Stored Run Record

Run #1135

Completed Jul 30, 2026, 00:02:53 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
16
Verified
0
Incomplete
5
Failed
8
Unavailable
3

Recorded Decisions

Checks in this run

Run JSON

Venice.ai

e2ee-deepseek-v4-flash

E2ee Deepseek V4 Flash (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 ac470fa6b3f3318fd2514ad99c82bd896a9a60a3bb95e349134a0e4f9d6799dd Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 27,372 aff6911d0494557c2f91bf487cdd95f4a3704020491e7ba8d7f48caac7b2ca97 Open
nvidia-provider-evidence application/json 98,158 936a454906187b24e65f28fe920b05c9e5d1e2ee6dbadfa3e5d3064900c35e9b Open
provider-attestation-response application/json; charset=utf-8 199,831 a1575d6b1f87b20624ea4b9dfa47037ae3cb51dbb66a3047a5e490247b78fdee Open
tdx-quote application/vnd.intel.tdx.quote 5,010 f81591bdbe24e0d6079f5aea233fc5384a5a3bc8b562a95e22470d5414063b6c Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-deepseek-v4-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "model": "e2ee-deepseek-v4-flash",
  "status": "partial",
  "ts": "2026-07-30T00:01:55.500891522+00:00",
  "latency_ms": 10469,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "0166007399f064f058af68771c552bcae150c9f88622305631b5141da1aa2f7b7e000000000000000000000000000000",
    "report_data": "c5f6bf2f1bc666569157ec1bb4066cdaf48d026c000000000000000000000000a518da647caf05b5ea95999bbd104dbc79a391673570687995d66f8bc0818146",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "18c28d262ab4733031c19fa1af233686e227a789955ba9dba2065b398c9f5dbfb76133d751dac412540dc5ac992b1b73",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "a518da647caf05b5ea95999bbd104dbc79a391673570687995d66f8bc0818146"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.325",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=a518da647caf05b5ea95999bbd104dbc79a391673570687995d66f8bc0818146",
  "signing_public_key": "0434ba223c3175c4debee8cd12d72f55869b6cf1ccc5ff578e940a23c7bf9dcf3abd6530ce8d8624ffd150900fd31bae802eb75367a154a75e39cc87f748b63b84",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "deepseek-ai/DeepSeek-V4-Flash"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "6bacc84fe763af7014ff7c9a51a99d349597d7e6eabd0c9a763d01c2d62932c8",
    "parsed_evidence_digest": "cf450e18d492d8ab4507032fb4c5f351d867407d5ec56e822605130eefb9a344",
    "artifact_set_digest": "3a300e1470aea6221b4d639b127222a7a552e36a9d9f2f19af3c3ad82a2ae1be"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:02:01.945785584+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=a518da647caf05b5ea95999bbd104dbc79a391673570687995d66f8bc0818146",
      "sha256": "a1575d6b1f87b20624ea4b9dfa47037ae3cb51dbb66a3047a5e490247b78fdee",
      "size_bytes": 199831,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:01 GMT",
        "etag": "W/\"30c97-E0fT4PGUabQh4ivjzdkSd5rnyEM\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:02:01.951335139+00:00",
      "sha256": "f81591bdbe24e0d6079f5aea233fc5384a5a3bc8b562a95e22470d5414063b6c",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:02.685718862+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "ac470fa6b3f3318fd2514ad99c82bd896a9a60a3bb95e349134a0e4f9d6799dd",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:02.691701360+00:00",
      "sha256": "936a454906187b24e65f28fe920b05c9e5d1e2ee6dbadfa3e5d3064900c35e9b",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:03.066192450+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "aff6911d0494557c2f91bf487cdd95f4a3704020491e7ba8d7f48caac7b2ca97",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:02 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:03.409559097+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:03 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:02:05.967999608+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:02:05.970044236+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=a518da647caf05b5ea95999bbd104dbc79a391673570687995d66f8bc0818146",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-deepseek-v4-flash",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-26b-a4b-uncensored-p

E2ee Gemma 4 26b A4b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1 Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 3,895 772827b54dff25072c210d2b0826cd16c2a2ec62e09b5e7a3d5321622ca9b46a Open
nvidia-provider-evidence application/json 12,113 287e90871b1357b7384e1370deee251c349d4092ecf0f3f1b5917affa4aa50cd Open
provider-attestation-response application/json; charset=utf-8 75,437 5748569af5087e592965c91da2f3784380dae96f7eac42275b5b9d784d79e66c Open
tdx-quote application/vnd.intel.tdx.quote 5,006 0fa76a74ab033e650c9bfa2e6277741b4c5cd5454443f321a5de5d39681f4067 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "status": "failed",
  "ts": "2026-07-30T00:02:05.970566476+00:00",
  "latency_ms": 5501,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000220171c6ae2acdf35beb32cc8e718e1b30a8867ddfa92ef0dcfa8fbb785d7b8e",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "220171c6ae2acdf35beb32cc8e718e1b30a8867ddfa92ef0dcfa8fbb785d7b8e"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=220171c6ae2acdf35beb32cc8e718e1b30a8867ddfa92ef0dcfa8fbb785d7b8e",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/gemma-4-26b-a4b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "41c172ed2008d2092130db0be7a7613acf8cb488824bc71f5430b532a8d5d263",
    "parsed_evidence_digest": "f0746c1ee5d4067114db2e8fa00215105480c7c77dd14d17133f275fe32015b9",
    "artifact_set_digest": "efcb04355ccf0cde1db5603e855e1e8cc1adf9c589156adba2cca56ff6211dd8"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:02:09.544550918+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=220171c6ae2acdf35beb32cc8e718e1b30a8867ddfa92ef0dcfa8fbb785d7b8e",
      "sha256": "5748569af5087e592965c91da2f3784380dae96f7eac42275b5b9d784d79e66c",
      "size_bytes": 75437,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:09 GMT",
        "etag": "W/\"126ad-k7bZL7VJvPGaUK3osyLBj/SyLRk\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:02:09.547343449+00:00",
      "sha256": "0fa76a74ab033e650c9bfa2e6277741b4c5cd5454443f321a5de5d39681f4067",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:10.293783359+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:10.296774863+00:00",
      "sha256": "287e90871b1357b7384e1370deee251c349d4092ecf0f3f1b5917affa4aa50cd",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:10.840876817+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "772827b54dff25072c210d2b0826cd16c2a2ec62e09b5e7a3d5321622ca9b46a",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:10 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:11.146460103+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:10 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:02:11.469640934+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:02:11.471127855+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=220171c6ae2acdf35beb32cc8e718e1b30a8867ddfa92ef0dcfa8fbb785d7b8e",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-2-p

E2ee Glm 5 2 P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1 Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 27,372 ac115aa3040d79dea36adc0d5c0ab58bfafd561eb64fe235fe8e01e05ad5b133 Open
nvidia-provider-evidence application/json 98,158 824e3c2fac11b14b70416f14df0f79db61940148a170ca9c6dbe87f5634775a5 Open
provider-attestation-response application/json; charset=utf-8 161,559 77b2c08b388b5bd90a39810fc79f1e40df420b05f766b94f8a46ed08d8ab1afc Open
tdx-quote application/vnd.intel.tdx.quote 5,006 d880c797ecc0bca2356744072ee2d3e57f764ff029a6cf2d9a73716446113030 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-2-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "model": "e2ee-glm-5-2-p",
  "status": "failed",
  "ts": "2026-07-30T00:02:11.471597096+00:00",
  "latency_ms": 6836,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000471ad9cf29618ef3bdc0198cbeded38b6f3ac5de058d33b66f2f7bf559eaa568",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "471ad9cf29618ef3bdc0198cbeded38b6f3ac5de058d33b66f2f7bf559eaa568"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=471ad9cf29618ef3bdc0198cbeded38b6f3ac5de058d33b66f2f7bf559eaa568",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "z-ai/glm-5.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "bfe8723519f8385580376b47989fb0ec8ca25514e2991643fc96586ab0101adc",
    "parsed_evidence_digest": "120edcb53ba98cdfb041f6eb95e88fe857622d76934f360625b866150cc6f8ee",
    "artifact_set_digest": "0421ce13fe6dfdaedcfce3b4ac4ed0911ee2e8412c4336da89b011cc1ebb5282"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:02:16.521123638+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=471ad9cf29618ef3bdc0198cbeded38b6f3ac5de058d33b66f2f7bf559eaa568",
      "sha256": "77b2c08b388b5bd90a39810fc79f1e40df420b05f766b94f8a46ed08d8ab1afc",
      "size_bytes": 161559,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:16 GMT",
        "etag": "W/\"27717-GAfcA5rFRMGgdsluHX/p3qqtjdY\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:02:16.524097480+00:00",
      "sha256": "d880c797ecc0bca2356744072ee2d3e57f764ff029a6cf2d9a73716446113030",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:17.254774225+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:17.260242087+00:00",
      "sha256": "824e3c2fac11b14b70416f14df0f79db61940148a170ca9c6dbe87f5634775a5",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:17.635699241+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "ac115aa3040d79dea36adc0d5c0ab58bfafd561eb64fe235fe8e01e05ad5b133",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:17 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:17.976288725+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:17 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:02:18.305953406+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:02:18.306995622+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=471ad9cf29618ef3bdc0198cbeded38b6f3ac5de058d33b66f2f7bf559eaa568",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-glm-5-2-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-27b

E2ee Qwen3 6 27b (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 23d387aeb2ecd15bcc9822d6a120bc43a67645a4d69394ab85a7c83129e5510a Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 27,372 79dd33f7661f4c540dfd4f130dc1a30647bb9a2ec2bd80cdc1b3d52a30a9bddb Open
nvidia-provider-evidence application/json 98,158 561edeb9d6e660a5f1696cbb293665d4fc6eabfbf64625cc922a5a65fd9bd2bf Open
provider-attestation-response application/json; charset=utf-8 211,766 41e8cd98e1b02a599801b48bc52e2dc8057f5d2f0d0abcb0ee04f84cfbb92c35 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 d6ce7636f33b903b8fbf6f99489d22f6e7e869e9badb03ec78aae6ddb502c07e Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-27b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "model": "e2ee-qwen3-6-27b",
  "status": "partial",
  "ts": "2026-07-30T00:02:18.307638158+00:00",
  "latency_ms": 8585,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "6eb6ce4fa9f7f704769afff165955105c1ae7b1d0000000000000000000000007f8867b43d92c37d07ea3d0fa186eca4020a85760ac5548183b5a05e4c878ffe",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "7f8867b43d92c37d07ea3d0fa186eca4020a85760ac5548183b5a05e4c878ffe"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.322",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=7f8867b43d92c37d07ea3d0fa186eca4020a85760ac5548183b5a05e4c878ffe",
  "signing_public_key": "04cf942c4bcb0f89ffd33e837d850ab3eb4ff66cee6b285db3bbdff6e815f81e7df9a4bfaf863207b5d4ccc99ea4c3eca3172a82b2a7717635522bd22fc0cf6219",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-27B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7e0ccb549a79a186da738c36fb21f4ac9a803041723f5569bbd7945a4ca7e530",
    "parsed_evidence_digest": "1a207b7e8fb8986937ea8501fdbe28b4c1a9c31e04caa825ed4ca4494054be0d",
    "artifact_set_digest": "4555c2b804ec3dc9b7037fdb56f2a82eb67056646fac669a34071812ebdcf982"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:02:22.553062962+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=7f8867b43d92c37d07ea3d0fa186eca4020a85760ac5548183b5a05e4c878ffe",
      "sha256": "41e8cd98e1b02a599801b48bc52e2dc8057f5d2f0d0abcb0ee04f84cfbb92c35",
      "size_bytes": 211766,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:22 GMT",
        "etag": "W/\"33b36-MDDQFFNhkNNyREhtX9GkrmHRL7I\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:02:22.559658951+00:00",
      "sha256": "d6ce7636f33b903b8fbf6f99489d22f6e7e869e9badb03ec78aae6ddb502c07e",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:23.328880217+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "23d387aeb2ecd15bcc9822d6a120bc43a67645a4d69394ab85a7c83129e5510a",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:23.335033575+00:00",
      "sha256": "561edeb9d6e660a5f1696cbb293665d4fc6eabfbf64625cc922a5a65fd9bd2bf",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:24.036586972+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "79dd33f7661f4c540dfd4f130dc1a30647bb9a2ec2bd80cdc1b3d52a30a9bddb",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:23 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:24.372761922+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:24 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:02:26.889225181+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:02:26.892056344+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=7f8867b43d92c37d07ea3d0fa186eca4020a85760ac5548183b5a05e4c878ffe",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-27b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b-uncensored-p

E2ee Qwen3 6 35b A3b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1 Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 3,895 b398e23200e673d8bdf18e9b48a39f3bfb849fb195b43fa6229a7ae4c02dc270 Open
nvidia-provider-evidence application/json 12,113 5b97bd109a4e82127b74848b43fc4cb03b8c892d91a69c9c15bbcee3994aba8e Open
provider-attestation-response application/json; charset=utf-8 75,436 98601fba4a9533406375fee955ed3d025a9f8056ce027a2e5575cf9090877ed8 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 737eed9d24cd9489ab73b2ec82c77fb84ce468ead2e064e07cb9390a13e2ea62 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "status": "failed",
  "ts": "2026-07-30T00:02:26.892693480+00:00",
  "latency_ms": 3825,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000d746d1c9e9a7d64d5d305d1f1a7e0e10221ee229cc2812f15c2b66d30956497e",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "d746d1c9e9a7d64d5d305d1f1a7e0e10221ee229cc2812f15c2b66d30956497e"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=d746d1c9e9a7d64d5d305d1f1a7e0e10221ee229cc2812f15c2b66d30956497e",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/qwen3.6-35b-a3b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "c0ec14186368acfb7d45268916c145228ab1d980a998626b28563bc30d7e7d00",
    "parsed_evidence_digest": "477ef8e8bcd459892c0ccefcaae6e98920306cfd878144fdccce45a03d13510e",
    "artifact_set_digest": "e7d568851260541c434c8b247e73cf4c4b530f51a9a0af23f8c975277d6c1f58"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:02:28.802742918+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=d746d1c9e9a7d64d5d305d1f1a7e0e10221ee229cc2812f15c2b66d30956497e",
      "sha256": "98601fba4a9533406375fee955ed3d025a9f8056ce027a2e5575cf9090877ed8",
      "size_bytes": 75436,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:28 GMT",
        "etag": "W/\"126ac-qvf4uRreYDO/ZLBqz/SWC+Y75pk\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:02:28.805577598+00:00",
      "sha256": "737eed9d24cd9489ab73b2ec82c77fb84ce468ead2e064e07cb9390a13e2ea62",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:29.857070428+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:29.860007490+00:00",
      "sha256": "5b97bd109a4e82127b74848b43fc4cb03b8c892d91a69c9c15bbcee3994aba8e",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:30.038068944+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "b398e23200e673d8bdf18e9b48a39f3bfb849fb195b43fa6229a7ae4c02dc270",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:29 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:02:30.359034578+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:30 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:02:30.716615572+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:02:30.717911544+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=d746d1c9e9a7d64d5d305d1f1a7e0e10221ee229cc2812f15c2b66d30956497e",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-venice-uncensored-24b-p

E2ee Venice Uncensored 24b P (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,306 9a5b26a470e78d2e2308f724cf1b529bb757dcdfba04a8ab0c9edeabd0dd5169 Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-venice-uncensored-24b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "model": "e2ee-venice-uncensored-24b-p",
  "status": "unreachable",
  "ts": "2026-07-30T00:02:30.718683604+00:00",
  "latency_ms": 23265,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "63737b0ef3638ef36a5dcb75926d9a9e85b48ce5dfcd4d665f43e42d70902809",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "af5346eb2cb310281f4f529d452b83a7df7437380ad6bd15ff4fcd45b5c15080"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:02:53.983215145+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-venice-uncensored-24b-p&nonce=ef538bf2e12f4363f54de5d03f4e8d57db07d8a0245cf42b03095f881302a319",
      "sha256": "9a5b26a470e78d2e2308f724cf1b529bb757dcdfba04a8ab0c9edeabd0dd5169",
      "size_bytes": 63306,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:02:53 GMT",
        "etag": "W/\"f74a-fAzGJa46GEFo/EW5m/uEq+mREYA\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:02:53.983799662+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-venice-uncensored-24b-p",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-3-27b-p

Gemma 3 27B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1 Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 27,372 63503f8720ccff6c4fa8d09904e0de590a5b255e4eed26088300693f504a6a55 Open
nvidia-provider-evidence application/json 98,158 da24bd4443403cee265a5a332c8ec4323937219736e19c605256f3dfe970f8c4 Open
provider-attestation-response application/json; charset=utf-8 161,572 d89ed650d6d514d53658d1474a04ee8383c0fa0458eab992fda59660bfad9383 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 284a2b9af517489eb117f5db7f61289945f0c90211f88b2d5951bf15d6dbf279 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-3-27b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "model": "e2ee-gemma-3-27b-p",
  "status": "failed",
  "ts": "2026-07-30T00:01:26.396809333+00:00",
  "latency_ms": 6030,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000ce90dc0fd4e186bb0e83c43e3e7525b02d1e20058206b7861cfd5199e0317231",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "ce90dc0fd4e186bb0e83c43e3e7525b02d1e20058206b7861cfd5199e0317231"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=ce90dc0fd4e186bb0e83c43e3e7525b02d1e20058206b7861cfd5199e0317231",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "google/gemma-3-27b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "fa4442e03eb3a89481106f42ca4b584c3c805376ae8bc948779c9f3a37429dd8",
    "parsed_evidence_digest": "1d29ca62066ff5aaa540fc1b7abda02f8518bd3bb39087f80ea48f93e4b5c313",
    "artifact_set_digest": "b14f198fd82b986d63b744e596a500b3c23926b2a7d1af2d7b45e37235100381"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:01:30.639224656+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=ce90dc0fd4e186bb0e83c43e3e7525b02d1e20058206b7861cfd5199e0317231",
      "sha256": "d89ed650d6d514d53658d1474a04ee8383c0fa0458eab992fda59660bfad9383",
      "size_bytes": 161572,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:30 GMT",
        "etag": "W/\"27724-CSZZ5z0SLea9ciDTMR/LIBmqYWQ\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:01:30.642106475+00:00",
      "sha256": "284a2b9af517489eb117f5db7f61289945f0c90211f88b2d5951bf15d6dbf279",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:31.364140069+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:31.371522234+00:00",
      "sha256": "da24bd4443403cee265a5a332c8ec4323937219736e19c605256f3dfe970f8c4",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:31.732542161+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "63503f8720ccff6c4fa8d09904e0de590a5b255e4eed26088300693f504a6a55",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:31 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:32.033286084+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:31 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:01:32.425315300+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:01:32.426976537+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=ce90dc0fd4e186bb0e83c43e3e7525b02d1e20058206b7861cfd5199e0317231",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma-3-27b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-31b

Gemma 4 31B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 23d387aeb2ecd15bcc9822d6a120bc43a67645a4d69394ab85a7c83129e5510a Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 27,372 133837e3c874336b999a4c6e0c1f8830b76c7a14484fd4341a1333e7c938706e Open
nvidia-provider-evidence application/json 98,158 f39b8a9fc355be4317940770d5497384b4e48516b764af896e3cc7c10597e6c6 Open
provider-attestation-response application/json; charset=utf-8 211,768 2889861dcc44483dec9fe33bf7c808257a5b449e1c3460912e0db46b2b8686e5 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 40997362423751f0aa8aa9c6a7706681dc6dd50fe23ab6525b23b6021075a370 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-31b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "e2ee-gemma-4-31b",
  "status": "partial",
  "ts": "2026-07-30T00:00:50.475903984+00:00",
  "latency_ms": 11841,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "9765596f43dd91d1467f9a370682173741786d8c000000000000000000000000d8cdbb5092ccfe1404b27c78a5829a2d81989dd93cd2bea0383a6afd24f13df6",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "d8cdbb5092ccfe1404b27c78a5829a2d81989dd93cd2bea0383a6afd24f13df6"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.322",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=d8cdbb5092ccfe1404b27c78a5829a2d81989dd93cd2bea0383a6afd24f13df6",
  "signing_public_key": "04323149efe98c490b9b44b517b3bd599defd1ad5a61f580ca27bfd3daedd3333eddd6e40663c9a79556897ddf9ecf9dfb937ebd3cfbac512d2a7620b3c2df09d2",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "google/gemma-4-31B-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d4203286afffcc9a39b1f45d1c7d5c74fb13348e957819581946cb00b2e48a7a",
    "parsed_evidence_digest": "b53eaa934e2152f89a0d839d4294abf8287da764744411f41b269240fb1e1f3b",
    "artifact_set_digest": "d018c42f61f90bc1a7bf7a6e8e97b41383d1fe17d3739271ad33815d53562e37"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:00:58.116684772+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=d8cdbb5092ccfe1404b27c78a5829a2d81989dd93cd2bea0383a6afd24f13df6",
      "sha256": "2889861dcc44483dec9fe33bf7c808257a5b449e1c3460912e0db46b2b8686e5",
      "size_bytes": 211768,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:58 GMT",
        "etag": "W/\"33b38-uRwrk/GSe9z9/7aCWN1RB+/PVZk\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:00:58.123596794+00:00",
      "sha256": "40997362423751f0aa8aa9c6a7706681dc6dd50fe23ab6525b23b6021075a370",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:58.875948840+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "23d387aeb2ecd15bcc9822d6a120bc43a67645a4d69394ab85a7c83129e5510a",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:58.883493039+00:00",
      "sha256": "f39b8a9fc355be4317940770d5497384b4e48516b764af896e3cc7c10597e6c6",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:59.250116103+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "133837e3c874336b999a4c6e0c1f8830b76c7a14484fd4341a1333e7c938706e",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:59 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:59.559333889+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:59 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:01:02.314683577+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:01:02.316435646+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=d8cdbb5092ccfe1404b27c78a5829a2d81989dd93cd2bea0383a6afd24f13df6",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma4-31b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-glm-4-7-p

GLM 4.7 (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,285 21f1837eeb205e32888ab4a5d9d2413997f9002b9e7f7f4445d7b876dcbf5b4f Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-4-7-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "model": "e2ee-glm-4-7-p",
  "status": "unreachable",
  "ts": "2026-07-30T00:01:32.427566334+00:00",
  "latency_ms": 23073,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "2bef40dba80458d0ffdef8a081a97b86dcfe49653846ea7087cba6af79da09fd",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "b50fd07cda0b06ed4ea9dd9f681df335bda9f5bdd2a34ef823b926edaa69bcf4"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:01:55.499557789+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-4-7-p&nonce=2b454607bf666a4c8973472cc8765d0c1795b3fc26bb3948448db53b325e679c",
      "sha256": "21f1837eeb205e32888ab4a5d9d2413997f9002b9e7f7f4445d7b876dcbf5b4f",
      "size_bytes": 63285,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:55 GMT",
        "etag": "W/\"f735-sHEExmxE0RfU0H2XwXByiIXMb+0\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:01:55.500590988+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-glm-4-7",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-1

GLM 5.1 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 d60a4d6eeb44278e3c001434c9cd4a5dca5e2c1c61104d388d4a9976cc9472f4 Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 27,372 0f0beabc85eb99201f58cc359f901fc96c67ec3868cba2820e55f6f12bb287fa Open
nvidia-provider-evidence application/json 98,158 f29125d27c955de6118f471455e9839ecd501d1c53dea0a0631e27a7a01e37c7 Open
provider-attestation-response application/json; charset=utf-8 217,642 a201506e3e48e1940a620fefbc3bfac7f1cd417e86ac64a3c0b34251941eda81 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 18223745b3b049685ec9865fa871179909d8a688cc24a2a1c1d40e9d4bcb73f4 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-1",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "e2ee-glm-5-1",
  "status": "partial",
  "ts": "2026-07-30T00:00:23.732380521+00:00",
  "latency_ms": 6124,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "010fccab4eb7ffc4c9ec1be8e2851e7b820efef0485cfd21ac027bf1408dc836b0000000000000000000000000000000",
    "report_data": "bb4d2e7ffe98eefcd9690e2139be41e92b95e3330000000000000000000000004ab9f62b8678488d569ab411fae5922fe5ff5f94b6fc93f9a1cb732306c3da8d",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "33a68f88f7ada9fef354f4099b1bf412a655204ca821581b758857b88d27cc37dcf4912c4da3d90e39b6cd1aee5c090d",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "4ab9f62b8678488d569ab411fae5922fe5ff5f94b6fc93f9a1cb732306c3da8d"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=4ab9f62b8678488d569ab411fae5922fe5ff5f94b6fc93f9a1cb732306c3da8d",
  "signing_public_key": "042a1c47aad08a4f47dcb67134d77b83d8a1d5c895e37e959189249e819c3939289d8c59acb07d262db3ca946d52c51ae079fde6708cb0af7e25a57d35c8e0ac30",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "zai-org/GLM-5.1-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "03fdc558c673ff52a8bca5e89d896269b6ea362754c83b7d85252611a05588d8",
    "parsed_evidence_digest": "1a1533124a17e379022c6cdd159c15cf5dadb5fbc6958c50ae7eb1ec725e55ac",
    "artifact_set_digest": "d4f7ba7ff7ac77ea81db5b4bfe65bc22e065fdce5cd9da248223eab907955c0e"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:00:25.348164966+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=4ab9f62b8678488d569ab411fae5922fe5ff5f94b6fc93f9a1cb732306c3da8d",
      "sha256": "a201506e3e48e1940a620fefbc3bfac7f1cd417e86ac64a3c0b34251941eda81",
      "size_bytes": 217642,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:25 GMT",
        "etag": "W/\"3522a-qoJix11MQwySxmVFQdCGS7hoU6Y\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:00:25.353913635+00:00",
      "sha256": "18223745b3b049685ec9865fa871179909d8a688cc24a2a1c1d40e9d4bcb73f4",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:26.079416440+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d60a4d6eeb44278e3c001434c9cd4a5dca5e2c1c61104d388d4a9976cc9472f4",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:26.084912586+00:00",
      "sha256": "f29125d27c955de6118f471455e9839ecd501d1c53dea0a0631e27a7a01e37c7",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:26.321619995+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "0f0beabc85eb99201f58cc359f901fc96c67ec3868cba2820e55f6f12bb287fa",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:26 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:26.633452309+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:26 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:00:29.854074444+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:00:29.856324678+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=4ab9f62b8678488d569ab411fae5922fe5ff5f94b6fc93f9a1cb732306c3da8d",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-glm-5-1",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-120b-p

GPT-OSS 120B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1 Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 27,372 76b2f7b678258881051a4d0d9d6f358683c4e73ba502006d583ab976a0838611 Open
nvidia-provider-evidence application/json 98,158 44b5b55de325d1893a45ec526e180e090ad2c577d011c9dd52d725e33046f1fe Open
provider-attestation-response application/json; charset=utf-8 161,571 705e194d75e377cd6a6c3cacfd7024ec9c7bb51c4733ed6a9bef455bdd66331b Open
tdx-quote application/vnd.intel.tdx.quote 5,006 856afa3cab2c32471debda25d6e57ad3b19640e8bd3cd63c40184d150ff1a8c5 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-120b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "e2ee-gpt-oss-120b-p",
  "status": "failed",
  "ts": "2026-07-30T00:00:16.617187910+00:00",
  "latency_ms": 7115,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000005f20032b43fa25df07e2ca4ff45aa8bf4bdcd3e4ab50cd3018c07cca606ff206",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "5f20032b43fa25df07e2ca4ff45aa8bf4bdcd3e4ab50cd3018c07cca606ff206"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=5f20032b43fa25df07e2ca4ff45aa8bf4bdcd3e4ab50cd3018c07cca606ff206",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "aaf74ec046ce1c78396bcc35ccf903c96e46ed1e1c464fe7f775626827dd3e3e",
    "parsed_evidence_digest": "f80bfd521a23f370bf15f87d00f41dd932440b5746e5ed7007843d009cf977b1",
    "artifact_set_digest": "8ae838dab72a8d81672d4903f68c1bb828b73abf0671c4951eecacfc6d899025"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:00:19.951467608+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=5f20032b43fa25df07e2ca4ff45aa8bf4bdcd3e4ab50cd3018c07cca606ff206",
      "sha256": "705e194d75e377cd6a6c3cacfd7024ec9c7bb51c4733ed6a9bef455bdd66331b",
      "size_bytes": 161571,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:19 GMT",
        "etag": "W/\"27723-3pl9EqEJOXteh3gnPUU+eKKHyJQ\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:00:19.954528151+00:00",
      "sha256": "856afa3cab2c32471debda25d6e57ad3b19640e8bd3cd63c40184d150ff1a8c5",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:22.121087174+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:22.129424512+00:00",
      "sha256": "44b5b55de325d1893a45ec526e180e090ad2c577d011c9dd52d725e33046f1fe",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:22.553067590+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "76b2f7b678258881051a4d0d9d6f358683c4e73ba502006d583ab976a0838611",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:22 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:00:23.278636239+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:23 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:00:23.730740322+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:00:23.731799701+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=5f20032b43fa25df07e2ca4ff45aa8bf4bdcd3e4ab50cd3018c07cca606ff206",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-120b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-20b-p

GPT-OSS 20B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1 Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 3,895 fa72b9043678a59590ab76487eb6a3fafb3cbe9141662bd0e9a1de6223ce8167 Open
nvidia-provider-evidence application/json 12,103 23be3619dd0f43b9955037264d0e1d153f46d87f8140d34bbb25d449395e4618 Open
provider-attestation-response application/json; charset=utf-8 75,398 5971f5e807fe299bff28588fa528d4040f03829539fbb6285b3fc7aa4facc66c Open
tdx-quote application/vnd.intel.tdx.quote 5,006 56f671a3b4e0ea6a7b93b6119083d600bb0ec08bf30ce0de51fe0dc1d55409e4 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-20b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "model": "e2ee-gpt-oss-20b-p",
  "status": "failed",
  "ts": "2026-07-30T00:01:02.317716189+00:00",
  "latency_ms": 4117,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000004e6a011266bda5e6066c75e21c9371fce054bf4d08201fea400afb511dcf44cc",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "4e6a011266bda5e6066c75e21c9371fce054bf4d08201fea400afb511dcf44cc"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=4e6a011266bda5e6066c75e21c9371fce054bf4d08201fea400afb511dcf44cc",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-20b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "154a32eee1670d93a604cad1a45dbefe22b555596136cb0b33d566fe3bced80c",
    "parsed_evidence_digest": "c6783352fbe79e377620d660972b13669fc3f1262533eab83a92414c89026562",
    "artifact_set_digest": "832cc4df28948d7275e3eb8a08c7db47f93dba0e0ae08ef700b0df2679c4237d"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:01:04.450877531+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=4e6a011266bda5e6066c75e21c9371fce054bf4d08201fea400afb511dcf44cc",
      "sha256": "5971f5e807fe299bff28588fa528d4040f03829539fbb6285b3fc7aa4facc66c",
      "size_bytes": 75398,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:04 GMT",
        "etag": "W/\"12686-7UAUQvdB21pZKoNaCVmKJrm/J8k\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:01:04.454958981+00:00",
      "sha256": "56f671a3b4e0ea6a7b93b6119083d600bb0ec08bf30ce0de51fe0dc1d55409e4",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:05.202395261+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:05.206543336+00:00",
      "sha256": "23be3619dd0f43b9955037264d0e1d153f46d87f8140d34bbb25d449395e4618",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:05.743760118+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "fa72b9043678a59590ab76487eb6a3fafb3cbe9141662bd0e9a1de6223ce8167",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:05 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:06.045952119+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:05 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:01:06.432991499+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:01:06.434405373+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=4e6a011266bda5e6066c75e21c9371fce054bf4d08201fea400afb511dcf44cc",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-20b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen-2-5-7b-p

Qwen 2.5 7B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1 Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 3,895 1c9a5fb4b66628111881d887c6d0f06c7af8b9c201a0e4416ffd355f1b879906 Open
nvidia-provider-evidence application/json 12,103 916cd3692d8c5363922e3bbb8be65ad5478d93accfcaccd1fbc5af362793a156 Open
provider-attestation-response application/json; charset=utf-8 75,405 212c93383b62ea47998f8a4bc957af7f224573aa2dc99b91e74d0077ec1894db Open
tdx-quote application/vnd.intel.tdx.quote 5,006 2d077ff2fdae0f64fec87b0a8d9ff41414e38f5bcb4bd212c32d53c53e4d988e Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen-2-5-7b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "model": "e2ee-qwen-2-5-7b-p",
  "status": "failed",
  "ts": "2026-07-30T00:01:06.434962298+00:00",
  "latency_ms": 5944,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000024589b96ac65d45fd13ee6e92af73bf35986721eb87d10ebe3736a2531a7e352",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "24589b96ac65d45fd13ee6e92af73bf35986721eb87d10ebe3736a2531a7e352"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=24589b96ac65d45fd13ee6e92af73bf35986721eb87d10ebe3736a2531a7e352",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen-2.5-7b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "35d5376e2888c2959f84cf1777577615992bf3ca1c8acbdef28792d28906ef44",
    "parsed_evidence_digest": "7a49a7a7ad1547c67505ca402ce2401614d6e53610f725cbb58a9314f9ca742f",
    "artifact_set_digest": "076a80712c5971e34c667ae38cfc053238a1ffe5fde96cf645f99188d8d8fbbd"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:01:10.532566434+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=24589b96ac65d45fd13ee6e92af73bf35986721eb87d10ebe3736a2531a7e352",
      "sha256": "212c93383b62ea47998f8a4bc957af7f224573aa2dc99b91e74d0077ec1894db",
      "size_bytes": 75405,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:10 GMT",
        "etag": "W/\"1268d-bJ7KhDWraGYS0jnoptK6BsDqXBI\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:01:10.540439520+00:00",
      "sha256": "2d077ff2fdae0f64fec87b0a8d9ff41414e38f5bcb4bd212c32d53c53e4d988e",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:11.280361287+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:11.284113188+00:00",
      "sha256": "916cd3692d8c5363922e3bbb8be65ad5478d93accfcaccd1fbc5af362793a156",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:11.465160967+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "1c9a5fb4b66628111881d887c6d0f06c7af8b9c201a0e4416ffd355f1b879906",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:11 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:11.777602092+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:11 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:01:12.377178130+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:01:12.378727588+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=24589b96ac65d45fd13ee6e92af73bf35986721eb87d10ebe3736a2531a7e352",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen-2-5-7b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-30b-a3b-p

Qwen3 30B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,311 ffde3621f2fb3896a9678e5103d8514ad4cf68059cedd44892e586c03bdc40eb Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-30b-a3b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "model": "e2ee-qwen3-30b-a3b-p",
  "status": "unreachable",
  "ts": "2026-07-30T00:00:29.856819687+00:00",
  "latency_ms": 20619,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d3b7d5b034fa8eef6ec5eac7e82f838edee010abaf721fc13160072d702a8d97",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "bab678d4b9c736f8187e5f61e2208e750cd848cb99297b8c8819c55cab34da6f"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:00:50.474975421+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-30b-a3b-p&nonce=6e49fa987a83e01cd1c784c1e1e9a6b4ec9a0b2dc519cfa6665ab65b456e6d29",
      "sha256": "ffde3621f2fb3896a9678e5103d8514ad4cf68059cedd44892e586c03bdc40eb",
      "size_bytes": 63311,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:00:50 GMT",
        "etag": "W/\"f74f-C0JfmvWazF1waEBfTSueei5ikF0\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:00:50.475574025+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-30b",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b

Qwen3 35B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,565 ae3216d63bece82ec4b37d7bab88769a5818e580678848b3a444678d367486de Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 27,372 19ab24a43d18e0e3338163498ea042ff382c141553b04cdf7a4acfe03bb85d0f Open
nvidia-provider-evidence application/json 98,158 97e7b73b594ee6a28366e764d67fa3397752210b064a5600eacb2eb69b2f5622 Open
provider-attestation-response application/json; charset=utf-8 206,891 97035861519bbbb8d50be0b3c06863b4a3719eef2468b5cc4f7971c63dc69a23 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 80e2b7a5895d47f7a6b41bf767469c0716c1ce540bb8ac05daae62569648310c Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b",
  "status": "partial",
  "ts": "2026-07-30T00:01:12.379316523+00:00",
  "latency_ms": 8256,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000",
    "report_data": "e5d0fec43b001f181a3410b96715ec54171f36da00000000000000000000000015994d1f1e001e2a7341f41cabd5345a30ec51e8c43bb65c524f4e24ec9980ca",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "15994d1f1e001e2a7341f41cabd5345a30ec51e8c43bb65c524f4e24ec9980ca"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.295",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b",
    "nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=15994d1f1e001e2a7341f41cabd5345a30ec51e8c43bb65c524f4e24ec9980ca",
  "signing_public_key": "0489f03d8ed945eff27ad1053f87ece198409aff78c5c2aea3e438c460482f67ff5b900054dc129f6ce57e40e8875ceac0ddf30aeb885c28fd2c3e05bf3fbaa4d9",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-35B-A3B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "28b59278d6e285fe41fde0af552060aefc77c50a2c8d1403c805e1fea57569e1",
    "parsed_evidence_digest": "3f403b2b994e6f1dbf5c02b6f5bd663cdcf7478179a698848c4a873569fd9c41",
    "artifact_set_digest": "e1f6e61c65558b4fb5127b474df1d3e9d75b86e363c7a3321d7841ab524b72e2"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:01:16.532657665+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=15994d1f1e001e2a7341f41cabd5345a30ec51e8c43bb65c524f4e24ec9980ca",
      "sha256": "97035861519bbbb8d50be0b3c06863b4a3719eef2468b5cc4f7971c63dc69a23",
      "size_bytes": 206891,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:16 GMT",
        "etag": "W/\"3282b-7sKuSwRYMMH5DpkQ6jo9an+KbmY\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:01:16.540792142+00:00",
      "sha256": "80e2b7a5895d47f7a6b41bf767469c0716c1ce540bb8ac05daae62569648310c",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:17.231591576+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "ae3216d63bece82ec4b37d7bab88769a5818e580678848b3a444678d367486de",
      "size_bytes": 22565,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:17.237134870+00:00",
      "sha256": "97e7b73b594ee6a28366e764d67fa3397752210b064a5600eacb2eb69b2f5622",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:17.954826104+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "19ab24a43d18e0e3338163498ea042ff382c141553b04cdf7a4acfe03bb85d0f",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:17 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:18.282953680+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:18 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:01:20.632191282+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:01:20.635406667+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=15994d1f1e001e2a7341f41cabd5345a30ec51e8c43bb65c524f4e24ec9980ca",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-6-35b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-vl-30b-a3b-p

Qwen3-VL 30B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1 Open
nvidia-nras-jwks application/json 80,970 7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430 Open
nvidia-nras-response application/json 27,372 ec90e62fb3051a1b88f8ed6d116251420466a55795d61c24d1dfe1b45688713b Open
nvidia-provider-evidence application/json 98,158 e1ee537eb6463f301bcbcf04d80b6102dea0af58bcf8bda6654dc524be1fecd4 Open
provider-attestation-response application/json; charset=utf-8 161,586 5d461ccebba210e5b639676641f1929bc24f03731d8ad136bfbbb55c8c1647bc Open
tdx-quote application/vnd.intel.tdx.quote 5,006 c210bc922ee2c645ba5ad5239b3156f4a6dda86f1179d4e425504a26d94f30be Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "status": "failed",
  "ts": "2026-07-30T00:01:20.636284604+00:00",
  "latency_ms": 5760,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000005ef1016cecd9f3a54baeb3473b58f1f43251a7a7812833cdb6fdb8209d230097",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "5ef1016cecd9f3a54baeb3473b58f1f43251a7a7812833cdb6fdb8209d230097"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=5ef1016cecd9f3a54baeb3473b58f1f43251a7a7812833cdb6fdb8209d230097",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen3-vl-30b-a3b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7289104bde08feb53e83f2c066e36a948c5f65fef123a919bf4f17bc5de4f338",
    "parsed_evidence_digest": "6701490a205ada1f1d0000db7ceab5ec9457e5b769b87089685ca2cc249033ac",
    "artifact_set_digest": "d633a349b48e1a9d9af79e5c50da00d32ff2ad946e9f0c4bf9cfa373b6a55075"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T00:01:24.074135803+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=5ef1016cecd9f3a54baeb3473b58f1f43251a7a7812833cdb6fdb8209d230097",
      "sha256": "5d461ccebba210e5b639676641f1929bc24f03731d8ad136bfbbb55c8c1647bc",
      "size_bytes": 161586,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:24 GMT",
        "etag": "W/\"27732-oiT9gMwtc3Md59kWnJSJmJvuv4g\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T00:01:24.078211212+00:00",
      "sha256": "c210bc922ee2c645ba5ad5239b3156f4a6dda86f1179d4e425504a26d94f30be",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:25.020158057+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5dcd7d7b9c119132c2da8cf8dd641a0cfc6fba5f237fbe3d67e38a0223183bd1",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:25.028090464+00:00",
      "sha256": "e1ee537eb6463f301bcbcf04d80b6102dea0af58bcf8bda6654dc524be1fecd4",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:25.384816641+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "ec90e62fb3051a1b88f8ed6d116251420466a55795d61c24d1dfe1b45688713b",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:25 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T00:01:26.072616773+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "7d4b5157293e4ebb554940e8357a8ef34523e469eaa142f0da49943e9164f430",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 00:01:25 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T00:01:26.394802416+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T00:01:26.396066789+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=5ef1016cecd9f3a54baeb3473b58f1f43251a7a7812833cdb6fdb8209d230097",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-vl-30b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}