{"schema_version":"1.0","run":{"runId":816,"schemaVersion":1,"startedAt":"2026-07-16T17:00:22.918067792+00:00","completedAt":"2026-07-16T17:00:22.918067792+00:00","verifierVersion":"0.2.2","verifierBuild":{},"policyHash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","targetSetHash":"a5965c2010f1f0dd6f82d9fd2beaa6e893e7955cd388d2cc194638870abfe6b9","summary":{"total":8,"verified":0,"partial":8,"failed":0,"unreachable":0},"policy":{},"targets":[],"integrity":{"previousRunDigest":"","runDigest":"","previousLinkValid":null,"runDigestValid":null,"checkResultDigestsValid":null},"reconstructionLevel":"parsed-only","checks":[{"rowId":12685,"check":{"provider":"privatemode","id":"privatemode-gemma-4-31b","label":"Gemma 4 31b","model":"gemma-4-31b","status":"partial","ts":"2026-07-16T17:00:17.467941418+00:00","latency_ms":4348,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"cb8b987a40b67770220bb32d8131314bf5c398d422409da8d2050bf1bffc02c7","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12686,"check":{"provider":"privatemode","id":"privatemode-gemma-latest","label":"Gemma Latest","model":"gemma-latest","status":"partial","ts":"2026-07-16T17:00:21.816461587+00:00","latency_ms":171,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"846922c3aeccb1915b8da8b5e47c935da0b462fd6687c4660f9d6f8c0a0ca7f1","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12687,"check":{"provider":"privatemode","id":"privatemode-gpt-oss-120b","label":"Gpt Oss 120b","model":"gpt-oss-120b","status":"partial","ts":"2026-07-16T17:00:21.987683745+00:00","latency_ms":178,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"948ff8fce9fb3002e8afff109818357fa66a10e8ab04c0474b6f4045d2d5ec20","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12688,"check":{"provider":"privatemode","id":"privatemode-gpt-oss-latest","label":"Gpt Oss Latest","model":"gpt-oss-latest","status":"partial","ts":"2026-07-16T17:00:22.166132083+00:00","latency_ms":160,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"24c010dbed2abdc109d258401aa98a2af3ed29621ca376848abe504748f4e0eb","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12689,"check":{"provider":"privatemode","id":"privatemode-kimi-k2-6","label":"Kimi K2.6","model":"kimi-k2.6","status":"partial","ts":"2026-07-16T17:00:22.326396298+00:00","latency_ms":166,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"70db731864b20d8dff212169ee8c21ea98c1f5ab6d239e59f22a6ef4a0738e59","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12690,"check":{"provider":"privatemode","id":"privatemode-qwen3-embedding-4b","label":"Qwen3 Embedding 4b","model":"qwen3-embedding-4b","status":"partial","ts":"2026-07-16T17:00:22.493283902+00:00","latency_ms":101,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"d62f15a67a852e8053de861e130ab3c5b154da7adc6c222c2b9fc52dcdb5bbf0","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12691,"check":{"provider":"privatemode","id":"privatemode-voxtral-mini-3b","label":"Voxtral Mini 3b","model":"voxtral-mini-3b","status":"partial","ts":"2026-07-16T17:00:22.594488258+00:00","latency_ms":154,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"72d21862c628e5c80a9c954e44a29629d9daae8463a12adeb087a121d32bc48b","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]},{"rowId":12692,"check":{"provider":"privatemode","id":"privatemode-whisper-large-v3","label":"Whisper Large V3","model":"whisper-large-v3","status":"partial","ts":"2026-07-16T17:00:22.749265636+00:00","latency_ms":168,"error":"Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified","images_verified":true,"version":"v1.21.0","compose_images":["docker.io/vllm/vllm-openai:v0.21.0@sha256:a230095847e93bd4df9888b33dab956fa9504537b828a23657d2b26fed57b5c9","ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e","ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4","ghcr.io/edgelesssys/privatemode/attestation-agent:v1.48.0@sha256:072c9b9efc9ee2722a2326320ec02f38cd56fc6492d124f910d13e54347198ba","ghcr.io/edgelesssys/privatemode/disk-mounter:v1.48.0@sha256:9c82a0900269c1af3b05366dfe24f1e27b67bc0212bf3f14b92e7efefaebfbd4","ghcr.io/edgelesssys/privatemode/inference-proxy:v1.48.0@sha256:ae922a3cf9e362c34130a5474da41ac0177fc5384a9b2ede49060ab7184ed944","ghcr.io/edgelesssys/privatemode/secret-service:v1.48.0@sha256:c22387f37d883480e3b1579826e4a49c851608213b2f823c5ab74d6c38b6dffb","quay.io/unstructured-io/unstructured-api:0.1.7@sha256:ee89a87a545b6a7d56609607aced71b5b1acf0211400bf2d11a8f70f209a93bd"],"manifest_pinned_measurements":["manifest-sha256:b4a4e1c372a507a1771f7f2f9b7c2fa7f04202855588e26f795d0249454572bf","SNP/Genoa:fad4113937545dc568d61c26","TDX:a7568bf0b3630aa33402bfec","coordinator:coordinator.privatemode.ai:443","contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25","contrast-active-manifest:verified"],"manifest_workloads":["gemma-4-31b","gemma-latest","gpt-oss-120b","gpt-oss-latest","kimi-k2.6","kimi-latest","openai/gpt-oss-120b","openai/whisper-large-v3","qwen3-embedding-4b","voxtral-mini-3b","whisper-large-v3"],"source_url":"http://localhost:58080/v1/models","signing_algo":"Privatemode Contrast Coordinator attestation + active manifest + E2EE","trust_tier":"tee-only","route":{"route_binding":"not-verified","workload_operator":{"organization":"edgeless-systems","confidence":"declared","evidence":"Privatemode architecture."},"tee_platform":{"organization":"contrast","confidence":"verified","evidence":"Privatemode architecture and active Contrast manifest evidence."},"cloud_host":{"organization":"scaleway","confidence":"declared","evidence":"Privatemode architecture documentation."}},"gates":{"hardware":{"state":"verified","detail":"Vendor-rooted hardware evidence was verified."},"tcb":{"state":"verified","detail":"The quote passed the configured TCB policy."},"freshness":{"state":"not-proven","detail":"No verifier-owned challenge binding was exposed."},"channel":{"state":"not-proven","detail":"No attested application channel binding was verified."},"workload":{"state":"verified","detail":"Measured workload evidence matched the configured expectation."},"source_provenance":{"state":"not-proven","detail":"Registry existence alone is not source provenance."},"route":{"state":"not-proven","detail":"No request-bound storefront-to-backend route receipt was verified."}},"evidence_meta":{"verifier_version":"0.2.2","policy_hash":"12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d","target_hash":"c1ab819f402d1923647c9ced1db52215dddac654b766c3b61ae1c8f20461e104","parsed_evidence_digest":"f360d8e81d68385e1803f331c38cf0bdded30532003881178e464144abf16639"}},"target":{},"resultDigest":"","resultDigestValid":null,"artifacts":[]}]}}