Stored Run Record

Run #1079

Completed Jul 27, 2026, 16:00:55 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
6
Verified
0
Incomplete
2
Failed
0
Unavailable
4

Recorded Decisions

Checks in this run

Run JSON

PPQ.AI

private/gemma4-31b

Gemma 4 31B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571 Open
provider-attestation-response application/json 18,606 41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d Open
verification-error text/plain; charset=utf-8 178 f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4 Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-gemma4",
  "label": "Gemma 4 31B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/gemma4-31b",
  "metadata": {
    "backend_host": "gemma4-31b-1.inf10.tinfoil.sh",
    "backend_repo": "tinfoilsh/confidential-gemma4-31b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-gemma4",
  "label": "Gemma 4 31B (TEE)",
  "model": "private/gemma4-31b",
  "status": "unreachable",
  "ts": "2026-07-27T16:00:50.738483320+00:00",
  "latency_ms": 2382,
  "error": "Network error: Tinfoil attestation request to gemma4-31b-1.inf10.tinfoil.sh: error sending request for url (https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "4bc79df7e73dc310c6faedd024d5ab7a421d11e9a24cb27c13ee0fe2f6c6d57a",
    "parsed_evidence_digest": "36f36326fa90452f01476b3e2bacfc89892cb723129778f023d9121bacf0bb69",
    "artifact_set_digest": "0e30dafe6de8104f15d853b883b60f4c1810dec23007dcde76e873ace4ebc17d"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-27T16:00:51.489924610+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b",
      "sha256": "41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a",
      "size_bytes": 18606,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:51 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-27T16:00:51.490443544+00:00",
      "sha256": "4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-27T16:00:51.491652052+00:00",
      "sha256": "4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-27T16:00:53.121031279+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4",
      "size_bytes": 178,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-gemma4",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}

PPQ.AI

private/glm-5-2

GLM 5.2 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571 Open
provider-attestation-response application/json 18,606 41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d Open
verification-error text/plain; charset=utf-8 230 f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003 Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-glm-5-2",
  "label": "GLM 5.2 (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/glm-5-2",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-glm-5-2",
  "label": "GLM 5.2 (TEE)",
  "model": "private/glm-5-2",
  "status": "partial",
  "ts": "2026-07-27T16:00:45.949345977+00:00",
  "latency_ms": 4789,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "6c1c9bccf7f3dd4379b6a767a897b856807342cf2072d961a0875665cda4174cd56dd8f8c43a6f5cae15d1140752bb788399c1610785a2940d57e5eed037a871",
    "measurement": "f487f080a82d5af116328ba5907a4ed22cb7b500cfe927182e7a241a6c3ce2b8506f4d7e5b69d6df22072bada797db13",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.131",
  "release_digest": "58a0557d0482b10ce29db052586968ef72d84d84e329b1ec0f6988bfd12f2d0a",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:59e225ae439af0e30ef6c20887363d69ac1d4c16905ead26cc5e6fd107576e05"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:59e225ae439af0e30ef6c20887363d69ac1d4c16905ead26cc5e6fd107576e05"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2",
  "signing_public_key": "d56dd8f8c43a6f5cae15d1140752bb788399c1610785a2940d57e5eed037a871",
  "signing_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "173d9586f5d428b1d4387fb6cdbda568fd2fb897a01c752f3ff34099d5582d94",
    "parsed_evidence_digest": "e3659dd7ed744196fa99202e4b883a8b44dacc10545c1c6b63dbbad9b1465fad",
    "artifact_set_digest": "19b28511457ab3b10701e747fa752ac74f208e1387dc32f71e3a2c37b0bab4ff"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-27T16:00:46.680818854+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2",
      "sha256": "41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a",
      "size_bytes": 18606,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:46 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-27T16:00:46.681250093+00:00",
      "sha256": "4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-27T16:00:46.682095850+00:00",
      "sha256": "4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-27T16:00:50.738080725+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2",
      "sha256": "f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-glm-5-2",
        "provider": "ppq",
        "status": "partial"
      }
    }
  ]
}

PPQ.AI

private/gpt-oss-120b

GPT-OSS 120B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571 Open
provider-attestation-response application/json 18,606 41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d Open
source-provenance-response application/json; charset=utf-8 6,016 d6e59cf713096fa776c2f1c9d01b038c38c911264e7569f8a6da038628d6606f Open
verification-error text/plain; charset=utf-8 182 7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6 Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/gpt-oss-120b",
  "metadata": {
    "backend_host": "gpt-oss-120b-1.inf10.tinfoil.sh",
    "backend_repo": "tinfoilsh/confidential-gpt-oss-120b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "private/gpt-oss-120b",
  "status": "unreachable",
  "ts": "2026-07-27T16:00:20.796795984+00:00",
  "latency_ms": 14408,
  "error": "Network error: Tinfoil attestation request to gpt-oss-120b-1.inf10.tinfoil.sh: error sending request for url (https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d4eae8541256c6665eb682a665171cedbc8a8c506c94be8b72c2fd1702b0d04f",
    "parsed_evidence_digest": "b3b1f0c2850936413873ac7cfedb2a6ef9cf3b5da8021b2447685ba7c09b817e",
    "artifact_set_digest": "eb32cd2bf0ba85bf90e5e7fcdd5c7904dd3df015bad276ce7b1753295e11aa8b"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-27T16:00:21.625182381+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b",
      "sha256": "41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a",
      "size_bytes": 18606,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-27T16:00:21.625615454+00:00",
      "sha256": "4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-27T16:00:21.626486248+00:00",
      "sha256": "4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-27T16:00:21.933085499+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest",
      "sha256": "d6e59cf713096fa776c2f1c9d01b038c38c911264e7569f8a6da038628d6606f",
      "size_bytes": 6016,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:21 GMT",
        "etag": "W/\"f2d4d8bb181ab2ca1bba4c9520bed772759e91650dd2f73934dded24e5e93b26\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Sat, 25 Jul 2026 21:00:53 GMT"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-27T16:00:35.204595146+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6",
      "size_bytes": 182,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-gpt-oss-120b",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}

PPQ.AI

private/kimi-k2-6

Kimi K2.6 (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571 Open
provider-attestation-response application/json 18,606 41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d Open
verification-error text/plain; charset=utf-8 172 56bf93b0ca2e26adbe1494a33b034fc67d752354c6e50eef01e9bcc4c6aa6cea Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-kimi-k2-6",
  "label": "Kimi K2.6 (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/kimi-k2-6",
  "metadata": {
    "backend_host": "kimi-k2-6.inf13.tinfoil.sh",
    "backend_repo": "tinfoilsh/confidential-kimi-k2-6-b200",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-kimi-k2-6",
  "label": "Kimi K2.6 (TEE)",
  "model": "private/kimi-k2-6",
  "status": "unreachable",
  "ts": "2026-07-27T16:00:53.121349175+00:00",
  "latency_ms": 2237,
  "error": "Network error: Tinfoil attestation request to kimi-k2-6.inf13.tinfoil.sh: error sending request for url (https://kimi-k2-6.inf13.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "897f17c5c0f5be4474bf11108c77519c85aab6a4a9ed87f1f846c6976763d230",
    "parsed_evidence_digest": "c2f7937f9df975538ce01f68018fe0336e57c6e4fde4dfab68d69016a4fbce43",
    "artifact_set_digest": "91727f684613214d10da52128e5b20aea5713dd652ebbd902d51192261bd83d9"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-27T16:00:54.056983926+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fkimi-k2-6",
      "sha256": "41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a",
      "size_bytes": 18606,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:53 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-27T16:00:54.057384919+00:00",
      "sha256": "4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-27T16:00:54.058239964+00:00",
      "sha256": "4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-27T16:00:55.358929695+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "56bf93b0ca2e26adbe1494a33b034fc67d752354c6e50eef01e9bcc4c6aa6cea",
      "size_bytes": 172,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-kimi-k2-6",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}

PPQ.AI

private/llama3-3-70b

Llama 3.3 70B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571 Open
amd-vcek-certificate application/pkix-cert 1,347 de4fa1a7b41a2bc93e107598fbff6cb45b92d45b99f0ab5b78e4e4d6423a2ada Open
provider-attestation-response application/json 18,606 41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a Open
provider-attestation-response application/json 605 61e16470bcb42e88e58af563f1ac0e1a06c575a2dd76a27091cd7b5d2bd7daa9 Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 8ff5072809775d77dc0faa4c4a505c934e0cb8d9bbbbd8af494aed9d8f1f236b Open
source-provenance-response application/json; charset=utf-8 14,580 2d1fed463cf4da6c32a8dc0c4fd7604f5c3ce2d6d20f7ce830b2602e15a8ec45 Open
source-provenance-response application/json; charset=utf-8 5,998 2fcdd43fef62ff5d1fd89aea1a67b2021ae1e38bfd555ef5c781264b16426d67 Open
tls-leaf-certificate application/pkix-cert 1,471 b27b73f22e0f0cb2e1ba13f5c2bae41741272991d8857c39ac31ea4e618710b3 Open
verification-error text/plain; charset=utf-8 171 e566916a4d2e294d70ecab5dfd30ecd87f52489be45fa2131be67a3f15ceddff Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/llama3-3-70b",
  "metadata": {
    "backend_host": "llama3-3-70b.tinfoil.containers.tinfoil.dev",
    "backend_repo": "tinfoilsh/confidential-llama3-3-70b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "model": "private/llama3-3-70b",
  "status": "partial",
  "ts": "2026-07-27T16:00:35.205028940+00:00",
  "latency_ms": 8349,
  "error": "Evidence incomplete: PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "6c1c9bccf7f3dd4379b6a767a897b856807342cf2072d961a0875665cda4174cd56dd8f8c43a6f5cae15d1140752bb788399c1610785a2940d57e5eed037a871",
    "measurement": "f487f080a82d5af116328ba5907a4ed22cb7b500cfe927182e7a241a6c3ce2b8506f4d7e5b69d6df22072bada797db13",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.131",
  "release_digest": "58a0557d0482b10ce29db052586968ef72d84d84e329b1ec0f6988bfd12f2d0a",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "backend_host": "llama3-3-70b.tinfoil.containers.tinfoil.dev",
  "backend_snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "281ad7bea31b1c428d5100ee142478e76ab48f091b84e4f9505df75b1cde68840e1d011d09c176637d27a2c2b62406d2d0795f88c0c452b4a9d561d3bbaaea3d",
    "measurement": "be51bfed5496d1e0a57bc3fc39cb10a35631c7654e6a5fd5f0607ae938f4f10fc44c2ede894d0435253395338ba22131",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "de4fa1a7b41a2bc93e107598fbff6cb45b92d45b99f0ab5b78e4e4d6423a2ada"
  },
  "backend_tls_matches": true,
  "backend_sigstore_repo": "tinfoilsh/confidential-llama3-3-70b",
  "backend_sigstore_tag": "v0.0.25",
  "backend_sigstore_match": true,
  "backend_sigstore_bundle_verified": true,
  "backend_sigstore_error_is_transient": false,
  "backend_release_digest": "8a974719331bc6e5ed638b5f95a769a650123a5699ec5bce5dc5a2dced1537d1",
  "backend_images_verified": true,
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:59e225ae439af0e30ef6c20887363d69ac1d4c16905ead26cc5e6fd107576e05"
  ],
  "backend_config_images": [
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:59e225ae439af0e30ef6c20887363d69ac1d4c16905ead26cc5e6fd107576e05",
    "vllm/vllm-openai:v0.22.0@sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b",
  "signing_public_key": "d56dd8f8c43a6f5cae15d1140752bb788399c1610785a2940d57e5eed037a871",
  "signing_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "The configured Tinfoil backend enclave independently attested; the request route is not bound."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "verified",
      "detail": "Signed source/release provenance matched the measured workload."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "33a7ffbd436564136c95f2f4d703c2e193db3f89829eefa548ed5b3184f8131f",
    "parsed_evidence_digest": "02d643ae0a0083b042abe6098b135397ac90be55d382fd0e9d1990f347f03ffc",
    "artifact_set_digest": "4941b8d088a9d2bc2ee5b8a5054003ffd87700ba2ef0e7046a2cc0c781f11bd5"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-27T16:00:36.037393533+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b",
      "sha256": "41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a",
      "size_bytes": 18606,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:35 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-27T16:00:36.037993609+00:00",
      "sha256": "4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-27T16:00:36.039092241+00:00",
      "sha256": "4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-27T16:00:39.783718974+00:00",
      "source_url": "https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation",
      "sha256": "61e16470bcb42e88e58af563f1ac0e1a06c575a2dd76a27091cd7b5d2bd7daa9",
      "size_bytes": 605,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:54 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-27T16:00:39.962542488+00:00",
      "sha256": "8ff5072809775d77dc0faa4c4a505c934e0cb8d9bbbbd8af494aed9d8f1f236b",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "llama3-3-70b.tinfoil.containers.tinfoil.dev"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-27T16:00:40.521766790+00:00",
      "source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
      "sha256": "de4fa1a7b41a2bc93e107598fbff6cb45b92d45b99f0ab5b78e4e4d6423a2ada",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "llama3-3-70b.tinfoil.containers.tinfoil.dev",
        "product": "Genoa",
        "source": "amd-kds"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-27T16:00:41.056737036+00:00",
      "source_url": "https://llama3-3-70b.tinfoil.containers.tinfoil.dev/",
      "sha256": "b27b73f22e0f0cb2e1ba13f5c2bae41741272991d8857c39ac31ea4e618710b3",
      "size_bytes": 1471,
      "encoding": "binary",
      "metadata": {
        "host": "llama3-3-70b.tinfoil.containers.tinfoil.dev"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-27T16:00:41.319669541+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-llama3-3-70b/releases/latest",
      "sha256": "2fcdd43fef62ff5d1fd89aea1a67b2021ae1e38bfd555ef5c781264b16426d67",
      "size_bytes": 5998,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:41 GMT",
        "etag": "W/\"9e0b4041347a72ef9b75fce8807401b0a38b1c526a1ef9afc719106e8b094ab8\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 05 Jun 2026 21:21:37 GMT"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-27T16:00:42.073573172+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-llama3-3-70b/attestations/sha256:8a974719331bc6e5ed638b5f95a769a650123a5699ec5bce5dc5a2dced1537d1",
      "sha256": "2d1fed463cf4da6c32a8dc0c4fd7604f5c3ce2d6d20f7ce830b2602e15a8ec45",
      "size_bytes": 14580,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:42 GMT",
        "etag": "W/\"a9ce8d31c3ea4df40d967230c5240b64aefd399019b587a8031f80e1dfeb5285\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-27T16:00:43.554422574+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b",
      "sha256": "e566916a4d2e294d70ecab5dfd30ecd87f52489be45fa2131be67a3f15ceddff",
      "size_bytes": 171,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-llama3-70b",
        "provider": "ppq",
        "status": "partial"
      }
    }
  ]
}

PPQ.AI

private/qwen3-vl-30b

Qwen3-VL 30B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571 Open
provider-attestation-response application/json 18,606 41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d Open
verification-error text/plain; charset=utf-8 178 44ee160627d45b8e8dc1cc3d6de191c93df60b998779c6a9c0698f08d051b6bd Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-qwen3-vl",
  "label": "Qwen3-VL 30B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/qwen3-vl-30b",
  "metadata": {
    "backend_host": "qwen3-vl-30b.inf10.tinfoil.sh",
    "backend_repo": "tinfoilsh/confidential-qwen3-vl-30b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-qwen3-vl",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "private/qwen3-vl-30b",
  "status": "unreachable",
  "ts": "2026-07-27T16:00:43.554986693+00:00",
  "latency_ms": 2394,
  "error": "Network error: Tinfoil attestation request to qwen3-vl-30b.inf10.tinfoil.sh: error sending request for url (https://qwen3-vl-30b.inf10.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "a1fc72320cd732a446984f7d85ffbdccdd169d083b560c9be92ee48e74165e14",
    "parsed_evidence_digest": "a2597e9845be832b73b10f96d9a44a5d3246ae345392a63e62e150570096ac56",
    "artifact_set_digest": "445d7bbb91ae1feb2bdf2aef03bd2885817b47857c7a0c5e65b66e5018e1b2a5"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-07-27T16:00:44.356999176+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fqwen3-vl-30b",
      "sha256": "41474d491f14dfd5848c7b0c86a56c74e26c17617da4eb9ea840b5f43c71205a",
      "size_bytes": 18606,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 27 Jul 2026 16:00:44 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-07-27T16:00:44.357397984+00:00",
      "sha256": "4be76b6b71726ac68649e79a4b3ce15fa449aeae4f136a2a0caead1efb683e4d",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-27T16:00:44.358259952+00:00",
      "sha256": "4d3240ef703730648c62b2567f3b0d7013c85a8f0ec32a94a6666554afddf571",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-27T16:00:45.948996531+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "44ee160627d45b8e8dc1cc3d6de191c93df60b998779c6a9c0698f08d051b6bd",
      "size_bytes": 178,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-qwen3-vl",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}