Zero-Trust Attestation
TEE
Verification
A valid hardware quote proves the TEE exists. End-to-end verification additionally proves freshness, the confidential channel, the measured workload, source provenance, and the request route where applicable.
68/94Hardware + TCB verified
0/94End-to-end verified
74Evidence incomplete
7Explicit failures
13Unavailable
0Not current
0Unknown
Observed channel modes1TEE-Terminated TLS36Attested E2EE28TEE-only Gateway
What do these channel modes mean?Attestation explained
What is attested inference?
Attested inference is AI inference backed by cryptographic evidence of the hardware and software running inside a trusted execution environment (TEE). This site checks vendor-rooted hardware evidence and trusted computing base (TCB) policy, plus freshness, channel binding, workload identity, source provenance and request routing. End-to-end verified means every required gate passed on fresh evidence; missing, excluded or failed gates remain visible.
How to read this run
Hardware verification is the first gate, not the final verdict.
68 checks validated their hardware quote and TCB policy on the current head. Only 0 also proved every applicable layer on fresh evidence — workload identity, source provenance, and request routing. 63 of 74 incomplete checks passed hardware and TCB verification in the latest head.
- 68/94Hardware + TCBVendor-rooted quote and configured hardware policy both passed.
- 63/94FreshnessCurrent evidence is bound to a verifier-owned challenge.
- 54/70Confidential channelA TLS or application encryption key is bound to the attested environment.
- 23/94Workload identityThe measured runtime matches the expected workload configuration.
- 1/94Source provenanceThe measured runtime is linked to signed source or release evidence.
- 7/93Request routeThe request is cryptographically bound to the selected backend.
Each denominator includes only checks where that layer applies to the provider's claimed confidentiality model.
✓
End-to-end verifiedEvery required evidence gate is verified on a fresh observation.
◐
Evidence incompleteNo required evidence gate explicitly failed, but at least one was not proven, was not evaluated, or was excluded as not applicable. Every required gate must be verified for an end-to-end verified result. This does not imply that hardware verification passed.
✗
Explicit failureA mismatch or policy rejection was observed. The hardware quote may still be valid.
!
UnavailableFresh evidence could not be fetched; this does not prove the provider is outside a TEE.
◷
Not currentThe recorded verdict is older than the 24-hour observation window or future-dated — history, not current state.
?
UnknownNo parseable current observation exists; never treated as success.
Incomplete evidenceHardware evidence may have passed, but one or more required evidence gates are excluded or not proven.
Latest attempt: Checked · observed Oct 27, 2026, 13:01:02 UTC — Latest attempt complete; discovery complete; 10/10 targets completed; 7 excluded (Structured chute TEE flag is false)
Hardware10/10 goodTCB policy10/10 goodFreshness10/10 goodChannel binding10/10 goodWorkload identity10 warningSource provenance10 warningRequest route10 warningAvailability10/10 good
Workload identity not proven10Source provenance not proven10Request route not proven10
DeepSeek Ai/DeepSeek V3.2 TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data00e127e52e7d8eae3bd99554c7f49ce3a25b21fff8e721d7322f237793e19e46b8afff6b723419919f715664d178f895b41ddb05a0f547fe384b65a3958c1910
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/sglang:0.5.21
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
chute:deepseek-ai/DeepSeek-V3.2-TEEinstance:fe982b18-b8ca-4c21-9ec1-e450c6860bd8certificate-present:truegpu-evidence-count:8revision:a7e62ac04ecb2c0a54d736dc46601c5606cf10a6lock-modules:trueexternal-egress:falsechutes-version:0.6.11.rc2image-id:695a2917-f652-5131-9986-11986b5c3e8aimage-status:built and pushedimage-chutes-version:0.6.11.rc2
DeepSeek Ai/DeepSeek V4 Flash 0731 TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data211c985a3188051e510900ed8dab7b23d7068d319f8922cc94de27e7d97282a8390b3525044fb178235a49d41dfef842627372c31703cc421b9fcf884dd23acc
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/sglang:0.5.17
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
chute:deepseek-ai/DeepSeek-V4-Flash-0731-TEEinstance:1fa32475-f064-44a5-a31d-ff92ffbffc09certificate-present:truegpu-evidence-count:8revision:7eb21d27aee405755da5251f4458e9fff87c047block-modules:trueexternal-egress:falsechutes-version:0.6.11.rc2image-id:bc160be2-ac9a-5e0b-b156-b9f6f4a43a85image-status:built and pushedimage-chutes-version:0.6.11.rc2
Google/gemma 4 31B Turbo TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Dataed7a6972540853d3dbb1f5f1978fff9a3f8527bcef951e2787a41009207f5f3b468e06ca9b30265ff7f4b6e6e797315ff868a67ffd6b063a72c7c913693e74a3
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/sglang:0.5.21
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
chute:google/gemma-4-31B-turbo-TEEinstance:15afe08c-fda1-4552-9d3c-7e238b1a062ccertificate-present:truegpu-evidence-count:1revision:4135a98a9b728a548947683219633b25682223aclock-modules:trueexternal-egress:falsechutes-version:0.6.11.rc2image-id:695a2917-f652-5131-9986-11986b5c3e8aimage-status:built and pushedimage-chutes-version:0.6.11.rc2
Moonshotai/Kimi K2.6 TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Datad33c1c084ce150bff861b66ee3a17797ef592dd76fdc2192749e38583552448411633300f052c3119822c2ba3e9b15ab8304c8580e54daab0cfdd0be8d61b773
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/vllm:nightly-2026031400-03df6abfe49f
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
chute:moonshotai/Kimi-K2.6-TEEinstance:33ff2755-3693-4c3f-be23-2e4ba9f3e0bbcertificate-present:truegpu-evidence-count:8revision:d9cb81bc88b9bd2dc89877599f23c614ded72b9clock-modules:trueexternal-egress:falsechutes-version:0.6.6image-id:5bbb13bc-c050-518d-bb55-79994b540ec2image-status:built and pushedimage-chutes-version:0.6.6
Moonshotai/Kimi K3 TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data2e211e9680461d53c748834436852b089116bff228b3347fb6c644ac0662a49f468e5d7f94df63a4d38c06d698c3fc5b2dee9bd06392954a6c6b42748d0463f2
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/sglang:0.5.21
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
chute:moonshotai/Kimi-K3-TEEinstance:70752629-605c-461b-b61b-1b4ff75c593acertificate-present:truegpu-evidence-count:8revision:f831ab66814297da540d832a5235f8e904f29d06lock-modules:trueexternal-egress:falsechutes-version:0.6.11.rc2image-id:695a2917-f652-5131-9986-11986b5c3e8aimage-status:built and pushedimage-chutes-version:0.6.11.rc2
Qwen/Qwen3.5 397B A17B TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data6a1d84174cf3457ebb2ff34d0a766317d6cd0ce9c48b09e7318b49f601f680e107bf00608f27e125521c1602e5552ddd8cea2d0d67176089148135688b5732f8
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/sglang:0.5.17-qwen38
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 1/gMEQyhP/xzO9KQ0GqmjYAkcJCO7HdQI1l8DUgqmpmJsTA8tLB9oGMJospoYAU1r5YMa7qGrnQbvWYmaQMq/Cw5+sh2axe4pRB9npxbl9W1Y7IVRPWhmbGmgaIQhcWh8xIl+MhJjSuhvjq9teGKzUiW4Ra1A0MEPPoolnJgA7lZr0amJuc6fTYc6GO/6ByG7cQHQPpeEabCVRmmV+WwCVUXbcBm/8g2aHZId8uFlVVa/tC1fOySm6REQ9CgDWmdY7x7q9eGSqWHvQIW3ynCPGCaQqQUOPJSX5LCTfqH/XdPILFL3et195Fk9juySqmKt/UAlNJLkhWGA0OT3LBp8Ey8g3FoLErEofgG2Wiewjx3KDXLDplkAvvCaOUSN7CfgeSfqmckFhYtH6ll5efPQKlo4DePRpW6wHmFClnHaZEOQnTPnPIi68dN3Pu9++Y9RJcW0KkChGJpe7VbiLaSCBS/NedqKbCWswx6HIMC1zHKKrI64EW0IkxcDERHewpWZNxjjhUJdFbEJZgZOqY3KlxYEQCDmslelJLAXufMDMtsOCtMjJh4VaNBTWtxZVCVFitSrxgtfac404DFl8grhqa8W1TD+MCpTLiqMbWQr+G4vTaqvEAHhxMOSHsSkxBSEZi76kW0bUp0bfRRTKFoZyjKHZMo+0RQwCt9sVCi2vfLrouhhTIHQ5ayScqq7AJdWsFGthJtzyUyWBRmjOC1pGpyhMRJH/gVfIlk1zoTRfOYrqS0/lqvSYY4wgYqlOSn6bsRugEKg0ul3WdDMUgyqVl3ozRk0WkatJiZ+qpRdWxTzOuXQDJVxpTEvWwxhhtUiaqPoUR92gzFRVIlnNJsDjUGRNIJarRQsRbFZNxGJOqsg2g8syhJ6eON0oujwKTET8wC+FSDmFSFNvp8T4CEQcBJ6/TPmabD9/Iwb8cLx5Ro2sXHOCfNEbWH8/aP/HjMAFTHyZN4JYEzJbY+PZCqbqV26XIi6SgBX7AW26m0t8uGm5miZ9Mw7WhbigVMDIwbaDsbAgmm1nGl4kAkwehbfpx4m8St4QmJB7wKIONI5fNsZ6vOW7UFnJl0qOsLzrWCvFlQAqirUXZQdcK0RQIljpWjzumSnZQAgpOG97kOieFSrpMxVvKaeUMEKvczKtlv+CiBnHakIRwky+yp0ukgPPMNZRBekTSzVOFgJbVGGyx4BIF1FbOUHtKpyYxMHmayvdBMGCcUSMYwfPI2b9yykYODoGgJg5iXuBNfX1sx+vo5zbVL8RRU7cEqppiTGHmOh5ZWOXUhpBmyDJhKCRbCFSJft8UqTFJ13PiLCwOHcsgJJ8pRyhegwfZzRIB6smNsRylfQStwHCUD08g8yWUtIpF1lchHOFEcoNYUfASOu3ysNVs2T+SX9+TCezSBubCvN6qvwXuqvuvPZXR8+jd0AlhDDVeCp+tFDAJHh8J0txi7+qxoTynLkbTDmulqkkIsvJlkJJdWATBxODQKiqOzA2aNuXUBhlwXTcx+CHArzXGT3ksD4aR8RCq1ywV7HBIVCB5Ku/aarmCESKIoRdcKI6uiCS8P8QzNeMRBJMulNAM=
chute:Qwen/Qwen3.5-397B-A17B-TEEinstance:aa9565f1-7320-428b-9a8e-e9731842d0b1certificate-present:truegpu-evidence-count:8revision:9f1f3de9a3a48cfd340fd73ca98c02625b7afb3block-modules:trueexternal-egress:falsechutes-version:0.6.11.rc2image-id:b08f6a2d-1665-5a3e-a194-4b06fd22ba2aimage-status:built and pushedimage-chutes-version:0.6.11.rc2
Qwen/Qwen3.6 27B TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data32a04aa88035d60f29cb46f19ffe99306deb88f669ec3d21bfd88ffc0b0dcc89a2dc5f327911d691857bfa01c72468672599e50aa5d2e5ce462b1de1102625fc
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/sglang:0.5.17-qwen38
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 ebPGURZBOgSdYdMsQ/MlC/vLzECEehAko1Sd9EO94qUBv8sbbkAFM6Gh16Wj9CFkBKiuvFYALVQYpBANn+YgpvAuq8y7sVeHTiaBMhc2D6W8yQV9dLG1m+WgAvTD/JyXhACnjeg78tqjukiKQbJm2mSUsCS0iuydl1zMFMpAtVipwXiehYnFKhoMPjWG1NUioilJoKsOs9c4v+hRt8V1QQWWeUXFxxhIHGauljCcZLRj6UNGMahRGJEtN1Whx4B1dNm+gTJnFyBBcvmUXuM/AtCTvYNMBwhrbQEGo7Suz/Uv6fMClrFqs4yzPcgEOUggOwUVNbM1dlaZCMO8d/qk3YaE3fZ4EzKfHbl531nDFbEhCeZ9IXi/M0Gi00uJdaM8/FkkbSprqWwFobIchNakDeRfmABNW8oxP0Eb5qBNobuLkpBX4LkqGWlxdoxqkZlT+uMSEhUyHCu/cuoredFKJRZpYMRTAvMMawGZoVp2MxGb/qU0Ovi0OqtTTwK1/ExatAojdgfCRakf47XI3zfMArsHO7fKWcTPQLGntJa6c3JUOQOOZ/aHIVJ26QVIQXNKxROpY8E64QZ+POUcgRW94YyfaPVIQSQtqCkFKLKcyCptyilqc/tm2CWRFOmBdUuwu5IgnOk7k8ShzOAovEFtxAl1Hbyh5PMIqUwqM5Ssvzt1xjdqXLMRLrKqS9pEkuS//ZHJSCoHZNusjzVOrcQzVocwyna/I8W0f2NpOMGfwxmOCpyduwufHUpR3aWn8NMQwSDOpMxMpfsk+7lopQN9XOhBuKaaBaI6P7STsVqhwnM50npDICWB9YtbbfVdLAttuIlf96FcgqMQz0giXVaMFENr8AIWSZphqzQDLEGoAbGi+zYYr+V+sMw4bNVH//e66XbLY4BrOkQxyTNmtWpr02h3Q8nMz+VRPxJxJul62+WqSsIa9BRFWQJVFCemh9mqs1p0VcxTbhtEDDOQNdCpRiQnI2glYGTHTjESpLp+OQy2ozLHwaiRCnc3dkgKN7kHQKGBOMqKvuposKK1uhbIPAsPfGZGB2cNdCPDFXyQ+Lp0pQY+I5NycHVlfqa8WtVAKduH6RdtNGZQZ9gFH1yWFoHHTIlSequjnSUp3ooN1muIL2QKF1yvrKOHyOGo7Vh721C6u7MHHCc6DzxRtOUqaXeH9xApANVrR5EjJDcBZnGZykVJZ3sy2kYxo3GYywU+iNYU49VkfjPBqzG5pphpJ9q/azZiqcm2aFdxCfeXvetbsRYFJRs86ikfpqwVeAlgDuay3jMQlVdzktwlOoYg+0ww8LEbOEJsLvqkjFKhvdxqjAhz9/Vw0GgfiZJgHvKhI1cYHtsaDncY6/hb7HxXKEEXv4x3rQNuVkNbXHq3d1VXvOlp2ggsWrWimLLL5eKYDyRaOyZeKKp6PnrLXyua/vo2JsIl2nkIomqdhhlK3TCNDKFdhQMYYQyelydYkFyXqjp1D6ZKjIVaEvJ29/BVGOIEThTLIFsTjYe+hISMD+CfEforCZekohiMgLiRUaMZ/k6SDAbQz8X57lyPDnQsqfxB8hVGl4WarLWjKpAUCjs=
chute:Qwen/Qwen3.6-27B-TEEinstance:46f9dc30-315f-4e33-a3f9-0d88b6925c2acertificate-present:truegpu-evidence-count:1revision:e89b16ebf1988b3d6befa7de50abc2d76f26eb09lock-modules:trueexternal-egress:falsechutes-version:0.6.11.rc2image-id:b08f6a2d-1665-5a3e-a194-4b06fd22ba2aimage-status:built and pushedimage-chutes-version:0.6.11.rc2
Qwen/Qwen3.8 27B TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Dataab621e33296a23a1cbba18483937f1cbc8af6c0a463a124eab7335afb468bcd5d2a54923388b6727306267affef3e34874743816fc979ce5dede2832ea68d071
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/vllm:0.27.1-qwen
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
chute:Qwen/Qwen3.8-27B-TEEinstance:c8a40bea-7c47-4e6d-9104-dda1883c5c5ccertificate-present:truegpu-evidence-count:1revision:017b9c7af6b5689d5dd426a76e0bc077eb5ca20alock-modules:trueexternal-egress:falsechutes-version:0.6.11.rc2image-id:6e46a33c-329a-5b55-a1dd-c9a5c9866943image-status:built and pushedimage-chutes-version:0.6.11.rc2
Zai Org/GLM 5.1 TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data35214f6f360f3565d01af9cacf82394da4c1f33c0897c7213a66e712efc25fb63dae76f1c4cd562fe8f6279be2582c99efb0c9b5e0762075df01360ad73f4c20
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/sglang:0.5.21
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
chute:zai-org/GLM-5.1-TEEinstance:914ae805-8762-41d2-b334-33ce50ab15b2certificate-present:truegpu-evidence-count:8revision:f396cf805182f4ca10fa675e1a99815b3ca384dblock-modules:trueexternal-egress:falsechutes-version:0.6.11.rc2image-id:695a2917-f652-5131-9986-11986b5c3e8aimage-status:built and pushedimage-chutes-version:0.6.11.rc2
Zai Org/GLM 5.2 TEE (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data71b393a200ea187f943fe84f5343e8019f0dc48ed14162e26448282e847402148303599bf30c6e393d8ca32807bd0797caa1f711fe9ad73ba6b93a554f164def
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
registry.chutes.ai/chutes/sglang:0.5.15-post1a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byChutes
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
chute:zai-org/GLM-5.2-TEEinstance:5098e516-0e68-4e5c-ae49-72c033bde921certificate-present:truegpu-evidence-count:8revision:aec724e8c7b8ee9db3b48c01c320f63f9cdaf8aalock-modules:trueexternal-egress:falsechutes-version:0.6.11.rc2image-id:e5589f58-64d3-51f6-8a3d-146b1cd77940image-status:built and pushedimage-chutes-version:0.6.11.rc2
Incomplete evidenceHardware evidence may have passed, but one or more required evidence gates are excluded or not proven.
Latest attempt: Checked · observed Oct 27, 2026, 18:00:18 UTC — Latest attempt complete; discovery complete; 1/1 targets completed
Hardware1 warningTCB policy1 warningFreshness1 warningChannel binding1 warningWorkload identity1 warningSource provenance1 warningRequest route1 warningAvailability1/1 good
Hardware evidence not evaluated1TCB policy not evaluated1Freshness not proven1Channel binding not proven1
Incomplete evidenceHardware evidence may have passed, but one or more required evidence gates are excluded or not proven.
Latest attempt: Checked · observed Oct 27, 2026, 14:00:13 UTC — Latest attempt complete; discovery complete; 1/1 targets completed
Hardware1/1 goodTCB policy1 warningFreshness1/1 goodChannel binding1/1 goodWorkload identity1 warningSource provenance1 warningRequest route1 warningAvailability1/1 good
TCB policy not proven1Workload identity not proven1Source provenance not proven1Request route not proven1
Explicit trust failuresAt least one check has an explicit mismatch or policy rejection; other evidence layers may still have passed.
Latest attempt: Checked · observed Oct 27, 2026, 16:02:03 UTC — Latest attempt complete; discovery complete; 24/24 targets completed; 650 excluded (catalog model is not in the provider's confidential/TEE class)
Hardware6 badTCB policy6 badFreshness10 warningChannel bindingNot shownWorkload identity24 warningSource provenance24 warningRequest route24 warningAvailability4 warning
Hardware evidence failed6TCB policy failed6Workload identity not proven20Source provenance not proven20
DeepSeek V3.2 (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000000cf2752c75ceee9dda3a584144a471fbca36b97fc02d35f2bef91e9d377af2dc
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
DeepSeek V4.1 Flash (TEE)2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Gemma 4 26B A4B Uncensored (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000088df80a9c12c29d9c709ca58db8306867e46cc6d1aee4f3965fd784dd4c56df8
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
Gemma 4 31B It (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000036dc73ff1856034cdc797d144413004f9767e0349b67e3e4045d632ef196369e
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
Gemma4 31B (TEE)2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Gemma4 31b:thinking (TEE)2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
GLM 5.1 (TEE)2026-10-27Details
Hardware evidence failedRequired hardware evidence was not verified.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
GLM 5.1 Thinking (TEE)2026-10-27Details
Hardware evidence failedRequired hardware evidence was not verified.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
GLM 5.2 (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000004b308f612d509a3361272bab3d68e7684815e2883bfe2ce310c46554b88a4de9
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
GLM 5.2:thinking (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000004082841732de6137175665979c9107cac4709fde6b3448660affd8274ba35758
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
GLM 5.3 (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000099128960f1aa0c32c47991a8c87c90dbcd673090dc4ced71245393577ba11d1d
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
GLM 5.3 Flash (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000c34f6a385b32d8416f51dac27215ecc954db934189333646dbf9e7cffe2bd76d
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
GPT OSS 120B (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000e311132ee18a46e7ba01bee96349e02fa856d6973368cce70005fb3c80c73ced
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
Kimi K2.6 (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000020d761c7b0529b8a216ef6edab9455eb36b276105309c7fde3e987ef8f11e46
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
Kimi K2.7 Code (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000001d3a39cadc2d6caf81c85e8da40039bbff4fe4576b863f9b67e7fec1da26f845
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
Kimi K3 (TEE)2026-10-27Details
Hardware evidence failedRequired hardware evidence was not verified.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Llama3.3 70B (TEE)2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Nemotron 3.5 Lightning (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000006086a732c873d8939c7dc0b75d47e7c6c298437ff050300adabb103a32bdb1de
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
Qwen2.5 VL 72B Instruct (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000068e4bb12535a570f74bba532e32551b57b16835fab26f44631540140128a6d7a
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
Qwen3.5 27B (TEE)2026-10-27Details
Hardware evidence failedRequired hardware evidence was not verified.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Qwen3.5 397B A17B (TEE)2026-10-27Details
Hardware evidence failedRequired hardware evidence was not verified.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Qwen3.6 27B (TEE)2026-10-27Details
Hardware evidence failedRequired hardware evidence was not verified.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Qwen3.6 35B A3B (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000008802741194733f3e79f497b0a19ea2d01e2e9341fcf09577edc31879071b89da
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
Qwen3.8 27B (TEE)Intel TDXTEE-only Gateway2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000006d8fd9584105db17ebda8d3846f498e541157859fb3996242ea9a6406c72d44a
SignatureECDSA-P384 ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Enclave TLS Pin55861aee69d870e669ba7f7f5952f02f38e5f3d2430bd8940f8a83db7338f351 ✗
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byNanoGPT
Route bindingRoute binding not proven
Explicit trust failuresAt least one check has an explicit mismatch or policy rejection; other evidence layers may still have passed.
Latest attempt: Checked · observed Oct 27, 2026, 11:01:46 UTC — Latest attempt complete; discovery complete; 10/10 targets completed; 51 excluded (48 × catalog model is not in the provider's confidential/TEE class; 3 × unsupported utility/modality or non-confidential model class)
Hardware2 warningTCB policy2 warningFreshness2 warningChannel binding2 warningWorkload identity5 warningSource provenance10 warningRequest route10 warningAvailability1 warning
Verifier policy failed1Source provenance not proven9Request route not proven9Workload identity not proven4
DeepSeek V3.2 (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data2b835fceb8104a4a265a6e182c35ecd51057cd6806510c53f8f43fd247da17790ce78c987712d6d4c3176e871a214e33c2a2171b5ba869ae052c5e61f4e6d2ad
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byNEAR AI
Routed throughChutes (corroborated)
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
GLM 5.3 (TEE)2026-10-27Details
Verifier policy failedNonce mismatch (possible replay): expected bf2ab77bd6c0d92bba59b1887d455a8487c78d2edb4e9e8bec5cf9e71dd5c251, got missing NEAR AI response nonce
CheckNo parsed CPU/GPU quote details; see evidence gates above.
GLM 5.3 Flash (TEE)Intel TDXAttested E2EE2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data5a0210f2442c79355784f9de021985429561da5bacc3a4424b01ac52b7e0caffdda40cc10ac319ca008895eb2849c2cc44c0a21f4f7159f3d68fc084ea027735
SignatureECDSA-P384 ✓
Compose HashMismatch ✗
TCB Consistentsha256 match ✓
Registry digestDigest exists in registry ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Last Deployv0.0.502
Gateway TLS73862c254372091cc6895b900111503860694f8916ebf0c63b18d245ba8ba5ad (external termination)
Appdstack-nvidia-0.5.11
Images5 containers
otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbcertbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbnearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884benearaidev/compose-manager-launcher@sha256:079a14b41deb11e0e27f9b69648e8b3d89bd6fb9ccf6071643b8f447fa415085
RTMR0bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590
OS Image91fd5d69ccee3e5ea4f2aeb8c9b632c4358c4ecfc29ba1aa6fb1e402af209829
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byNEAR AI
TEE platformPhala/dstack (declared)
Route bindingRoute binding not proven
Recorded signing keyed25519 5a0210f2442c79355784f9de021985429561da5bacc3a4424b01ac52b7e0caff
Kimi K2.6 (TEE)2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Kimi K3 (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data1807cb74458785ba074783d70b9827313aba321510528ba022d04503dc544ae6d9912cb3377b0e4515372a4e2a7062f3ce26ff3813ae2d9183d61f774913a1ec
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byNEAR AI
Routed throughChutes (corroborated)
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
Privacy Filter (TEE)Intel TDXAttested E2EE2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Datac369cc73c7db5c068aebc823496e66ca8f39ae2de3dcd8a78490c74ae9dd2d9045879e502c66161d50a9b3db459c426253d810c9b941a48742573285e00ff569
SignatureECDSA-P384 ✓
Compose HashMismatch ✗
TCB Consistentsha256 match ✓
Registry digestDigest exists in registry ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Last Deployv0.0.518
Gateway TLS73862c254372091cc6895b900111503860694f8916ebf0c63b18d245ba8ba5ad (external termination)
Appdstack-nvidia-0.5.12
Images5 containers
otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbcertbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbnearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884benearaidev/compose-manager-launcher@sha256:079a14b41deb11e0e27f9b69648e8b3d89bd6fb9ccf6071643b8f447fa415085
RTMR0bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590
OS Image91fd5d69ccee3e5ea4f2aeb8c9b632c4358c4ecfc29ba1aa6fb1e402af209829
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byNEAR AI
TEE platformPhala/dstack (declared)
Route bindingRoute binding not proven
Recorded signing keyed25519 c369cc73c7db5c068aebc823496e66ca8f39ae2de3dcd8a78490c74ae9dd2d90
Qwen3 VL 30B A3B Instruct (TEE)Intel TDXAttested E2EE2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Datac6eb7050db6f17486e179a0b393b73430e2db4e08d4dfb5d8fa1f8e2f8d98b6d9d5585d6d8d21d73e26e3f793eabf6fbda1338d7614bfafaba5dc424c2cd4226
SignatureECDSA-P384 ✓
Compose HashMismatch ✗
TCB Consistentsha256 match ✓
Registry digestDigest exists in registry ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Last Deployv0.0.518
Gateway TLS73862c254372091cc6895b900111503860694f8916ebf0c63b18d245ba8ba5ad (external termination)
Appdstack-nvidia-0.5.12
Images5 containers
otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbcertbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbnearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884benearaidev/compose-manager-launcher@sha256:079a14b41deb11e0e27f9b69648e8b3d89bd6fb9ccf6071643b8f447fa415085
RTMR0bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590
OS Image91fd5d69ccee3e5ea4f2aeb8c9b632c4358c4ecfc29ba1aa6fb1e402af209829
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byNEAR AI
TEE platformPhala/dstack (declared)
Route bindingRoute binding not proven
Recorded signing keyed25519 c6eb7050db6f17486e179a0b393b73430e2db4e08d4dfb5d8fa1f8e2f8d98b6d
Qwen3.5 397B A17B (TEE)Intel TDXAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Dataa92073e68845de00edbf016cce330719694a05244bd388e8d8b7bf27829db46b8d3983544ba8ee29db0c0809d331fb98083234137b29d745d998724dc2aae6ff
SignatureECDSA-P384 ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byNEAR AI
Routed throughChutes (corroborated)
Workload operatorChutes (corroborated)
TEE platformChutes (corroborated)
Route bindingRoute binding not proven
Recorded encryption keyML-KEM-768 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
Qwen3.6 35B A3B FP8 (TEE)Intel TDXAttested E2EE2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data89fb781a9530473a6d3bddd6bb0a0536c8d155058798edae88b19153bd8f4350e55ed201ab7fdc2d4f6d07ab023d45a1ba7447628f229cee93907a12e31ca48d
SignatureECDSA-P384 ✓
Compose HashMismatch ✗
TCB Consistentsha256 match ✓
Registry digestDigest exists in registry ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Last Deployv0.0.518
Gateway TLS73862c254372091cc6895b900111503860694f8916ebf0c63b18d245ba8ba5ad (external termination)
Appdstack-nvidia-0.5.12
Images5 containers
otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbcertbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbnearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884benearaidev/compose-manager-launcher@sha256:079a14b41deb11e0e27f9b69648e8b3d89bd6fb9ccf6071643b8f447fa415085
RTMR0bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590
OS Image91fd5d69ccee3e5ea4f2aeb8c9b632c4358c4ecfc29ba1aa6fb1e402af209829
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byNEAR AI
TEE platformPhala/dstack (declared)
Route bindingRoute binding not proven
Recorded signing keyed25519 89fb781a9530473a6d3bddd6bb0a0536c8d155058798edae88b19153bd8f4350
Qwen3.8 27B (TEE)Intel TDXAttested E2EE2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data89154a43a47684742c3d1753252bb6f49f61da9d8c84fc9b1def2df130cb2d93b23868a2a384958f0efe5ff1a247e80c7570b1e2a225ce383972f650a66b8973
SignatureECDSA-P384 ✓
Compose HashMismatch ✗
TCB Consistentsha256 match ✓
Registry digestDigest exists in registry ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Last Deployv0.0.518
Gateway TLS73862c254372091cc6895b900111503860694f8916ebf0c63b18d245ba8ba5ad (external termination)
Appdstack-nvidia-0.5.12
Images5 containers
otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbcertbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbnearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884benearaidev/compose-manager-launcher@sha256:079a14b41deb11e0e27f9b69648e8b3d89bd6fb9ccf6071643b8f447fa415085
RTMR0bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590
OS Image91fd5d69ccee3e5ea4f2aeb8c9b632c4358c4ecfc29ba1aa6fb1e402af209829
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byNEAR AI
TEE platformPhala/dstack (declared)
Route bindingRoute binding not proven
Recorded signing keyed25519 89154a43a47684742c3d1753252bb6f49f61da9d8c84fc9b1def2df130cb2d93
Incomplete evidenceHardware evidence may have passed, but one or more required evidence gates are excluded or not proven.
Latest attempt: Checked · observed Oct 27, 2026, 17:00:36 UTC — Latest attempt complete; discovery complete; 6/6 targets completed; 387 excluded (catalog model is not in the provider's confidential/TEE class)
Hardware6/6 goodTCB policy6/6 goodFreshness6 warningChannel binding6/6 goodWorkload identity6 warningSource provenance6 warningRequest route6 warningAvailability6/6 good
Freshness not proven6Workload identity not proven6Source provenance not proven6Request route not proven6
DeepSeek V4.1 Flash (TEE)AMD SEV-SNPAttested E2EE2026-10-27Details
Freshness not provenNo verifier-owned challenge binding was exposed.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byPPQ.AI
Routed throughTinfoil (corroborated)
Workload operatorTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Gemma4 31B (TEE)AMD SEV-SNPAttested E2EE2026-10-27Details
Freshness not provenNo verifier-owned challenge binding was exposed.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byPPQ.AI
Routed throughTinfoil (corroborated)
Workload operatorTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
GLM 5.3 (TEE)AMD SEV-SNPAttested E2EE2026-10-27Details
Freshness not provenNo verifier-owned challenge binding was exposed.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byPPQ.AI
Routed throughTinfoil (corroborated)
Workload operatorTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
GPT OSS 120B (TEE)AMD SEV-SNPAttested E2EE2026-10-27Details
Freshness not provenNo verifier-owned challenge binding was exposed.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byPPQ.AI
Routed throughTinfoil (corroborated)
Workload operatorTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Kimi K3 (TEE)AMD SEV-SNPAttested E2EE2026-10-27Details
Freshness not provenNo verifier-owned challenge binding was exposed.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byPPQ.AI
Routed throughTinfoil (corroborated)
Workload operatorTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Llama3.3 70B (TEE)AMD SEV-SNPAttested E2EE2026-10-27Details
Freshness not provenNo verifier-owned challenge binding was exposed.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byPPQ.AI
Routed throughTinfoil (corroborated)
Workload operatorTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Availability issueThe verifier could not fetch fresh evidence for every check in this run.
Latest attempt: Checked · observed Oct 27, 2026, 19:00:27 UTC — Latest attempt complete; discovery complete; 3/3 targets completed
Hardware2 warningTCB policy2 warningFreshness2 warningChannel binding3 warningWorkload identity3 warningSource provenance3 warningRequest route3 warningAvailability2 warning
Endpoint unavailable2Channel binding not proven1Workload identity not proven1Source provenance not proven1
DeepSeek V4.1 Flash 1017Intel TDXTEE-only Gateway2026-10-27Details
Channel binding not provenNo attested application channel binding was verified.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data5549b1c764a3b68a6400ffbdb69ecc1b8787e7f7e804a9887359fe82636c937cf9f3b32fe66bbbed6f75a081fd734f25d55079370a34db341842331f9f1f4068
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrem
Workload operatorprem (declared)
TEE platformintel-tdx (verified)
Cloud hostnvidia-cc-gpu (corroborated)
Route bindingRoute binding not proven
General Nova 32026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Qwen38 27B2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Incomplete evidenceHardware evidence may have passed, but one or more required evidence gates are excluded or not proven.
Latest attempt: Checked · observed Oct 27, 2026, 15:00:20 UTC — Latest attempt complete; discovery complete; 13/13 targets completed
Hardware13/13 goodTCB policy13/13 goodFreshness13/13 goodChannel binding13/13 goodWorkload identity13/13 goodSource provenance13 warningRequest route13 warningAvailability13/13 good
Source provenance not proven13Request route not proven13
DeepSeek OCR 2AMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Data1ce824524823371a662f2da079e7726b749aa2a3625fad616a62a5e400fd9f8d0000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
GLM 5.2AMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Data85616848ee150eed5388271ac75ec8512d74ef741dd2ec89fbfc42f97e70ff950000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
GLM 5.3AMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Datad3fcdbbe47d6ddf60eff616d428b74c88bb74f5bcc212c1752c414295e922e6f0000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
GLM 5.3 FlashAMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Data904245bd21fc20432dfe87be727e7e0a72ebc69e64ac15379cb6b88606f0aa960000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
GLM Flash LatestAMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Data5523f98dc53c931fa32591952fd05de23d6f9009ff7954e22a575af6e15bf63b0000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
GLM LatestAMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Data513f89de350a14378c20e408bd9265595e30c63a41b6d7132eb4dfca109bf0b70000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
GPT OSS 120BAMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Datac4884288fc0fc056fc1bfa706aec5b85d7e7d05cc293b0148fb4fe60b95495260000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
GPT OSS LatestAMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Data084d24bb08d0a140e06a5e0cd2da0741d35a6664fef80a8b2b221210c4a78dfe0000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
Openai/gpt OSS 120BAMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Dataeb9199a9f976657dfe5a53934c40c71cdbaa7d2b6cbfdddfd3cc7935ad9cfa4c0000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
Openai/whisper Large V3AMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Datac7accb8b4a4493975caa066f702464722720923ede563b5ff4d6a1fc73f2dbe80000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
Qwen3 Embedding 4BAMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Data4f3208f726b01a1cbfb4fc619e1eb6cd9ffbe21aca0610d63a690b9adb7128850000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
Voxtral Mini 3BAMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Dataaa4a379465d4a10dbf0a66b59428ce396b316366a55805636d874a7de508b2af0000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
Whisper Large V3AMD SEV-SNPTEE-only Gateway2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteAMD SEV-SNP (VCEK)
Policy0x252013a
Report Data9b96c86d406465892181524c5692d96384225104b5013d037474551f58336ec60000000000000000000000000000000000000000000000000000000000000000
SignatureECDSA-P384 ✓
Nonce BoundYes ✓
Versionv1.25.1
SNP PolicyPinned ✓
Security ModelTEE-only Gateway
What This MeansModel runs in TEE but gateway sees plaintext prompts
Sold byPrivatemode
Workload operatorEdgeless Systems (declared)
TEE platformContrast (verified)
Cloud hostScaleway (declared)
Route bindingRoute binding not proven
deepseek-ocr-2glm-5-3glm-5-3-flashgpt-oss-120bwhisper-qwen3-voxtral
Incomplete evidenceHardware evidence may have passed, but one or more required evidence gates are excluded or not proven.
Latest attempt: Checked · observed Oct 27, 2026, 12:00:15 UTC — Latest attempt complete; discovery complete; 2/2 targets completed; 64 excluded (catalog model is not in the provider's confidential/TEE class)
Hardware2 warningTCB policy2 warningFreshness2 warningChannel binding2 warningWorkload identity2 warningSource provenance2 warningRequest route2 warningAvailability2/2 good
Hardware evidence not evaluated2TCB policy not evaluated2Freshness not proven2Channel binding not proven2
Gemma 4 26B A4B Uncensored (TEE)2026-10-27Details
Hardware evidence not evaluatedHardware appraisal was not evaluated.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Qwen3.8 27B Uncensored (TEE)2026-10-27Details
Hardware evidence not evaluatedHardware appraisal was not evaluated.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Availability issueThe verifier could not fetch fresh evidence for every check in this run.
Latest attempt: Checked · observed Oct 27, 2026, 20:01:16 UTC — Latest attempt complete; discovery complete; 12/12 targets completed; 8 excluded (unsupported utility/modality or non-confidential model class)
Hardware12/12 goodTCB policy12/12 goodFreshness12/12 goodChannel binding12/12 goodWorkload identity11 warningSource provenance11 warningRequest route4 warningAvailability4 warning
Workload identity not proven7Source provenance not proven7Endpoint unavailable4Request route not applicable1
Decision Large (router-verified)AMD SEV-SNP2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Channel Key BoundYes ✓
Enclave TLS Pinc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelNo verified channel
What This MeansNo hardware attestation verified
Sold byTinfoil
Routed throughTinfoil (declared)
Workload operatorTinfoil (declared)
TEE platformTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Decision Medium (router-verified)AMD SEV-SNP2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Channel Key BoundYes ✓
Enclave TLS Pinc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelNo verified channel
What This MeansNo hardware attestation verified
Sold byTinfoil
Routed throughTinfoil (declared)
Workload operatorTinfoil (declared)
TEE platformTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Decision Small (router-verified)AMD SEV-SNP2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Channel Key BoundYes ✓
Enclave TLS Pinc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelNo verified channel
What This MeansNo hardware attestation verified
Sold byTinfoil
Routed throughTinfoil (declared)
Workload operatorTinfoil (declared)
TEE platformTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
DeepSeek V4.1 Flash (router-verified)AMD SEV-SNPAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Gateway TLSc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byTinfoil
Routed throughTinfoil (verified)
Workload operatorTinfoil (declared)
TEE platformTinfoil (verified)
Route bindingRoute binding verified
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Gemma4 31B (router-verified)AMD SEV-SNPAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Gateway TLSc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byTinfoil
Routed throughTinfoil (verified)
Workload operatorTinfoil (declared)
TEE platformTinfoil (verified)
Route bindingRoute binding verified
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
GLM 5.3 (router-verified)AMD SEV-SNPAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Gateway TLSc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byTinfoil
Routed throughTinfoil (verified)
Workload operatorTinfoil (declared)
TEE platformTinfoil (verified)
Route bindingRoute binding verified
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
GPT OSS 120B (router-verified)AMD SEV-SNPAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Gateway TLSc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byTinfoil
Routed throughTinfoil (verified)
Workload operatorTinfoil (declared)
TEE platformTinfoil (verified)
Route bindingRoute binding verified
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
GPT OSS Safeguard 120B (router-verified)AMD SEV-SNPAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Gateway TLSc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byTinfoil
Routed throughTinfoil (verified)
Workload operatorTinfoil (declared)
TEE platformTinfoil (verified)
Route bindingRoute binding verified
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Kimi K3 (router-verified)AMD SEV-SNPAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Gateway TLSc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byTinfoil
Routed throughTinfoil (verified)
Workload operatorTinfoil (declared)
TEE platformTinfoil (verified)
Route bindingRoute binding verified
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Llama3.3 70B (router-verified)AMD SEV-SNPAttested E2EE2026-10-27Details
Workload identity not provenNo expected workload measurement was verified.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Gateway TLSc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byTinfoil
Routed throughTinfoil (verified)
Workload operatorTinfoil (declared)
TEE platformTinfoil (verified)
Route bindingRoute binding verified
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
Pii Filter (router-verified)AMD SEV-SNP2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Channel Key BoundYes ✓
Enclave TLS Pinc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelNo verified channel
What This MeansNo hardware attestation verified
Sold byTinfoil
Routed throughTinfoil (declared)
Workload operatorTinfoil (declared)
TEE platformTinfoil (declared)
Route bindingRoute binding not proven
Recorded encryption keyhpke 07ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
RouterAMD SEV-SNPTEE-Terminated TLS2026-10-27Details
Request route not applicableThis target is the gateway workload, not a storefront-to-model route. This required gate is excluded, so end-to-end verification is not claimed.
QuoteAMD SEV-SNP (VCEK)
Policy0x30000
Report Datac9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf907ba19655a005e8914a8a6ff8797e9c0c317c71d50b067045b4c23d9da99e723
SignatureECDSA-P384 ✓
Registry digestDigest exists in registry ✓
Sigstore BundleCrypto Verified ✓
MeasurementsMatch ✓
Releasev0.0.167
Sigstore Repotinfoilsh/confidential-model-router
Enclave TLS Pinc9e1acc1f54b49852032c4f13d2459df08c7676cbd2fb631451e7cdf12b35bf9 ✓
Versionv0.0.167
ghcr.io/tinfoilsh/confidential-model-router@sha256:37edbc8b603fc3d1d0889023080d8124f9076f7cb166e045967314370ebc057aghcr.io/tinfoilsh/confidential-safeguards@sha256:45a6c5e506bb73c018423f9ad7dd746ed98ba8d887c6bb3d46d9da2fdbb7dd6a
Security ModelTEE-Terminated TLS
What This MeansTLS terminates inside the attested TEE; certificate key is bound to report_data
Sold byTinfoil
Routed throughTinfoil (verified)
Workload operatorTinfoil (verified)
TEE platformTinfoil (verified)
Route bindingRoute binding not proven
Availability issueThe verifier could not fetch fresh evidence for every check in this run.
Latest attempt: Checked · observed Oct 27, 2026, 10:02:04 UTC — Latest attempt complete; discovery complete; 12/12 targets completed; 129 excluded (catalog model is not in the provider's confidential/TEE class)
Hardware8 warningTCB policy8 warningFreshness8 warningChannel binding8 warningWorkload identity8 warningSource provenance12 warningRequest route12 warningAvailability2 warning
Source provenance not proven10Request route not proven10Hardware evidence not evaluated6TCB policy not evaluated6
DeepSeek V4 Flash (TEE)Intel TDXAttested E2EE2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data3b753b4406613c5e70ae640508632b600424fa0c0000000000000000000000008a8c1c05564e9331e8f75e2b8c5150ed0c7807a53f6f254bf48747c3455d3b53
SignatureECDSA-P384 ✓
Compose HashMismatch ✗
TCB Consistentsha256 match ✓
Registry digestDigest exists in registry ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Last Deployv0.0.502
Gateway TLSb8af120a268ab9156d29c8cd05397f1ca92373388ae73d24b38352fcdf208c26 (external termination)
Appdstack-nvidia-0.5.11
Images5 containers
otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbcertbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbnearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884benearaidev/compose-manager-launcher@sha256:079a14b41deb11e0e27f9b69648e8b3d89bd6fb9ccf6071643b8f447fa415085
RTMR0bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590
OS Image91fd5d69ccee3e5ea4f2aeb8c9b632c4358c4ecfc29ba1aa6fb1e402af209829
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byVenice.ai
TEE platformPhala/dstack (declared)
Route bindingRoute binding not proven
Recorded signing keyecdsa 0442d42e51842e50841e08b096b62cdaf52786c7ce0b04577bb476cef327d42d8db9cc9dd35c9738bf7769e2b33d51c0a2d9aa01e85da0507ddb4e875a2b5bdfd1
Gemma 4 26B A4B Uncensored (TEE)2026-10-27Details
Hardware evidence not evaluatedHardware appraisal was not evaluated.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
GLM 5.2 (TEE)2026-10-27Details
Hardware evidence not evaluatedHardware appraisal was not evaluated.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
GLM 5.3 (TEE)2026-10-27Details
Hardware evidence not evaluatedHardware appraisal was not evaluated.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
GLM 5.3 Flash (TEE)Intel TDXAttested E2EE2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data3b753b4406613c5e70ae640508632b600424fa0c0000000000000000000000000459d253e89e9e00704f79958c6af0bec34a4c6859c69c3a8576395086d7bd1a
SignatureECDSA-P384 ✓
Compose HashMismatch ✗
TCB Consistentsha256 match ✓
Registry digestDigest exists in registry ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Last Deployv0.0.500
Gateway TLSb8af120a268ab9156d29c8cd05397f1ca92373388ae73d24b38352fcdf208c26 (external termination)
Appdstack-nvidia-0.5.11
Images5 containers
otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbcertbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbnearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884benearaidev/compose-manager-launcher@sha256:91fdff3cfa3543d72656b2368c7d8a0a83d95a0f1087378c897aa1537acdba56
RTMR0bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590
OS Imagea6eafc5f007f642d8ea90c7fa8881f1e6715720ccb531941a28218f4f26d7b02
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byVenice.ai
TEE platformPhala/dstack (declared)
Route bindingRoute binding not proven
Recorded signing keyecdsa 0442d42e51842e50841e08b096b62cdaf52786c7ce0b04577bb476cef327d42d8db9cc9dd35c9738bf7769e2b33d51c0a2d9aa01e85da0507ddb4e875a2b5bdfd1
GPT OSS 120B (TEE)2026-10-27Details
Hardware evidence not evaluatedHardware appraisal was not evaluated.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Kimi K2.6 (TEE)2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Kimi K3 (TEE)2026-10-27Details
Endpoint unavailableFresh evidence could not be fetched in this run.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Qwen 2.5 7B (TEE)2026-10-27Details
Hardware evidence not evaluatedHardware appraisal was not evaluated.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Qwen3 VL 30B A3B (TEE)2026-10-27Details
Hardware evidence not evaluatedHardware appraisal was not evaluated.
CheckNo parsed CPU/GPU quote details; see evidence gates above.
Qwen3.6 35B A3B (TEE)Intel TDXAttested E2EE2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Datafdbd7952498b333206f360d71d97a1e0961e8ddf00000000000000000000000014655899f341f61583f566268e99f457a92a5accf75f100c44e2ed35bedb2645
SignatureECDSA-P384 ✓
Compose HashMismatch ✗
TCB Consistentsha256 match ✓
Registry digestDigest exists in registry ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Last Deployv0.0.518
Gateway TLSb8af120a268ab9156d29c8cd05397f1ca92373388ae73d24b38352fcdf208c26 (external termination)
Appdstack-nvidia-0.5.12
Images5 containers
otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbcertbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbnearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884benearaidev/compose-manager-launcher@sha256:079a14b41deb11e0e27f9b69648e8b3d89bd6fb9ccf6071643b8f447fa415085
RTMR0bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590
OS Image91fd5d69ccee3e5ea4f2aeb8c9b632c4358c4ecfc29ba1aa6fb1e402af209829
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byVenice.ai
TEE platformPhala/dstack (declared)
Route bindingRoute binding not proven
Recorded signing keyecdsa 046da5019dcc34e836adcf1d542cceee52f223fcd2359425f3b4b7c29bf31f2ecab8c4534912b038b75b0066816adb7680641f931dd67bbaef7a1e510a8e72510d
Qwen3.8 27B (TEE)Intel TDXAttested E2EE2026-10-27Details
Source provenance not provenRegistry existence alone is not source provenance.
QuoteIntel TDX (DCAP QVL)
TCB Levelstatus=UpToDate, advisories=[]
Report Data835ab53d20294ef795906dff21ae4c045336aa26000000000000000000000000a18c3acf595b8945f5c2714cc25caab0f02160137ddd9b20951e578561bfd92d
SignatureECDSA-P384 ✓
Compose HashMismatch ✗
TCB Consistentsha256 match ✓
Registry digestDigest exists in registry ✓
Confidential ChannelE2EE to attested enclave key ✓
Channel Key BoundYes ✓
Nonce BoundYes ✓
Last Deployv0.0.518
Gateway TLSb8af120a268ab9156d29c8cd05397f1ca92373388ae73d24b38352fcdf208c26 (external termination)
Appdstack-nvidia-0.5.12
Images5 containers
otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbcertbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edbnearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884benearaidev/compose-manager-launcher@sha256:079a14b41deb11e0e27f9b69648e8b3d89bd6fb9ccf6071643b8f447fa415085
RTMR0bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590
OS Image91fd5d69ccee3e5ea4f2aeb8c9b632c4358c4ecfc29ba1aa6fb1e402af209829
Security ModelAttested E2EE
What This MeansPayloads are encrypted to an attested enclave key; gateway TLS termination is expected
Sold byVenice.ai
TEE platformPhala/dstack (declared)
Route bindingRoute binding not proven
Recorded signing keyecdsa 04db10f54ceab867043a1528a1958f69602499a5518a5dc3f2252259d738322c407b1b9990c7dea6073f7380242ac574b7540a9ae224f51057de8aa2766ecf372a
Verification Methodology
Tinfoil Enclaves
Fetches .well-known/tinfoil-attestation from each enclave. The response contains a gzipped, base64-encoded hardware quote. For TDX enclaves, the quote is verified through Intel DCAP Quote Verification Library (dcap-qvl) using Intel PCS collateral (override via PCCS_URL if needed). For SNP enclaves, the report is verified against AMD KDS VCEK certificates with builtin ARK/ASK roots. TLS certificate SPKI fingerprints are compared to the attested report_data.
Venice.ai / Redpill / NEAR AI (dstack)
All three providers use the same dstack attestation format. Venice returns a direct attestation; Redpill and NEAR AI return a two-layer format (gateway + model attestations). In all cases, the raw intel_quote hex is parsed as a TDX quote and verified via dcap-qvl using Intel PCS collateral (or PCCS_URL override). The quote-bound tcb_info.app_compose hash is recomputed and compared to tcb_info.compose_hash; when compose-manager actions_hash evidence is present, that is recomputed too. Provider server_verification and verified fields are completely ignored.
NVIDIA GPU Attestation
Non-empty GPU evidence payloads are submitted to NVIDIA's current NRAS endpoint, which returns a signed JWT. The JWT signature is verified against NRAS's JWKS, the issuer is pinned to nras.attestation.nvidia.com, and the eat_nonce is checked against the request nonce. Empty or malformed provider evidence and mismatched provider nonces are rejected locally before any NRAS request.
Chutes / Maple / Privatemode / Other Providers
Chutes is checked by fetching a live TEE chute's evidence endpoint, verifying the Intel TDX quote with dcap-qvl, checking that report_data binds the verifier nonce plus the ML-KEM E2E public key, and verifying NVIDIA GPU evidence when present. Chutes checks stay partial unless the workload image is digest-pinned or equivalent signed provenance is exposed. Maple Nitro checks also stay partial until expected PCR/workload provenance is configured. Privatemode is checked against the live API using the SDK-era protocol: the monitor fetches the CDN manifest, requests an attestation document with a fresh nonce, reconstructs and verifies the AMD SEV-SNP quote and embedded ARK/ASK/VCEK chain, requires the final attested manifest to byte-match the CDN manifest, verifies the report-data binding and policy hashes, and validates the mesh-CA-issued channel certificate. Privatemode remains tee-only: the sealed application channel has not yet been independently proven end-to-end. PPQ is not counted as verified from liveness alone.