Stored Run Record

Run #1153

Completed Jul 30, 2026, 18:02:54 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
16
Verified
0
Incomplete
5
Failed
8
Unavailable
3

Recorded Decisions

Checks in this run

Run JSON

Venice.ai

e2ee-deepseek-v4-flash

E2ee Deepseek V4 Flash (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 833f2b72b23c96abc5226d5c84f413ada1453936e76c87afadf8b0a5984ac39b Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 27,372 8b2b5675fdb7a03903912ee1c3699d1eebabf6dcae5d9a1e7914f62ece25f66b Open
nvidia-provider-evidence application/json 98,158 424864f0c8a4a3544bc0b41d8f40985b8c16595d7246bdf75829cc82807cf1b9 Open
provider-attestation-response application/json; charset=utf-8 199,830 b4de583f60a2ba71cddd824fe337fb63c4d4dfa7dc8b402d2dec946a5a5b209d Open
tdx-quote application/vnd.intel.tdx.quote 5,010 fc1e39635b320964ae00ca6fa66aef7ac33409e3393a5661d3103ad613892208 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-deepseek-v4-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "model": "e2ee-deepseek-v4-flash",
  "status": "partial",
  "ts": "2026-07-30T18:01:55.973430495+00:00",
  "latency_ms": 10461,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "0166007399f064f058af68771c552bcae150c9f88622305631b5141da1aa2f7b7e000000000000000000000000000000",
    "report_data": "c5f6bf2f1bc666569157ec1bb4066cdaf48d026c000000000000000000000000ccb541846f22b68d23254910253153a50dd7cc9b43f05d53694869fcf941f850",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "18c28d262ab4733031c19fa1af233686e227a789955ba9dba2065b398c9f5dbfb76133d751dac412540dc5ac992b1b73",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "ccb541846f22b68d23254910253153a50dd7cc9b43f05d53694869fcf941f850"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.325",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=ccb541846f22b68d23254910253153a50dd7cc9b43f05d53694869fcf941f850",
  "signing_public_key": "0434ba223c3175c4debee8cd12d72f55869b6cf1ccc5ff578e940a23c7bf9dcf3abd6530ce8d8624ffd150900fd31bae802eb75367a154a75e39cc87f748b63b84",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "deepseek-ai/DeepSeek-V4-Flash"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "6bacc84fe763af7014ff7c9a51a99d349597d7e6eabd0c9a763d01c2d62932c8",
    "parsed_evidence_digest": "426d96e7ad8c11db03a1b3843d1391797f2dafc21ce36bad1c128ae496f0c0ac",
    "artifact_set_digest": "4e202c2c9c2ded56e77d3704ae52a3165f263ce622cad331645cd442631e5721"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:02:02.260225884+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=ccb541846f22b68d23254910253153a50dd7cc9b43f05d53694869fcf941f850",
      "sha256": "b4de583f60a2ba71cddd824fe337fb63c4d4dfa7dc8b402d2dec946a5a5b209d",
      "size_bytes": 199830,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:02 GMT",
        "etag": "W/\"30c96-/eXRTpE1qK74KWa49vH06SjhVw0\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:02:02.264131313+00:00",
      "sha256": "fc1e39635b320964ae00ca6fa66aef7ac33409e3393a5661d3103ad613892208",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:03.003697911+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "833f2b72b23c96abc5226d5c84f413ada1453936e76c87afadf8b0a5984ac39b",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:03.010269463+00:00",
      "sha256": "424864f0c8a4a3544bc0b41d8f40985b8c16595d7246bdf75829cc82807cf1b9",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:03.356047042+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "8b2b5675fdb7a03903912ee1c3699d1eebabf6dcae5d9a1e7914f62ece25f66b",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:03 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:03.693207941+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:03 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:02:06.432992140+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:02:06.434122741+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=ccb541846f22b68d23254910253153a50dd7cc9b43f05d53694869fcf941f850",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-deepseek-v4-flash",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-26b-a4b-uncensored-p

E2ee Gemma 4 26b A4b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 3,895 4a3f5ee982ae08a4f5aef614f6d1f5e42bb06018877bdcbbb7f9fce17d7275b5 Open
nvidia-provider-evidence application/json 12,113 8b66acbf9b530c94b9ffe2ea4fdb28e488817605031749386c60e6a5f5077c91 Open
provider-attestation-response application/json; charset=utf-8 75,437 832e3735a1c84de060e97818e06616bfefd87ba1b7dce2074040077ef34ac67e Open
tdx-quote application/vnd.intel.tdx.quote 5,006 ac224221763932c6c418b5dcc10dfdf13d6bd030d894a36ee9240eed500ec8b0 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "status": "failed",
  "ts": "2026-07-30T18:02:06.434544633+00:00",
  "latency_ms": 5063,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000699037ddc1babbcf637ce41697cd644819ef161a58d763cb1bd32e08d0ba2104",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "699037ddc1babbcf637ce41697cd644819ef161a58d763cb1bd32e08d0ba2104"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=699037ddc1babbcf637ce41697cd644819ef161a58d763cb1bd32e08d0ba2104",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/gemma-4-26b-a4b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "41c172ed2008d2092130db0be7a7613acf8cb488824bc71f5430b532a8d5d263",
    "parsed_evidence_digest": "501a7cbc0cf5afa81d50e5889989de8b0d1fc481cb0a890aebd69d3a2d158ed7",
    "artifact_set_digest": "ad74e80f85ee454aab86de70910631e352f34162dfe364329ae974f8102a850a"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:02:09.847744368+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=699037ddc1babbcf637ce41697cd644819ef161a58d763cb1bd32e08d0ba2104",
      "sha256": "832e3735a1c84de060e97818e06616bfefd87ba1b7dce2074040077ef34ac67e",
      "size_bytes": 75437,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:09 GMT",
        "etag": "W/\"126ad-dkSJ3K+EVmMHTj+j4gX764/oUzw\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:02:09.849890456+00:00",
      "sha256": "ac224221763932c6c418b5dcc10dfdf13d6bd030d894a36ee9240eed500ec8b0",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:10.551923025+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:10.554663298+00:00",
      "sha256": "8b66acbf9b530c94b9ffe2ea4fdb28e488817605031749386c60e6a5f5077c91",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:10.784099957+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "4a3f5ee982ae08a4f5aef614f6d1f5e42bb06018877bdcbbb7f9fce17d7275b5",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:10 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:11.088148566+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:10 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:02:11.497011543+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:02:11.497951517+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=699037ddc1babbcf637ce41697cd644819ef161a58d763cb1bd32e08d0ba2104",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-2-p

E2ee Glm 5 2 P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 27,372 bdb1473c9879676be72e0b6a3fdd67c66521469ae3ee4bfc51efa63be4c8c200 Open
nvidia-provider-evidence application/json 98,158 cbabff73b947ef56e40d372d91dbe536436fa97ec8b79b8f50be5da51639d941 Open
provider-attestation-response application/json; charset=utf-8 161,559 3e945e66bb7efa150dcce2e25788d669b66fd36f014a6059e77a333dfebd4777 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 113a099a3aecbe98277aacd18aa789adf2cd849b564415f62cd8f0b15422954e Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-2-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "model": "e2ee-glm-5-2-p",
  "status": "failed",
  "ts": "2026-07-30T18:02:11.498310781+00:00",
  "latency_ms": 7225,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000580cf6f643f4433b0dc9a5a38a8f17d712b18a81f6770de01a19a42c5535b8e3",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "580cf6f643f4433b0dc9a5a38a8f17d712b18a81f6770de01a19a42c5535b8e3"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=580cf6f643f4433b0dc9a5a38a8f17d712b18a81f6770de01a19a42c5535b8e3",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "z-ai/glm-5.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "bfe8723519f8385580376b47989fb0ec8ca25514e2991643fc96586ab0101adc",
    "parsed_evidence_digest": "3d415894e1b64141dd44fde2612ed7bac2915514ecfaefdbb1682faf01f18c88",
    "artifact_set_digest": "14c59da0a62ea0240eee23179c849c85774296fbd8b06b4b268b0ba11b5fbc0d"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:02:16.535316921+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=580cf6f643f4433b0dc9a5a38a8f17d712b18a81f6770de01a19a42c5535b8e3",
      "sha256": "3e945e66bb7efa150dcce2e25788d669b66fd36f014a6059e77a333dfebd4777",
      "size_bytes": 161559,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:16 GMT",
        "etag": "W/\"27717-Yr9EIwJraBv+1QfMACyuMz8Fa+4\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:02:16.537749305+00:00",
      "sha256": "113a099a3aecbe98277aacd18aa789adf2cd849b564415f62cd8f0b15422954e",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:17.284552313+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:17.289971393+00:00",
      "sha256": "cbabff73b947ef56e40d372d91dbe536436fa97ec8b79b8f50be5da51639d941",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:17.647167119+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "bdb1473c9879676be72e0b6a3fdd67c66521469ae3ee4bfc51efa63be4c8c200",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:17 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:17.989778156+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:17 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:02:18.722703350+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:02:18.723254554+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=580cf6f643f4433b0dc9a5a38a8f17d712b18a81f6770de01a19a42c5535b8e3",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-glm-5-2-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-27b

E2ee Qwen3 6 27b (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 b9989e29ec322c0705e930afb45358e830170b2ba0935b50ccef75aa3dab0082 Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 27,372 3f506968bd7be03f14b08586b45e2ef55c2914c2da487826299cd4ebd046310f Open
nvidia-provider-evidence application/json 98,158 ded81708babc2623845f57ad96b73bbcbc13dc998028b3ab4ae385e813dc1736 Open
provider-attestation-response application/json; charset=utf-8 211,766 378d1d781301e3a44df978aee6f60ab81a2b02a912e63b79a3d2a5983fa0c34f Open
tdx-quote application/vnd.intel.tdx.quote 5,010 ccfac45cfd55a35ba96e98edb9143bf581f0ae1e70486e183cbed477dd958077 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-27b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "model": "e2ee-qwen3-6-27b",
  "status": "partial",
  "ts": "2026-07-30T18:02:18.723702405+00:00",
  "latency_ms": 7136,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "6eb6ce4fa9f7f704769afff165955105c1ae7b1d000000000000000000000000c9c85b42cca3922f1168778b1007a56a55fc12a60ef9dcb15da47ddf06c3a1c1",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "c9c85b42cca3922f1168778b1007a56a55fc12a60ef9dcb15da47ddf06c3a1c1"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.322",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=c9c85b42cca3922f1168778b1007a56a55fc12a60ef9dcb15da47ddf06c3a1c1",
  "signing_public_key": "04cf942c4bcb0f89ffd33e837d850ab3eb4ff66cee6b285db3bbdff6e815f81e7df9a4bfaf863207b5d4ccc99ea4c3eca3172a82b2a7717635522bd22fc0cf6219",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-27B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7e0ccb549a79a186da738c36fb21f4ac9a803041723f5569bbd7945a4ca7e530",
    "parsed_evidence_digest": "d349b564d9190296fcd079ec6c0f3938e39f3fc514ea54456991f05e5536172f",
    "artifact_set_digest": "0096883b9b0a58cebc3c85ca0ac3d66e84f0e293096b77a43a3a39fef3b706ea"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:02:21.987133318+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=c9c85b42cca3922f1168778b1007a56a55fc12a60ef9dcb15da47ddf06c3a1c1",
      "sha256": "378d1d781301e3a44df978aee6f60ab81a2b02a912e63b79a3d2a5983fa0c34f",
      "size_bytes": 211766,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:21 GMT",
        "etag": "W/\"33b36-BeXKpIQcJBGvP2xp1bplF+rOzE8\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:02:21.991915994+00:00",
      "sha256": "ccfac45cfd55a35ba96e98edb9143bf581f0ae1e70486e183cbed477dd958077",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:22.687937513+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "b9989e29ec322c0705e930afb45358e830170b2ba0935b50ccef75aa3dab0082",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:22.692725077+00:00",
      "sha256": "ded81708babc2623845f57ad96b73bbcbc13dc998028b3ab4ae385e813dc1736",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:23.060881002+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "3f506968bd7be03f14b08586b45e2ef55c2914c2da487826299cd4ebd046310f",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:22 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:23.362328770+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:23 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:02:25.858084597+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:02:25.859745413+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=c9c85b42cca3922f1168778b1007a56a55fc12a60ef9dcb15da47ddf06c3a1c1",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-27b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b-uncensored-p

E2ee Qwen3 6 35b A3b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 3,895 591bc8698524e0eafa81956d09d1ffc55b539f972f578d09f73b7eb6a9d7ace3 Open
nvidia-provider-evidence application/json 12,113 07ce068dab509fea62f8b61f40e29c59cd7de1cde5fe6ad2d6647d325a6aaaf1 Open
provider-attestation-response application/json; charset=utf-8 75,437 ba457266eb7de76d4ebba8056a80d19d4298bee9cd94d38e4ea2481f1e7af0dd Open
tdx-quote application/vnd.intel.tdx.quote 5,006 d5229994a20e3523e4c4b532324ff9568c9d35b706d7fbc85be19384b286de22 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "status": "failed",
  "ts": "2026-07-30T18:02:25.860235313+00:00",
  "latency_ms": 5409,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000005b6c017e9300613533d8fda39a1bcf497c2a34058bd868443731a695bd44993b",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "5b6c017e9300613533d8fda39a1bcf497c2a34058bd868443731a695bd44993b"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=5b6c017e9300613533d8fda39a1bcf497c2a34058bd868443731a695bd44993b",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/qwen3.6-35b-a3b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "c0ec14186368acfb7d45268916c145228ab1d980a998626b28563bc30d7e7d00",
    "parsed_evidence_digest": "f9381794fadb0db2d54eb47daf815c19c5cdae749d8bff2919f0237ebd1027ec",
    "artifact_set_digest": "0734dd7e624062af753286f4b1bd0fd2a1109f9c6e8f1caa34ea5714ec14bbfd"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:02:29.401916070+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=5b6c017e9300613533d8fda39a1bcf497c2a34058bd868443731a695bd44993b",
      "sha256": "ba457266eb7de76d4ebba8056a80d19d4298bee9cd94d38e4ea2481f1e7af0dd",
      "size_bytes": 75437,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:29 GMT",
        "etag": "W/\"126ad-QABQNutHgiNU9Xna9OBwn3o/bpA\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:02:29.404060605+00:00",
      "sha256": "d5229994a20e3523e4c4b532324ff9568c9d35b706d7fbc85be19384b286de22",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:30.371866414+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:30.374351378+00:00",
      "sha256": "07ce068dab509fea62f8b61f40e29c59cd7de1cde5fe6ad2d6647d325a6aaaf1",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:30.550105564+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "591bc8698524e0eafa81956d09d1ffc55b539f972f578d09f73b7eb6a9d7ace3",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:30 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:02:30.848341946+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:30 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:02:31.268265139+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:02:31.269495357+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=5b6c017e9300613533d8fda39a1bcf497c2a34058bd868443731a695bd44993b",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-venice-uncensored-24b-p

E2ee Venice Uncensored 24b P (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,306 7e439ef0e2498227de0393e6b8769ced4335d77596534d414d4f3b09395e030f Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-venice-uncensored-24b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "model": "e2ee-venice-uncensored-24b-p",
  "status": "unreachable",
  "ts": "2026-07-30T18:02:31.270047734+00:00",
  "latency_ms": 23136,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "63737b0ef3638ef36a5dcb75926d9a9e85b48ce5dfcd4d665f43e42d70902809",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "154b50d6d36d7d13de44d8b7d2762451ecb23ddfac0950aa84368531c929e2c4"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:02:54.405572053+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-venice-uncensored-24b-p&nonce=cf76d2c83cb002e712c31684d4922e9b4bf7f8c7504b3ee545d5880f97984204",
      "sha256": "7e439ef0e2498227de0393e6b8769ced4335d77596534d414d4f3b09395e030f",
      "size_bytes": 63306,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:02:54 GMT",
        "etag": "W/\"f74a-NMx/zlVFU8I+j0WiGJf+V1cwbOs\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:02:54.405920918+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-venice-uncensored-24b-p",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-3-27b-p

Gemma 3 27B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 27,372 b74efb84e54338215f3b38c4e57c2a319e8b8a6586e44f76442c687f69f5ddae Open
nvidia-provider-evidence application/json 98,158 fc6c3de36093958da0847485e5f693737a7a62194b91f1560483cbcdd9d7516d Open
provider-attestation-response application/json; charset=utf-8 161,572 e3c0075c6c48e579fdc1ff373c0d91606a5fa7a9657bf7fe4d07f1f899ac8132 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 bcb9b963b78aa9f4fc1cb48cbbbeec44787d27c5719b64715e60574448ee03d8 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-3-27b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "model": "e2ee-gemma-3-27b-p",
  "status": "failed",
  "ts": "2026-07-30T18:01:27.787690206+00:00",
  "latency_ms": 5106,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000073848c40768f8b5274466fb7822a19a27bfbe20bc2c6cbe6b46841dc14554de2",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "73848c40768f8b5274466fb7822a19a27bfbe20bc2c6cbe6b46841dc14554de2"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=73848c40768f8b5274466fb7822a19a27bfbe20bc2c6cbe6b46841dc14554de2",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "google/gemma-3-27b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "fa4442e03eb3a89481106f42ca4b584c3c805376ae8bc948779c9f3a37429dd8",
    "parsed_evidence_digest": "2dcce60ac49e3f9120386b00d1d467c406d237d8d5b3720b9f6d6e4023f6e477",
    "artifact_set_digest": "b9d1b1c8a118b5c6c7152845a88c7afd41c6b8a65b628d23407c1c6d5ad3e279"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:01:31.054355059+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=73848c40768f8b5274466fb7822a19a27bfbe20bc2c6cbe6b46841dc14554de2",
      "sha256": "e3c0075c6c48e579fdc1ff373c0d91606a5fa7a9657bf7fe4d07f1f899ac8132",
      "size_bytes": 161572,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:30 GMT",
        "etag": "W/\"27724-B1zadSKby1fPqCnF+aFW2HDC5SM\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:01:31.056693687+00:00",
      "sha256": "bcb9b963b78aa9f4fc1cb48cbbbeec44787d27c5719b64715e60574448ee03d8",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:31.777864282+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:31.782518567+00:00",
      "sha256": "fc6c3de36093958da0847485e5f693737a7a62194b91f1560483cbcdd9d7516d",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:32.131332333+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "b74efb84e54338215f3b38c4e57c2a319e8b8a6586e44f76442c687f69f5ddae",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:32 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:32.432350475+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:32 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:01:32.892985540+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:01:32.893762908+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=73848c40768f8b5274466fb7822a19a27bfbe20bc2c6cbe6b46841dc14554de2",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma-3-27b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-31b

Gemma 4 31B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 b9989e29ec322c0705e930afb45358e830170b2ba0935b50ccef75aa3dab0082 Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 27,372 1501b5866349e6d8d4bbc2065d9ce4507fe0f06a36c05c18062e20296766891e Open
nvidia-provider-evidence application/json 98,158 d713cdf3cca4247606d9b6f616a01fb3dc79857e50e55c6fd7a89cf4b8c51031 Open
provider-attestation-response application/json; charset=utf-8 211,768 e1748e4a170573fa8cf300461ae175de900c68209029ad3753ed24c77ae21ab3 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 628b0bf6c6ed04458a18238bc66ff471d73236fcd812be5532c01c5f8c32350e Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-31b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "e2ee-gemma-4-31b",
  "status": "partial",
  "ts": "2026-07-30T18:00:50.887060288+00:00",
  "latency_ms": 11654,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "9765596f43dd91d1467f9a370682173741786d8c000000000000000000000000f4d86635245473b35fa94a90ab398b80677f5a8e00462ffae4b8dbedb98a0a2b",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "f4d86635245473b35fa94a90ab398b80677f5a8e00462ffae4b8dbedb98a0a2b"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.322",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=f4d86635245473b35fa94a90ab398b80677f5a8e00462ffae4b8dbedb98a0a2b",
  "signing_public_key": "04323149efe98c490b9b44b517b3bd599defd1ad5a61f580ca27bfd3daedd3333eddd6e40663c9a79556897ddf9ecf9dfb937ebd3cfbac512d2a7620b3c2df09d2",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "google/gemma-4-31B-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d4203286afffcc9a39b1f45d1c7d5c74fb13348e957819581946cb00b2e48a7a",
    "parsed_evidence_digest": "fa6b01dabc1807b976a7f0b5cc0e1cfc9ce70bf7ddde2cc2da6e9d9df8c9fa58",
    "artifact_set_digest": "5b1953c595f4f3a1fe873c62dd7c53e142356f3975a337d922477d06ca8de745"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:00:58.613258188+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=f4d86635245473b35fa94a90ab398b80677f5a8e00462ffae4b8dbedb98a0a2b",
      "sha256": "e1748e4a170573fa8cf300461ae175de900c68209029ad3753ed24c77ae21ab3",
      "size_bytes": 211768,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:58 GMT",
        "etag": "W/\"33b38-uQuhytsw+dkIdDEjDL8cQEsce+g\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:00:58.617539933+00:00",
      "sha256": "628b0bf6c6ed04458a18238bc66ff471d73236fcd812be5532c01c5f8c32350e",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:59.362767832+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "b9989e29ec322c0705e930afb45358e830170b2ba0935b50ccef75aa3dab0082",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:59.367192476+00:00",
      "sha256": "d713cdf3cca4247606d9b6f616a01fb3dc79857e50e55c6fd7a89cf4b8c51031",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:59.637023468+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "1501b5866349e6d8d4bbc2065d9ce4507fe0f06a36c05c18062e20296766891e",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:59 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:59.938653546+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:59 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:01:02.539420263+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:01:02.540852632+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=f4d86635245473b35fa94a90ab398b80677f5a8e00462ffae4b8dbedb98a0a2b",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma4-31b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-glm-4-7-p

GLM 4.7 (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,285 2d1167322f45ae12ca441407391231a70caf2e97472ea60c4f7f4a8d29ac9397 Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-4-7-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "model": "e2ee-glm-4-7-p",
  "status": "unreachable",
  "ts": "2026-07-30T18:01:32.894114188+00:00",
  "latency_ms": 23079,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "2bef40dba80458d0ffdef8a081a97b86dcfe49653846ea7087cba6af79da09fd",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "17a53ee3bdb68e6f236eb6e6eb96ddcd3a8acdc88aa634e66bcf723307b2c7b9"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:01:55.972806063+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-4-7-p&nonce=09677ed187445a924338fdb88e30cb270522a0c5672309c9c4c18025146003ec",
      "sha256": "2d1167322f45ae12ca441407391231a70caf2e97472ea60c4f7f4a8d29ac9397",
      "size_bytes": 63285,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:55 GMT",
        "etag": "W/\"f735-dU+vpiWU43FamE6Gcc4cmns8TFg\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:01:55.973175346+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-glm-4-7",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-1

GLM 5.1 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 6b4ba1692048b10aea61983172c904a65a861ce5ca09e82efe0aa99a777d8514 Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 27,372 eb97d0e22758cb90ff2cd3dbe44123220a07b0a7f535a37bc586838701686d5b Open
nvidia-provider-evidence application/json 98,158 66f77660a5dfeae129772612d7c810f4aad4f2a1b2f69bbac4846b8b0787e7ea Open
provider-attestation-response application/json; charset=utf-8 217,642 f0f30a972b03313df60c5d3dc05361fa9d58cf16e10a9a8c9eea3b258d0a4782 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 58201c9d73ca56e469eadf00e494365edab7fa22d4aa9858ed4f639fe469a42b Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-1",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "e2ee-glm-5-1",
  "status": "partial",
  "ts": "2026-07-30T18:00:23.474380222+00:00",
  "latency_ms": 7150,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "010fccab4eb7ffc4c9ec1be8e2851e7b820efef0485cfd21ac027bf1408dc836b0000000000000000000000000000000",
    "report_data": "bb4d2e7ffe98eefcd9690e2139be41e92b95e333000000000000000000000000e4bac8e2dd183be561ec9537093b8cb18f961210be0d0f0c4023232c7278ea1e",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "33a68f88f7ada9fef354f4099b1bf412a655204ca821581b758857b88d27cc37dcf4912c4da3d90e39b6cd1aee5c090d",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "e4bac8e2dd183be561ec9537093b8cb18f961210be0d0f0c4023232c7278ea1e"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=e4bac8e2dd183be561ec9537093b8cb18f961210be0d0f0c4023232c7278ea1e",
  "signing_public_key": "042a1c47aad08a4f47dcb67134d77b83d8a1d5c895e37e959189249e819c3939289d8c59acb07d262db3ca946d52c51ae079fde6708cb0af7e25a57d35c8e0ac30",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "zai-org/GLM-5.1-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "03fdc558c673ff52a8bca5e89d896269b6ea362754c83b7d85252611a05588d8",
    "parsed_evidence_digest": "15c0ffe7327cd103ff29f36f035f70eb46fa0f52159f8d485bf97677b8409b91",
    "artifact_set_digest": "501cac49f27b9e740047cc2da042087037fc10896d2c7e60d82163bd4c7f21f5"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:00:25.757833627+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=e4bac8e2dd183be561ec9537093b8cb18f961210be0d0f0c4023232c7278ea1e",
      "sha256": "f0f30a972b03313df60c5d3dc05361fa9d58cf16e10a9a8c9eea3b258d0a4782",
      "size_bytes": 217642,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:25 GMT",
        "etag": "W/\"3522a-1D6VaIv9fEbEwRm76uZWbMF1GVo\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:00:25.763393672+00:00",
      "sha256": "58201c9d73ca56e469eadf00e494365edab7fa22d4aa9858ed4f639fe469a42b",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:26.489859459+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "6b4ba1692048b10aea61983172c904a65a861ce5ca09e82efe0aa99a777d8514",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:26.498270033+00:00",
      "sha256": "66f77660a5dfeae129772612d7c810f4aad4f2a1b2f69bbac4846b8b0787e7ea",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:26.850506916+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "eb97d0e22758cb90ff2cd3dbe44123220a07b0a7f535a37bc586838701686d5b",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:26 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:27.188261490+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:27 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:00:30.621991328+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:00:30.624139830+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=e4bac8e2dd183be561ec9537093b8cb18f961210be0d0f0c4023232c7278ea1e",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-glm-5-1",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-120b-p

GPT-OSS 120B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 27,372 08b7f9ed4a5563b30350b15ab356d4b9cc270741d75bdd500cad0d3787a4572e Open
nvidia-provider-evidence application/json 98,158 5969f94c30269ae03670d2aa07bb7d978b64033fc613aedd65c8c42f004cb94c Open
provider-attestation-response application/json; charset=utf-8 161,571 1020cf5b45929bd461297d527212de9aa55c7f5eef41617a1d77c6ad5803036c Open
tdx-quote application/vnd.intel.tdx.quote 5,006 c4b6afb9f8caecbaea5f696ebe8df497bfdbbd8ef649233614872e85167702de Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-120b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "e2ee-gpt-oss-120b-p",
  "status": "failed",
  "ts": "2026-07-30T18:00:17.432679336+00:00",
  "latency_ms": 6041,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000d5a549c8469a32377f5802a8fafc95e9eb9bfee2b8e38d40e24377726f996f30",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "d5a549c8469a32377f5802a8fafc95e9eb9bfee2b8e38d40e24377726f996f30"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=d5a549c8469a32377f5802a8fafc95e9eb9bfee2b8e38d40e24377726f996f30",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "aaf74ec046ce1c78396bcc35ccf903c96e46ed1e1c464fe7f775626827dd3e3e",
    "parsed_evidence_digest": "89f5009de6484b617d26ba1c69ead4a463f63eec2edeb00291d1d787c9f17560",
    "artifact_set_digest": "e868d68d207ee256fb996abb834b8667173d3cc4076636c39395b5fdab131082"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:00:19.454423903+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=d5a549c8469a32377f5802a8fafc95e9eb9bfee2b8e38d40e24377726f996f30",
      "sha256": "1020cf5b45929bd461297d527212de9aa55c7f5eef41617a1d77c6ad5803036c",
      "size_bytes": 161571,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:19 GMT",
        "etag": "W/\"27723-psUK1nUkAqUxly2rgePd5Ipnzjw\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:00:19.457169385+00:00",
      "sha256": "c4b6afb9f8caecbaea5f696ebe8df497bfdbbd8ef649233614872e85167702de",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:22.229434142+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:22.234671611+00:00",
      "sha256": "5969f94c30269ae03670d2aa07bb7d978b64033fc613aedd65c8c42f004cb94c",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:22.631828576+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "08b7f9ed4a5563b30350b15ab356d4b9cc270741d75bdd500cad0d3787a4572e",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:22 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:00:22.902840453+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:22 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:00:23.472882481+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:00:23.473861258+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=d5a549c8469a32377f5802a8fafc95e9eb9bfee2b8e38d40e24377726f996f30",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-120b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-20b-p

GPT-OSS 20B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 3,895 00b3e9b27c496d6781790948cd20424beaff710af104657b3d4ab7418be906b9 Open
nvidia-provider-evidence application/json 12,103 06db0ae01f5a9bf99d5f859725967bbccf3fdada3a0a33beaa06af623c5d3305 Open
provider-attestation-response application/json; charset=utf-8 75,397 910c3d7b9caa092f067aa4a02cd5b687b71943b5b162e3e7804f5e6b878514aa Open
tdx-quote application/vnd.intel.tdx.quote 5,006 0ede4044cb424ead256185f7d545f6d6ad4cb538f353254a1be0a876afb7fddd Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-20b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "model": "e2ee-gpt-oss-20b-p",
  "status": "failed",
  "ts": "2026-07-30T18:01:02.541264064+00:00",
  "latency_ms": 4249,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000077241e4ea44f5dd17b10f6e49591c8a23afef1f4d724376809034fd21218c786",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "77241e4ea44f5dd17b10f6e49591c8a23afef1f4d724376809034fd21218c786"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=77241e4ea44f5dd17b10f6e49591c8a23afef1f4d724376809034fd21218c786",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-20b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "154a32eee1670d93a604cad1a45dbefe22b555596136cb0b33d566fe3bced80c",
    "parsed_evidence_digest": "65659512bd08152f7abca83d9ddbb01e26877275ef0f666a75d92ca25764144c",
    "artifact_set_digest": "cff300113cb61296b855f4e359bf3a6b5cdc19fca49e2864a56af5acdef6bc17"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:01:04.686562804+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=77241e4ea44f5dd17b10f6e49591c8a23afef1f4d724376809034fd21218c786",
      "sha256": "910c3d7b9caa092f067aa4a02cd5b687b71943b5b162e3e7804f5e6b878514aa",
      "size_bytes": 75397,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:04 GMT",
        "etag": "W/\"12685-c7tGW3SxWGFGcnAiypRBXtpI4Hs\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:01:04.688534845+00:00",
      "sha256": "0ede4044cb424ead256185f7d545f6d6ad4cb538f353254a1be0a876afb7fddd",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:05.440714200+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:05.443104195+00:00",
      "sha256": "06db0ae01f5a9bf99d5f859725967bbccf3fdada3a0a33beaa06af623c5d3305",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:05.983050061+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "00b3e9b27c496d6781790948cd20424beaff710af104657b3d4ab7418be906b9",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:05 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:06.343357730+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:06 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:01:06.789346538+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:01:06.790657619+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=77241e4ea44f5dd17b10f6e49591c8a23afef1f4d724376809034fd21218c786",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-20b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen-2-5-7b-p

Qwen 2.5 7B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 3,895 7662624ed92f6ee3818cc86969a0c95a80ccffedb6025fa80812b629988be290 Open
nvidia-provider-evidence application/json 12,103 286a5fd5c8edd2f691b03fc32d7eddbc501bc24515b4b55a363cb45a4460d5b4 Open
provider-attestation-response application/json; charset=utf-8 75,405 3bc67e342a9090725958c045c9b004fd14c010177c4c5d202b7b04f89e0a61a7 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 a42d3d0111ffb044645e41f9f0bca887be282a71191564fef70de45df60168c0 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen-2-5-7b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "model": "e2ee-qwen-2-5-7b-p",
  "status": "failed",
  "ts": "2026-07-30T18:01:06.791199766+00:00",
  "latency_ms": 6575,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000005b09f54aa24ad1737ac4ff6154574786c078bda4170f7ad5f06f33f09c9ca60a",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "5b09f54aa24ad1737ac4ff6154574786c078bda4170f7ad5f06f33f09c9ca60a"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=5b09f54aa24ad1737ac4ff6154574786c078bda4170f7ad5f06f33f09c9ca60a",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen-2.5-7b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "35d5376e2888c2959f84cf1777577615992bf3ca1c8acbdef28792d28906ef44",
    "parsed_evidence_digest": "67c132064e287bf01dd643f190933c9c04acca19833e02b017007a6213acd65d",
    "artifact_set_digest": "5f4ba851a9638516108fa4771bcb7d06efaf6cc867a352480f4508fb8a53d000"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:01:11.232810575+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=5b09f54aa24ad1737ac4ff6154574786c078bda4170f7ad5f06f33f09c9ca60a",
      "sha256": "3bc67e342a9090725958c045c9b004fd14c010177c4c5d202b7b04f89e0a61a7",
      "size_bytes": 75405,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:11 GMT",
        "etag": "W/\"1268d-GowJKn8QA2mKkY5/ZEB/W0TaMAQ\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:01:11.234824404+00:00",
      "sha256": "a42d3d0111ffb044645e41f9f0bca887be282a71191564fef70de45df60168c0",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:12.015786216+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:12.018047359+00:00",
      "sha256": "286a5fd5c8edd2f691b03fc32d7eddbc501bc24515b4b55a363cb45a4460d5b4",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:12.201403492+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "7662624ed92f6ee3818cc86969a0c95a80ccffedb6025fa80812b629988be290",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:12 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:12.903621951+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:12 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:01:13.365562776+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:01:13.366220630+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=5b09f54aa24ad1737ac4ff6154574786c078bda4170f7ad5f06f33f09c9ca60a",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen-2-5-7b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-30b-a3b-p

Qwen3 30B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,311 7ff4cef5ee3c606a1a6926351ffb246da83ea9c6c01cf0d4c97912d560f3df02 Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-30b-a3b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "model": "e2ee-qwen3-30b-a3b-p",
  "status": "unreachable",
  "ts": "2026-07-30T18:00:30.624722033+00:00",
  "latency_ms": 20262,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d3b7d5b034fa8eef6ec5eac7e82f838edee010abaf721fc13160072d702a8d97",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "b52ea6a9f29342e4322e98fb7f65ab9547c8b0f8636af8f115c1d7bcbe998eed"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:00:50.886315220+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-30b-a3b-p&nonce=0bc43bf3c111b37f5b55127b02ebd05d9c18c4e2cdea21706587c29745693181",
      "sha256": "7ff4cef5ee3c606a1a6926351ffb246da83ea9c6c01cf0d4c97912d560f3df02",
      "size_bytes": 63311,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:00:50 GMT",
        "etag": "W/\"f74f-QAgjNiGrgwAyOrU8ck4Kvd1MdPQ\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:00:50.886715922+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-30b",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b

Qwen3 35B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,565 8ec09dabadbe1b84b1bb55a23b6e8ae1e68d9d3d41288b2bd9efa1f3859d1eeb Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 27,372 8c9223c6744a00ea935dbf638a515da90e508b1a4ce1e15c9e5147508b68cf45 Open
nvidia-provider-evidence application/json 98,158 de74f5547f39be723bca6286b871570e307c93c2adadaa903fc072b605a344b6 Open
provider-attestation-response application/json; charset=utf-8 206,891 f16b1fd809fded750fb7ca370ac2edfcdf81da4ee2aec70e7fcfb5acb991fce9 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 2475997037f6c34913cac6f4891bddfba44b2facf10a4407677bf9660c63d079 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b",
  "status": "partial",
  "ts": "2026-07-30T18:01:13.366657520+00:00",
  "latency_ms": 8551,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000",
    "report_data": "e5d0fec43b001f181a3410b96715ec54171f36da0000000000000000000000008d317f17375dad547df286bff1a64d83b988bec12fc8334b50443585c5d11b22",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "8d317f17375dad547df286bff1a64d83b988bec12fc8334b50443585c5d11b22"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.295",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b",
    "nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=8d317f17375dad547df286bff1a64d83b988bec12fc8334b50443585c5d11b22",
  "signing_public_key": "0489f03d8ed945eff27ad1053f87ece198409aff78c5c2aea3e438c460482f67ff5b900054dc129f6ce57e40e8875ceac0ddf30aeb885c28fd2c3e05bf3fbaa4d9",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-35B-A3B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "28b59278d6e285fe41fde0af552060aefc77c50a2c8d1403c805e1fea57569e1",
    "parsed_evidence_digest": "78d9c3a00282dfde59b97955dd2e6245c2318d5ec421db4ca212455c2e18c1f1",
    "artifact_set_digest": "f7d56d3a83c406d8bb1907be3fadadd38dccca3ef39f70feef75c1d465b7afa4"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:01:17.990553081+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=8d317f17375dad547df286bff1a64d83b988bec12fc8334b50443585c5d11b22",
      "sha256": "f16b1fd809fded750fb7ca370ac2edfcdf81da4ee2aec70e7fcfb5acb991fce9",
      "size_bytes": 206891,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:17 GMT",
        "etag": "W/\"3282b-PEiaGaz/KuF7ISWTEYt8b1zxKG4\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:01:17.994471204+00:00",
      "sha256": "2475997037f6c34913cac6f4891bddfba44b2facf10a4407677bf9660c63d079",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:18.717443691+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "8ec09dabadbe1b84b1bb55a23b6e8ae1e68d9d3d41288b2bd9efa1f3859d1eeb",
      "size_bytes": 22565,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:18.721856332+00:00",
      "sha256": "de74f5547f39be723bca6286b871570e307c93c2adadaa903fc072b605a344b6",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:19.074609732+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "8c9223c6744a00ea935dbf638a515da90e508b1a4ce1e15c9e5147508b68cf45",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:18 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:19.418602631+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:19 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:01:21.916323235+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:01:21.917793043+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=8d317f17375dad547df286bff1a64d83b988bec12fc8334b50443585c5d11b22",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-6-35b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-vl-30b-a3b-p

Qwen3-VL 30B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f Open
nvidia-nras-jwks application/json 80,970 bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d Open
nvidia-nras-response application/json 27,372 4c32f72989d21713c67f75d64d52ec6a398756ae62e1e1b035a2e64639ff801f Open
nvidia-provider-evidence application/json 98,158 c81b1ce1dd55e23551073a39514da2161f0dc4ca850dcbd0ff61046b9bfae28c Open
provider-attestation-response application/json; charset=utf-8 161,586 deac4a3a39275ec82c3ecc2f296c8e7cb16a8b0a0ce1db29fae8f18fcfe24210 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 7056b5a0ff563533fa6ee5eecfe936e65dabf9595ba608e1eeb9a29d299a55c9 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "status": "failed",
  "ts": "2026-07-30T18:01:21.918202582+00:00",
  "latency_ms": 5869,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000004f00241cbb442b87047708e7117f5d65d46e18a4b5c6258b54fc8bd62ba736e3",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "4f00241cbb442b87047708e7117f5d65d46e18a4b5c6258b54fc8bd62ba736e3"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=4f00241cbb442b87047708e7117f5d65d46e18a4b5c6258b54fc8bd62ba736e3",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen3-vl-30b-a3b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7289104bde08feb53e83f2c066e36a948c5f65fef123a919bf4f17bc5de4f338",
    "parsed_evidence_digest": "f2aeb806c6b981748522df5fdc82bc18c798a5545adf59479ab63a6c00fd4f72",
    "artifact_set_digest": "0405d8690b3aee3d6705a617a3628a449d8185c2c06fc873b37945e831a2509d"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-07-30T18:01:25.208218666+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=4f00241cbb442b87047708e7117f5d65d46e18a4b5c6258b54fc8bd62ba736e3",
      "sha256": "deac4a3a39275ec82c3ecc2f296c8e7cb16a8b0a0ce1db29fae8f18fcfe24210",
      "size_bytes": 161586,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:25 GMT",
        "etag": "W/\"27732-DhWqFbDk/RwdY2EHyCnHXe4GxBM\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-07-30T18:01:25.210562835+00:00",
      "sha256": "7056b5a0ff563533fa6ee5eecfe936e65dabf9595ba608e1eeb9a29d299a55c9",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:26.236496179+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "979c2fed81fea0e6a7ff56787dbbb617e9cdf82ecbc6ddebb95880eeb9fac30f",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:26.241210466+00:00",
      "sha256": "c81b1ce1dd55e23551073a39514da2161f0dc4ca850dcbd0ff61046b9bfae28c",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:26.606326245+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "4c32f72989d21713c67f75d64d52ec6a398756ae62e1e1b035a2e64639ff801f",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:26 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-07-30T18:01:27.322521794+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "bc060a2f41fc8e4c5cac1cd88d75249a376fea232a65123b9c59caa31fe2c48d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 30 Jul 2026 18:01:27 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-07-30T18:01:27.786376140+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-07-30T18:01:27.787307798+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=4f00241cbb442b87047708e7117f5d65d46e18a4b5c6258b54fc8bd62ba736e3",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-vl-30b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}