480949+00:00","latency_ms":8674,"error":"Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b","measurement":"98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.121","release_digest":"a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"gpt-oss-120b-1.inf10.tinfoil.sh","backend_tdx":{"tee_tcb_svn":"0b010300000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"8d76f170e82d1fee347996dd1dfccbadca299e48bd80a8ff2456224052a2b41482eaf549b1464fed82c64bf625a923f9a85aaf8ade0d16bceb5fb6a125f26b5b","rtmr0":"54e50579fc55aab63b59301f6e1941ff8f67b035ce71c758c98f341a9e809044a08838b00aa24ee296d43c552faafd1f","rtmr1":"46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51","rtmr2":"956074db8f56683dd5c630dda23517c4e3f35c0760a94379e0dc959841d57b6acade8992da61c9767b4917141d059c0c","rtmr3":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","tcb_level":"status=UpToDate, advisories=[]"},"backend_tls_matches":true,"backend_sigstore_repo":"tinfoilsh/confidential-gpt-oss-120b","backend_sigstore_tag":"v0.0.26","backend_sigstore_match":true,"backend_sigstore_bundle_verified":true,"backend_sigstore_error_is_transient":false,"backend_release_digest":"4f121366f0b5858672d96ff1ff25d3961d432813df6bb1f3974331ce5dac0972","backend_images_verified":true,"certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"],"backend_config_images":["vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104","vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b","signing_public_key":"48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b","signing_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"corroborated","evidence":"The configured Tinfoil backend enclave independently attested; the request route is not bound."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"d2a179163d2a032cd27af72eab064e0688f49b6a7cb256fb629894ead40a4beb","parsed_evidence_digest":"5ba2bde2f843eb66748aa3c0eb5921502c866efc84d0aeeb594610eb601098c0"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12252,"check":{"provider":"ppq","id":"ppq-kimi-k2-6","label":"Kimi K2.6 (TEE)","model":"private/kimi-k2-6","status":"unreachable","ts":"2026-07-16T12:47:14.248653428+00:00","latency_ms":2367,"error":"Network error: Tinfoil attestation request to kimi-k2-6.inf13.tinfoil.sh: error sending request for url (https://kimi-k2-6.inf13.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"342133ccad6f32f4dcb44c1c4039010455279b2325e2009b9cd9c83e3c8a5bcf","parsed_evidence_digest":"c2f7937f9df975538ce01f68018fe0336e57c6e4fde4dfab68d69016a4fbce43"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12248,"check":{"provider":"ppq","id":"ppq-llama3-70b","label":"Llama 3.3 70B (TEE)","model":"private/llama3-3-70b","status":"partial","ts":"2026-07-16T12:46:58.753274032+00:00","latency_ms":5653,"error":"Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified","snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b","measurement":"98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"6d33185ed87923c61763862af38119e38db7a0e9989ec318e3059c1e49b9f452"},"images_verified":true,"report_data_binds_signer":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.121","release_digest":"a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef","sigstore_repo":"tinfoilsh/confidential-model-router","backend_host":"llama3-3-70b.tinfoil.containers.tinfoil.dev","backend_snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d","measurement":"be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"6a6caf2d148e6cb189a677324aa77a46ba1d150d9663bf71532f49c64234394d"},"backend_tls_matches":true,"backend_sigstore_repo":"tinfoilsh/confidential-llama3-3-70b","backend_sigstore_tag":"v0.0.25","backend_sigstore_match":true,"backend_sigstore_bundle_verified":true,"backend_sigstore_error_is_transient":false,"backend_release_digest":"8a974719331bc6e5ed638b5f95a769a650123a5699ec5bce5dc5a2dced1537d1","backend_images_verified":true,"certificate_domain_matches":true,"certificate_binds_hpke":true,"certificate_binds_attestation":true,"router_config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"],"backend_config_images":["vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"],"config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104","vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"],"source_url":"https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b","signing_public_key":"48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b","signing_algo":"hpke","trust_tier":"app-e2ee","e2ee_capability":"hpke","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"corroborated","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"corroborated","evidence":"The configured Tinfoil backend enclave independently attested; the request route is not bound."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"f510ed2ebec5af86a6b14c34a8f0868312f08e5a720f678f40984cc1a7364d19","parsed_evidence_digest":"cda8d17417daaa4292b01b269e439087d52188e13dd9953c9f51f3d9bd647552"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12249,"check":{"provider":"ppq","id":"ppq-qwen3-vl","label":"Qwen3-VL 30B (TEE)","model":"private/qwen3-vl-30b","status":"unreachable","ts":"2026-07-16T12:47:04.407215461+00:00","latency_ms":2550,"error":"Network error: Tinfoil attestation request to qwen3-vl-30b.inf10.tinfoil.sh: error sending request for url (https://qwen3-vl-30b.inf10.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ private-mode evidence identifies the Tinfoil model router."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"f73df4b8c9516fde5ff06e193dad148cb1bd38e02b8eb486bc2c353d2446aa45","parsed_evidence_digest":"a2597e9845be832b73b10f96d9a44a5d3246ae345392a63e62e150570096ac56"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12267,"check":{"provider":"privatemode","id":"privatemode-gemma-4-31b","label":"Gemma 4 31b","model":"gemma-4-31b","status":"partial","ts":"2026-07-16T12:46:50.080420098+00:00","latency_ms":3020,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"cb8b987a40b67770220bb32d8131314bf5c398d422409da8d2050bf1bffc02c7","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12268,"check":{"provider":"privatemode","id":"privatemode-gemma-latest","label":"Gemma Latest","model":"gemma-latest","status":"partial","ts":"2026-07-16T12:46:53.100937715+00:00","latency_ms":170,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"846922c3aeccb1915b8da8b5e47c935da0b462fd6687c4660f9d6f8c0a0ca7f1","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12269,"check":{"provider":"privatemode","id":"privatemode-gpt-oss-120b","label":"Gpt Oss 120b","model":"gpt-oss-120b","status":"partial","ts":"2026-07-16T12:46:53.271204016+00:00","latency_ms":165,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"948ff8fce9fb3002e8afff109818357fa66a10e8ab04c0474b6f4045d2d5ec20","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12270,"check":{"provider":"privatemode","id":"privatemode-gpt-oss-latest","label":"Gpt Oss Latest","model":"gpt-oss-latest","status":"partial","ts":"2026-07-16T12:46:53.436386868+00:00","latency_ms":174,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"24c010dbed2abdc109d258401aa98a2af3ed29621ca376848abe504748f4e0eb","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12271,"check":{"provider":"privatemode","id":"privatemode-kimi-k2-6","label":"Kimi K2.6","model":"kimi-k2.6","status":"partial","ts":"2026-07-16T12:46:53.611308606+00:00","latency_ms":156,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"70db731864b20d8dff212169ee8c21ea98c1f5ab6d239e59f22a6ef4a0738e59","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12272,"check":{"provider":"privatemode","id":"privatemode-qwen3-embedding-4b","label":"Qwen3 Embedding 4b","model":"qwen3-embedding-4b","status":"partial","ts":"2026-07-16T12:46:53.767800960+00:00","latency_ms":160,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"d62f15a67a852e8053de861e130ab3c5b154da7adc6c222c2b9fc52dcdb5bbf0","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12273,"check":{"provider":"privatemode","id":"privatemode-voxtral-mini-3b","label":"Voxtral Mini 3b","model":"voxtral-mini-3b","status":"partial","ts":"2026-07-16T12:46:53.928575439+00:00","latency_ms":170,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"72d21862c628e5c80a9c954e44a29629d9daae8463a12adeb087a121d32bc48b","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12274,"check":{"provider":"privatemode","id":"privatemode-whisper-large-v3","label":"Whisper Large V3","model":"whisper-large-v3","status":"partial","ts":"2026-07-16T12:46:54.099118881+00:00","latency_ms":98,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"c1ab819f402d1923647c9ced1db52215dddac654b766c3b61ae1c8f20461e104","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12208,"check":{"provider":"redpill","id":"redpill-phala-gemma-4-26b-a4b-uncensored","label":"Phala/gemma 4 26b A4b Uncensored (TEE)","model":"phala/gemma-4-26b-a4b-uncensored","status":"failed","ts":"2026-07-16T12:46:50.077921198+00:00","latency_ms":9767,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; NVIDIA GPU evidence verification was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000015f85b42b261354f8aa1df918ce426455e3405fb953e5ae5e7facfb533f416dc","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"c2ebede7c2c632381123e3193b01f5f3fa45cc6c6327b2d0536749348ceeb408","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.redpill.ai/v1/attestation/report?model=phala/gemma-4-26b-a4b-uncensored&nonce=15f85b42b261354f8aa1df918ce426455e3405fb953e5ae5e7facfb533f416dc","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"7ede7a2fa0034e1f2178140fdd4cf91bd63cfd74a5d183930c46d663222bf0eb","parsed_evidence_digest":"9d7358cc733cb1d68317ff9071570926013aa52c496e2538ad8c031368143a51"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12209,"check":{"provider":"redpill","id":"redpill-phala-qwen3-6-35b-a3b-uncensored","label":"Phala/qwen3.6 35b A3b Uncensored (TEE)","model":"phala/qwen3.6-35b-a3b-uncensored","status":"failed","ts":"2026-07-16T12:46:59.845778338+00:00","latency_ms":6765,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; NVIDIA GPU evidence verification was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000213ef021e16e2254c4d1f25860c31e1670c1ab2b4b6e5737397c567053653252","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"c2ebede7c2c632381123e3193b01f5f3fa45cc6c6327b2d0536749348ceeb408","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.redpill.ai/v1/attestation/report?model=phala/qwen3.6-35b-a3b-uncensored&nonce=213ef021e16e2254c4d1f25860c31e1670c1ab2b4b6e5737397c567053653252","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"e4a98d9f53a3521e784ca9056a63dc14b16911afa0f100dc3c264178e9725004","parsed_evidence_digest":"dd6847d35f7bfb58a60278ea7af49819840a0121886c903434707166fbfeefbd"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12210,"check":{"provider":"redpill","id":"redpill-phala-uncensored-24b","label":"Phala/uncensored 24b (TEE)","model":"phala/uncensored-24b","status":"failed","ts":"2026-07-16T12:47:06.611316802+00:00","latency_ms":6254,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; NVIDIA GPU evidence verification was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000a9232b013866634003349b822a8082ac841d75616000b29cbd0e78f8de947134","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"compose_hash_valid":false,"tls_fingerprint":"c2ebede7c2c632381123e3193b01f5f3fa45cc6c6327b2d0536749348ceeb408","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.redpill.ai/v1/attestation/report?model=phala/uncensored-24b&nonce=a9232b013866634003349b822a8082ac841d75616000b29cbd0e78f8de947134","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"05f8fc66328556400a8c7e676aece3ffaf115395fa3e0c7d2b14c14103662075","parsed_evidence_digest":"aad8b65cc4ce0a66e37b2056662d070964caa0536c7740b75f586e4d034fe729"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12189,"check":{"provider":"tinfoil","id":"tinfoil-gemma4","label":"Gemma 4 31B","model":"gemma4-31b","status":"verified","ts":"2026-07-16T12:47:09.148816217+00:00","latency_ms":4282,"tdx":{"tee_tcb_svn":"0b010300000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a0394825e3555b92558d6130d1193bf3049e06a67633ed2a735bb3203cdf6ff1f","rtmr0":"67dddcfc052d86247f797ab11f58c6552f8073e8375121b777fb79f4cdddae196381f8b76d40ea1343c99063a9366591","rtmr1":"46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51","rtmr2":"48c6559c034f1a127bfb9d38576e8efdb53b5237c1440adb926bdbd74d29932a67b6b03c0eb1bc68142d4395c022ce5b","rtmr3":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","tcb_level":"status=UpToDate, advisories=[]"},"images_verified":true,"tls_fingerprint":"dd34cd14f50bc0e410886c75bb387a6a4afa3704a03ad22386ec8fb8fe5cef9a","tls_matches":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.18","release_digest":"c387c254054c0d74662a26ff6ee767649196b07d35694f54edd7601a7729bd85","sigstore_repo":"tinfoilsh/confidential-gemma4-31b","config_images":["ghcr.io/tinfoilsh/confidential-gemma4-31b@sha256:73cec121874dd0a40192d1e5074f9a674f74fe0749d58eb0aee76d5cc351257b"],"source_url":"https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation","trust_tier":"hw-verified-tls","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil router endpoint."},"workload_operator":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil workload endpoint."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"A live TLS handshake proves possession of the quote-bound private key."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"906bd0109e47bf04bf3f5a0779f1c6ef3b7eee324e573db7d563dd85ddaf01c2","parsed_evidence_digest":"e0aba67a3d12029964c0222a77c90d5e59a4f64749104e494a211873cd5fb331"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12190,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-120b","label":"GPT-OSS 120B","model":"gpt-oss-120b","status":"verified","ts":"2026-07-16T12:47:13.431613962+00:00","latency_ms":3082,"tdx":{"tee_tcb_svn":"0b010300000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"7357a10d2e2724dffe68813e3cc4cfcde6814d749f2fb62e3953e54f6e0b50a219786afe2cd478f684b52c61837e1114","mr_config_id":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","report_data":"8d76f170e82d1fee347996dd1dfccbadca299e48bd80a8ff2456224052a2b41482eaf549b1464fed82c64bf625a923f9a85aaf8ade0d16bceb5fb6a125f26b5b","rtmr0":"54e50579fc55aab63b59301f6e1941ff8f67b035ce71c758c98f341a9e809044a08838b00aa24ee296d43c552faafd1f","rtmr1":"46658ae5655794d3ea0130e2d425aa002f224c7a47c1eb1792f656d79f808aac6006ce84d71ee24d97c3eea42c867e51","rtmr2":"956074db8f56683dd5c630dda23517c4e3f35c0760a94379e0dc959841d57b6acade8992da61c9767b4917141d059c0c","rtmr3":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","tcb_level":"status=UpToDate, advisories=[]"},"images_verified":true,"tls_fingerprint":"8d76f170e82d1fee347996dd1dfccbadca299e48bd80a8ff2456224052a2b414","tls_matches":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.26","release_digest":"4f121366f0b5858672d96ff1ff25d3961d432813df6bb1f3974331ce5dac0972","sigstore_repo":"tinfoilsh/confidential-gpt-oss-120b","config_images":["vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"],"source_url":"https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation","trust_tier":"hw-verified-tls","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil router endpoint."},"workload_operator":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil workload endpoint."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"A live TLS handshake proves possession of the quote-bound private key."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"c032a6ba524a832855a9a5ecb7cbb2ac10197ca24042d9225372e4431d6f6497","parsed_evidence_digest":"fd11ff9635e0b415fd8f1c6f88f30a9ee8776eb753c8b4a824e6194c6406d6d5"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12191,"check":{"provider":"tinfoil","id":"tinfoil-gpt-oss-safeguard","label":"GPT-OSS Safeguard 120B","model":"gpt-oss-safeguard-120b","status":"verified","ts":"2026-07-16T12:47:16.514619230+00:00","latency_ms":3370,"snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"8dff9ead5e54f3905e0325f557ea51f2a7daf89f989e424b73919669373d4a1e6668665ddbf0541157ffb70e94f438ba3d34a6551112ee09e42393b9450cb031","measurement":"f58e91177fe591d3e4a9d6fdd26e9173990123c0ec9be3d66076dfb9210834b337c0a08c4ce66a180306347012d4de43","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"c360a44338651c87ac3816c7cacd0d653b3399008b2b107c40dd571ca5784df7"},"images_verified":true,"tls_fingerprint":"8dff9ead5e54f3905e0325f557ea51f2a7daf89f989e424b73919669373d4a1e","tls_matches":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.8","release_digest":"7d7ecc9c5430e6f8324b30712d0d8346d04eff45a98e5b732de0f6160dfc7c0c","sigstore_repo":"tinfoilsh/confidential-gpt-oss-safeguard-120b","config_images":["vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"],"source_url":"https://gpt-oss-safeguard-120b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation","trust_tier":"hw-verified-tls","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil router endpoint."},"workload_operator":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil workload endpoint."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"A live TLS handshake proves possession of the quote-bound private key."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"d8efec7d9e1df7b3ff50a95e009dfa728b3a3953ad479e9e9131fbc74701d9e7","parsed_evidence_digest":"8425f124b6b7e9679b050aa7c44138fb10532dc72795cc3d90dfcf6602cdc11a"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12188,"check":{"provider":"tinfoil","id":"tinfoil-kimi-k2-6","label":"Kimi K2.6","model":"kimi-k2-6","status":"unreachable","ts":"2026-07-16T12:47:08.838222246+00:00","latency_ms":310,"error":"Network error: Tinfoil attestation request to kimi-k2-6.inf13.tinfoil.sh: error sending request for url (https://kimi-k2-6.inf13.tinfoil.sh/.well-known/tinfoil-attestation)","trust_tier":"none","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"declared","evidence":"Configured direct Tinfoil router endpoint."},"workload_operator":{"organization":"tinfoil","confidence":"declared","evidence":"Configured direct Tinfoil workload endpoint."},"tee_platform":{"organization":"tinfoil","confidence":"declared","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"fb670d094ee9bfed45d6299709f01fee2db6d7a2fc09796c74f5c07bb4693e58","parsed_evidence_digest":"c2f7937f9df975538ce01f68018fe0336e57c6e4fde4dfab68d69016a4fbce43"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12187,"check":{"provider":"tinfoil","id":"tinfoil-llama","label":"Llama 3.3 70B","model":"llama3-3-70b","status":"verified","ts":"2026-07-16T12:47:06.465633381+00:00","latency_ms":2372,"snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d","measurement":"be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"c360a44338651c87ac3816c7cacd0d653b3399008b2b107c40dd571ca5784df7"},"images_verified":true,"tls_fingerprint":"281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde6884","tls_matches":true,"sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.25","release_digest":"8a974719331bc6e5ed638b5f95a769a650123a5699ec5bce5dc5a2dced1537d1","sigstore_repo":"tinfoilsh/confidential-llama3-3-70b","config_images":["vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"],"source_url":"https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation","trust_tier":"hw-verified-tls","route":{"route_binding":"verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil router endpoint."},"workload_operator":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil workload endpoint."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"A live TLS handshake proves possession of the quote-bound private key."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"verified","detail":"A request-bound route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"07e9ce03008eb04b2564fa9a2fdacb7ea19d546ab973edd6342911ea5af7dde8","parsed_evidence_digest":"2e5373401f93e3de5d32565d8b9847b21fc2fbff2f140655ca0835f231988b94"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12186,"check":{"provider":"tinfoil","id":"tinfoil-router","label":"Router","status":"verified","ts":"2026-07-16T12:46:50.076564162+00:00","latency_ms":16389,"snp":{"chip_id":"1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44","report_data":"2f03010e478a5361fe6f08355ab74817c7d1dada6f9a60aa31e492163b0e881e48b5d4270fb1750ac3aaff67651e79febf2aa5e608eb66927d7cd7c78b98dc5b","measurement":"98f51239d249b22e13e21ae7568e1a8b41042ba9484e3377c7a5806b53135d720d6bedc44a79c4a44df251a2031ce7e0","family_id":"00000000000000000000000000000000","image_id":"00000000000000000000000000000000","generation":"Genoa","current_tcb":"bl=10 tee=0 snp=23 ucode=84","reported_tcb":"bl=10 tee=0 snp=23 ucode=84","policy_bits":196608,"platform_smt":true,"platform_tsme":true,"debug_allowed":false,"vcek_fingerprint":"c360a44338651c87ac3816c7cacd0d653b3399008b2b107c40dd571ca5784df7"},"images_verified":true,"tls_fingerprint":"3d47e93ba9cfa10f1eed509ae3717dbf965bb21645dd77ca4d57a51dccd22129","tls_matches":false,"version":"v0.0.121","sigstore_match":true,"sigstore_bundle_verified":true,"sigstore_tag":"v0.0.121","release_digest":"a6c14861de618a89b8f7279f03b9b90aeb479730496e8db5713e2502f8c81cef","sigstore_repo":"tinfoilsh/confidential-model-router","config_images":["ghcr.io/tinfoilsh/confidential-model-router@sha256:8bc6dea75efd7cae123dad67d5372fc76068407aa9417f923dc180df7c345104"],"source_url":"https://inference.tinfoil.sh/.well-known/tinfoil-attestation","trust_tier":"tee-only","route":{"route_binding":"not-verified","router":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil router endpoint."},"workload_operator":{"organization":"tinfoil","confidence":"verified","evidence":"Configured direct Tinfoil workload endpoint."},"tee_platform":{"organization":"tinfoil","confidence":"verified","evidence":"Tinfoil target and deployment evidence."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-applicable","detail":"This gateway target does not claim a quote-bound client channel."},"channel":{"state":"not-applicable","detail":"Gateway TLS termination is expected for this target."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"verified","detail":"Signed source/release provenance matched the measured workload."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"3f2ef2ce1085b789c452574fe69c64ea2fd4a455513cd0b551b79d6846d26c0b","parsed_evidence_digest":"b82e4a5b883cad735750a0dc8ad41d70a590b08054ae44fbc1f1c09aead2aefb"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12202,"check":{"provider":"venice","id":"venice-e2ee-deepseek-v4-flash","label":"E2ee Deepseek V4 Flash (TEE)","model":"e2ee-deepseek-v4-flash","status":"partial","ts":"2026-07-16T12:48:02.178769943+00:00","latency_ms":6805,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010400000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"0166007399f064f058af68771c552bcae150c9f88622305631b5141da1aa2f7b7e000000000000000000000000000000","report_data":"c5f6bf2f1bc666569157ec1bb4066cdaf48d026c000000000000000000000000bbf96ea245690eeccabce2e5982467fa072768d1c6524a3c25258913e6e9d930","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"18c28d262ab4733031c19fa1af233686e227a789955ba9dba2065b398c9f5dbfb76133d751dac412540dc5ac992b1b73","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"bbf96ea245690eeccabce2e5982467fa072768d1c6524a3c25258913e6e9d930"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"last_deploy_tag":"v0.0.309","app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6","nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=bbf96ea245690eeccabce2e5982467fa072768d1c6524a3c25258913e6e9d930","signing_public_key":"0434ba223c3175c4debee8cd12d72f55869b6cf1ccc5ff578e940a23c7bf9dcf3abd6530ce8d8624ffd150900fd31bae802eb75367a154a75e39cc87f748b63b84","signing_algo":"ecdsa","trust_tier":"app-e2ee","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","upstream_model":"deepseek-ai/DeepSeek-V4-Flash"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"e2b374aa3b10a76736c0bfcca2dce5286499928e74d11108ec26fc76a8071ee7","parsed_evidence_digest":"20dab21e67e40fdef2bd7ff963231ab5eef63a5ed1e4f7cdb7ca6acdffaa653e"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12203,"check":{"provider":"venice","id":"venice-e2ee-gemma-4-26b-a4b-uncensored-p","label":"E2ee Gemma 4 26b A4b Uncensored P (TEE)","model":"e2ee-gemma-4-26b-a4b-uncensored-p","status":"failed","ts":"2026-07-16T12:48:08.984108452+00:00","latency_ms":5867,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000f48569f765986418554fa21782cd711b5826f46a0149c77e0d1554e339cb498d","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"f48569f765986418554fa21782cd711b5826f46a0149c77e0d1554e339cb498d"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=f48569f765986418554fa21782cd711b5826f46a0149c77e0d1554e339cb498d","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"phala/gemma-4-26b-a4b-uncensored"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"191a0df75a50ac0ec75c40bff87caefb097f89dca0655ff186d152977ca7da8f","parsed_evidence_digest":"8e7b0be5699b715cb3f0234597e4ba8614c987e7e4915af127dcb8482a0ada01"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12204,"check":{"provider":"venice","id":"venice-e2ee-glm-5-2-p","label":"E2ee Glm 5 2 P (TEE)","model":"e2ee-glm-5-2-p","status":"failed","ts":"2026-07-16T12:48:14.851380961+00:00","latency_ms":6546,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000367dc7ebca3169fc90de0e950bd89bfe4ca665dd9afe07519a3a92ef913b3061","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"367dc7ebca3169fc90de0e950bd89bfe4ca665dd9afe07519a3a92ef913b3061"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=367dc7ebca3169fc90de0e950bd89bfe4ca665dd9afe07519a3a92ef913b3061","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"z-ai/glm-5.2"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"c3b0080a6995b7ee8c657b50089aaf9a2e480725300e821ae03b2ac059ef09ca","parsed_evidence_digest":"e48a582232f871c8ecbfa50efffe9b498d0a800033254ae0d322bba595d81f66"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12205,"check":{"provider":"venice","id":"venice-e2ee-qwen3-6-27b","label":"E2ee Qwen3 6 27b (TEE)","model":"e2ee-qwen3-6-27b","status":"unreachable","ts":"2026-07-16T12:48:21.397408421+00:00","latency_ms":32494,"error":"Network error: Request failed: error sending request for url (https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=1be26ec17080e0216c52c920519fa40afb829cbaf3e7d083e25652f4e33e7de8)","trust_tier":"none","route":{"route_binding":"not-verified"},"gates":{"hardware":{"state":"not-proven","detail":"No current hardware evidence was available."},"tcb":{"state":"not-proven","detail":"TCB policy could not be evaluated."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"not-proven","detail":"No expected workload measurement was verified."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"a2516ad3bd40eb891e2276498f94e77e60ef1e89e79d7f7f2d201a19b6b5f761","parsed_evidence_digest":"a6c6b95420c226a378b0fece0989eb74cd4a89141ce6781d0b698cff909b61e2"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12206,"check":{"provider":"venice","id":"venice-e2ee-qwen3-6-35b-a3b-uncensored-p","label":"E2ee Qwen3 6 35b A3b Uncensored P (TEE)","model":"e2ee-qwen3-6-35b-a3b-uncensored-p","status":"failed","ts":"2026-07-16T12:48:53.892376701+00:00","latency_ms":4602,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000001a7d2e18efe8317836a320ae8b4f2d86a71629a84d1d3466f5320e8216ec264f","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"1a7d2e18efe8317836a320ae8b4f2d86a71629a84d1d3466f5320e8216ec264f"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=1a7d2e18efe8317836a320ae8b4f2d86a71629a84d1d3466f5320e8216ec264f","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"phala/qwen3.6-35b-a3b-uncensored"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"7e5cfd079fbe78d478ff829888e25f2e6efda97b354d6beb57c1a47fb64e0c76","parsed_evidence_digest":"8c692e04e47969a2a46663c7ab21508946921271a6ec3e7924680e379520fb24"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12207,"check":{"provider":"venice","id":"venice-e2ee-venice-uncensored-24b-p","label":"E2ee Venice Uncensored 24b P (TEE)","model":"e2ee-venice-uncensored-24b-p","status":"failed","ts":"2026-07-16T12:48:58.494822925+00:00","latency_ms":6610,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000011fd112ab5cb37fc58e061cbdbd3dbff8d623b300ada825811b33dc39171e7fa","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"11fd112ab5cb37fc58e061cbdbd3dbff8d623b300ada825811b33dc39171e7fa"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-venice-uncensored-24b-p&nonce=11fd112ab5cb37fc58e061cbdbd3dbff8d623b300ada825811b33dc39171e7fa","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"phala/uncensored-24b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"fa8f39eff56f8c0c331c11c3458158210554b93409cc3e2022b1712c893e73cf","parsed_evidence_digest":"88169bda005e8c45a9b7cca388c6c3851ef49024eb04b6f072abcf95510d0b76"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12200,"check":{"provider":"venice","id":"venice-gemma-3-27b","label":"Gemma 3 27B (TEE)","model":"e2ee-gemma-3-27b-p","status":"failed","ts":"2026-07-16T12:47:49.192216997+00:00","latency_ms":7863,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000ad14b8bf433b68462ed8793697a7933e09fda92c7261bef81d00af8f57d6eea9","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"ad14b8bf433b68462ed8793697a7933e09fda92c7261bef81d00af8f57d6eea9"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=ad14b8bf433b68462ed8793697a7933e09fda92c7261bef81d00af8f57d6eea9","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"google/gemma-3-27b-it"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"76b88445e44cd13d8c6e2c2e71533185c276abf0792fad409bb6de6fc463cfc9","parsed_evidence_digest":"166a84552fe552cd6d3e6e4ddeb8d855966f01f1854b14370ecfbb0279d39ced"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12195,"check":{"provider":"venice","id":"venice-gemma4-31b","label":"Gemma 4 31B (TEE)","model":"e2ee-gemma-4-31b","status":"partial","ts":"2026-07-16T12:47:07.566262063+00:00","latency_ms":7457,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010400000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000","report_data":"9765596f43dd91d1467f9a370682173741786d8c000000000000000000000000a27d3835cea474dc8a4a47c7602b65588764db8aa5542c03a6c110c76209b8e6","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"a27d3835cea474dc8a4a47c7602b65588764db8aa5542c03a6c110c76209b8e6"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"last_deploy_tag":"v0.0.309","app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6","nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=a27d3835cea474dc8a4a47c7602b65588764db8aa5542c03a6c110c76209b8e6","signing_public_key":"04323149efe98c490b9b44b517b3bd599defd1ad5a61f580ca27bfd3daedd3333eddd6e40663c9a79556897ddf9ecf9dfb937ebd3cfbac512d2a7620b3c2df09d2","signing_algo":"ecdsa","trust_tier":"app-e2ee","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","upstream_model":"google/gemma-4-31B-it"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"7e24c36e16e87a53254da9ed3beb7a7bcfc83cdf4208ca7ee4a59d591b6414f1","parsed_evidence_digest":"6a3592fdff29ec3f44583e7ca8330460a58032c7151cc388824019cacc4b15dd"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12201,"check":{"provider":"venice","id":"venice-glm-4-7","label":"GLM 4.7 (TEE)","model":"e2ee-glm-4-7-p","status":"failed","ts":"2026-07-16T12:47:57.056139148+00:00","latency_ms":5122,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000058a6d76bf14c452a5b786e77ad40ec84d53a8677c66075adad37cdeb684cbd08","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"58a6d76bf14c452a5b786e77ad40ec84d53a8677c66075adad37cdeb684cbd08"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-4-7-p&nonce=58a6d76bf14c452a5b786e77ad40ec84d53a8677c66075adad37cdeb684cbd08","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"z-ai/glm-4.7"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"e8dff96a97af11d9b3a0153d9021465ba567614a9b2b224309ab1a64c18a6f04","parsed_evidence_digest":"fb7c23de0e92d87754f2b9325192ecb2eb37e25f51cd63ee25ea9e704819bbc6"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12193,"check":{"provider":"venice","id":"venice-glm-5-1","label":"GLM 5.1 (TEE)","model":"e2ee-glm-5-1","status":"partial","ts":"2026-07-16T12:46:55.816899823+00:00","latency_ms":6139,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"07010300000000000000000000000000","mr_seam":"49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"010fccab4eb7ffc4c9ec1be8e2851e7b820efef0485cfd21ac027bf1408dc836b0000000000000000000000000000000","report_data":"bb4d2e7ffe98eefcd9690e2139be41e92b95e3330000000000000000000000005073a4f979143f15ee888e06b7679e02c818a791b92dcaf5793da7144c5a989a","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"33a68f88f7ada9fef354f4099b1bf412a655204ca821581b758857b88d27cc37dcf4912c4da3d90e39b6cd1aee5c090d","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"5073a4f979143f15ee888e06b7679e02c818a791b92dcaf5793da7144c5a989a"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6","nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=5073a4f979143f15ee888e06b7679e02c818a791b92dcaf5793da7144c5a989a","signing_public_key":"042a1c47aad08a4f47dcb67134d77b83d8a1d5c895e37e959189249e819c3939289d8c59acb07d262db3ca946d52c51ae079fde6708cb0af7e25a57d35c8e0ac30","signing_algo":"ecdsa","trust_tier":"app-e2ee","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","upstream_model":"zai-org/GLM-5.1-FP8"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"db2006ceb2d74acfcf35c4a762daee289364a827f002482557f5d99986c009c6","parsed_evidence_digest":"123311ac396c8051f77c8d923b723966a0ce3212115b24f3548326eaee901845"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12192,"check":{"provider":"venice","id":"venice-gpt-oss-120b","label":"GPT-OSS 120B (TEE)","model":"e2ee-gpt-oss-120b-p","status":"failed","ts":"2026-07-16T12:46:50.077462027+00:00","latency_ms":5739,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000086178015fedb8a1383bd9bc4e232a02d76698e3ac3ad3016680e16ab9b349c24","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"86178015fedb8a1383bd9bc4e232a02d76698e3ac3ad3016680e16ab9b349c24"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=86178015fedb8a1383bd9bc4e232a02d76698e3ac3ad3016680e16ab9b349c24","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"openai/gpt-oss-120b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"f503bd553f1fb2a508d3924d9f6e57613dc4b8c86cfd7ef52e40897a7b015585","parsed_evidence_digest":"8d52ffac0c3af87d0041eb07dde04043fa37170584f625a4e4a28fd6a3cfb65c"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12196,"check":{"provider":"venice","id":"venice-gpt-oss-20b","label":"GPT-OSS 20B (TEE)","model":"e2ee-gpt-oss-20b-p","status":"failed","ts":"2026-07-16T12:47:15.023550523+00:00","latency_ms":4336,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000070b76980b6b9a89eb313e5645450a6c26fe917d01f9f8d568625de5e7e0ea592","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"70b76980b6b9a89eb313e5645450a6c26fe917d01f9f8d568625de5e7e0ea592"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=70b76980b6b9a89eb313e5645450a6c26fe917d01f9f8d568625de5e7e0ea592","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"openai/gpt-oss-20b"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"af69bedf0a1657ad32b9e2897076293e50396e68658999e3ccb1c1ff0f5e02ae","parsed_evidence_digest":"fd69f7bcbe03d58483da0ca7d9be9c1f69b9c83ec4a6b28023e335657752f217"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12197,"check":{"provider":"venice","id":"venice-qwen-2-5-7b","label":"Qwen 2.5 7B (TEE)","model":"e2ee-qwen-2-5-7b-p","status":"failed","ts":"2026-07-16T12:47:19.359895120+00:00","latency_ms":7018,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000003be24535982b43a6e28159e0f708c58c7e47456d40324f10af54d63668f905a7","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"3be24535982b43a6e28159e0f708c58c7e47456d40324f10af54d63668f905a7"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=3be24535982b43a6e28159e0f708c58c7e47456d40324f10af54d63668f905a7","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"qwen/qwen-2.5-7b-instruct"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"5a9dfed0ca00e97927eb6ceeb1e1cc1c754299bec5b933c0df117345b3b2b951","parsed_evidence_digest":"ddd7a9f9c02fb96c65f16a88cd418666be4d6a4fe6e843f258e07556ee3a2ae5"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12194,"check":{"provider":"venice","id":"venice-qwen3-30b","label":"Qwen3 30B (TEE)","model":"e2ee-qwen3-30b-a3b-p","status":"failed","ts":"2026-07-16T12:47:01.956255170+00:00","latency_ms":5609,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000049e689e8ca1556ad32edac150d851206678823c45dfc2b3ee89347322944c0e","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"049e689e8ca1556ad32edac150d851206678823c45dfc2b3ee89347322944c0e"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-30b-a3b-p&nonce=049e689e8ca1556ad32edac150d851206678823c45dfc2b3ee89347322944c0e","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"qwen/qwen3-30b-a3b-instruct-2507"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"38c040b71b3a2289f0ce6ad907f25e44203b16627c76229c1bacb96a609e8572","parsed_evidence_digest":"975fac229023f3630c06f027fc422dcdf72601281ab3cc1924370b8e2a174181"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12198,"check":{"provider":"venice","id":"venice-qwen3-6-35b","label":"Qwen3 35B (TEE)","model":"e2ee-qwen3-6-35b-a3b","status":"partial","ts":"2026-07-16T12:47:26.378615062+00:00","latency_ms":18264,"error":"Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"07010300000000000000000000000000","mr_seam":"49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"e702060000000000","mr_td":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","mr_config_id":"01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000","report_data":"e5d0fec43b001f181a3410b96715ec54171f36da0000000000000000000000003484fb6f78d32e5d7fe0dd16801b7bae9e65d3ae19d64f617cabe4e6509ad18a","rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","rtmr1":"c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc","rtmr2":"564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135","rtmr3":"7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"3484fb6f78d32e5d7fe0dd16801b7bae9e65d3ae19d64f617cabe4e6509ad18a"},"compose_hash_valid":false,"compose_hash_vs_tcb":true,"images_verified":true,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"app_name":"dstack-nvidia-0.5.5","app_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","report_data_binds_signer":true,"report_data_binds_nonce":true,"compose_images":["datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6","otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb","nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b","nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"],"rtmr0":"bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590","mrtd":"b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217","os_image_hash":"9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677","source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=3484fb6f78d32e5d7fe0dd16801b7bae9e65d3ae19d64f617cabe4e6509ad18a","signing_public_key":"0489f03d8ed945eff27ad1053f87ece198409aff78c5c2aea3e438c460482f67ff5b900054dc129f6ce57e40e8875ceac0ddf30aeb885c28fd2c3e05bf3fbaa4d9","signing_algo":"ecdsa","trust_tier":"app-e2ee","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala-dstack","confidence":"corroborated","evidence":"The quote-bound deployment uses a known dstack application identity."},"deployment_id":"2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b","upstream_model":"Qwen/Qwen3.6-35B-A3B-FP8"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"31b5becf3f2ce5c9d88925999ebfb94c54dc5f75d0f0edc5795d408fc16ce4a6","parsed_evidence_digest":"580a354b6907d266f01726d90e0ea8fc4283275d473134def9e0326e293b028f"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12199,"check":{"provider":"venice","id":"venice-qwen3-vl-30b","label":"Qwen3-VL 30B (TEE)","model":"e2ee-qwen3-vl-30b-a3b-p","status":"failed","ts":"2026-07-16T12:47:44.642741105+00:00","latency_ms":4549,"error":"Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified","tdx":{"tee_tcb_svn":"0b010500000000000000000000000000","mr_seam":"7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d","mr_signer_seam":"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","td_attributes":"0000001000000000","xfam":"0702000000000000","mr_td":"f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077","mr_config_id":"012074e0188f8450b9e8b2326aabb7a61c50c4b7054024a5ecab9c2b7ccc2681d3000000000000000000000000000000","report_data":"79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000005f562ccc97ad109405744d275fef3f794b8cad79dc684767f9277b7fba4ec1e5","rtmr0":"d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e","rtmr1":"07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c","rtmr2":"a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f","rtmr3":"2d02539340dd5c18e9da09a2ed0c6edf75d2c9695ad994e2c4268a99804e122148cd35955dbd2eff10a934f2e2600553","tcb_level":"status=UpToDate, advisories=[]"},"nvidia":{"jwt_valid":true,"issuer_valid":true,"nonce_matches":true,"overall_result":"true","eat_nonce":"5f562ccc97ad109405744d275fef3f794b8cad79dc684767f9277b7fba4ec1e5"},"compose_hash_valid":false,"tls_fingerprint":"08b9c0d165fbf3433870dc1c22a118da08eed65ae58aa4950fdf8dd21e98e70b","tls_matches":false,"report_data_binds_signer":true,"report_data_binds_nonce":true,"source_url":"https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=5f562ccc97ad109405744d275fef3f794b8cad79dc684767f9277b7fba4ec1e5","signing_public_key":"04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d","signing_algo":"ecdsa","trust_tier":"none","e2ee_capability":"ecdsa","route":{"route_binding":"not-verified","tee_platform":{"organization":"phala","confidence":"inferred","evidence":"The operator label was returned with the attestation evidence."},"upstream_model":"qwen/qwen3-vl-30b-a3b-instruct"},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"verified","detail":"The quote binds the verifier-owned challenge."},"channel":{"state":"verified","detail":"The application channel key is bound to attested evidence."},"workload":{"state":"failed","detail":"Measured workload evidence did not match the expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.1.0","policy_hash":"d1e7ffa25977d92dd8c3b17afaf7664fb0b0c5e4bfeaeff9348e031ff266c6c8","target_hash":"6e5a30fed7383f62cac313042057282b78065657d0dff4545fe9dc380eba960a","parsed_evidence_digest":"edec6bc53542c5601852da76517e6dfc8683c9ec48e5d2d0187370586413c8d3"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]}]}}