Parsed decision JSON
{
"provider": "tinfoil",
"id": "tinfoil-router",
"label": "Router",
"status": "partial",
"ts": "2026-07-31T11:00:16.328673899+00:00",
"latency_ms": 13972,
"error": "Evidence incomplete: Pinned image digest verification is false",
"snp": {
"chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
"report_data": "fde355205d46f4f26affb7df553de53978cca16671331a3d647a136fd7b7a771daa8f6736214dbc47180a9c157640a8f3ce56c2acb01e5415ac3d896b90c633d",
"measurement": "c21e5c2a1be8c8da6cb0b7c717b0beea21493e446dc17876e4dc209e3da3bf19aa0bb5c494e6b52ad4ed70d277fcafae",
"family_id": "00000000000000000000000000000000",
"image_id": "00000000000000000000000000000000",
"generation": "Genoa",
"current_tcb": "bl=10 tee=0 snp=23 ucode=84",
"reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
"policy_bits": 196608,
"platform_smt": true,
"platform_tsme": true,
"debug_allowed": false,
"vcek_fingerprint": "1505fe66c5bdceea3bae3fd0e2b9f41b404eccf3f7b493c6a87958d3f16710fb"
},
"images_verified": false,
"tls_fingerprint": "1c53d211618948cbdde5cf3d8e3c3fa70f78624e57f90190abe4ef804270ebcb",
"tls_matches": false,
"version": "v0.0.135",
"sigstore_match": true,
"sigstore_bundle_verified": true,
"sigstore_tag": "v0.0.135",
"release_digest": "173ed0cb9c2664c8412b4c8dc4f0b35d400cf88a8f4dc87e8c5eb04e7a4c3470",
"sigstore_repo": "tinfoilsh/confidential-model-router",
"config_images": [
"ghcr.io/tinfoilsh/confidential-model-router@sha256:9a9fbdfa4279f832b0a3d732735fc922ff7520499da94fe87b8d9c5c5b28ff40"
],
"source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
"trust_tier": "tee-only",
"route": {
"route_binding": "not-verified",
"router": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Configured direct Tinfoil router endpoint."
},
"workload_operator": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Configured direct Tinfoil workload endpoint."
},
"tee_platform": {
"organization": "tinfoil",
"confidence": "verified",
"evidence": "Tinfoil target and deployment evidence."
}
},
"gates": {
"hardware": {
"state": "verified",
"detail": "Vendor-rooted hardware evidence was verified."
},
"tcb": {
"state": "verified",
"detail": "The quote passed the configured TCB policy."
},
"freshness": {
"state": "not-applicable",
"detail": "This gateway target does not claim a quote-bound client channel."
},
"channel": {
"state": "not-applicable",
"detail": "Gateway TLS termination is expected for this target."
},
"workload": {
"state": "verified",
"detail": "Measured workload evidence matched the configured expectation."
},
"source_provenance": {
"state": "not-proven",
"detail": "Registry existence alone is not source provenance."
},
"route": {
"state": "not-applicable",
"detail": "This target is the gateway workload, not a storefront-to-model route."
}
},
"evidence_meta": {
"verifier_version": "0.2.2",
"policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
"target_hash": "3f27670b0e8619a36538c9ee5e2fe769e1cd901e567ad0c00d9cb906fd9a5242",
"parsed_evidence_digest": "f429be8fc6a5577d09b189b08a1fc9b11e99a944b166aade1fb892f7693eef64",
"artifact_set_digest": "d85069e731f73452ba0e6e6b915a4ccd738d37db9e3f172d246e87374f0a1e48"
},
"evidence_artifacts": [
{
"kind": "provider-attestation-response",
"media_type": "application/json",
"collected_at": "2026-07-31T11:00:16.809255729+00:00",
"source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
"sha256": "1cf42fbbc7ef4a3430097855891bd583e2e26c7ed882b0ec20d2106ea3faf209",
"size_bytes": 605,
"encoding": "binary",
"metadata": {
"date": "Fri, 31 Jul 2026 11:00:15 GMT",
"http_method": "GET",
"http_status": "200"
}
},
{
"kind": "sev-snp-report",
"media_type": "application/vnd.amd.sev-snp.report",
"collected_at": "2026-07-31T11:00:16.968649898+00:00",
"sha256": "8a7fdf28e8e421cbf7cc4b6500141e4cb88a702ac98b58fa27240fee5ef3fb12",
"size_bytes": 1184,
"encoding": "binary",
"metadata": {
"backend_id": "inference.tinfoil.sh"
}
},
{
"kind": "amd-vcek-certificate",
"media_type": "application/pkix-cert",
"collected_at": "2026-07-31T11:00:17.532936077+00:00",
"source_url": "https://kdsintf.amd.com/vcek/v1/Genoa/1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44?blSPL=10&teeSPL=0&snpSPL=23&ucodeSPL=84",
"sha256": "1505fe66c5bdceea3bae3fd0e2b9f41b404eccf3f7b493c6a87958d3f16710fb",
"size_bytes": 1347,
"encoding": "binary",
"metadata": {
"backend_id": "inference.tinfoil.sh",
"product": "Genoa",
"source": "amd-kds"
}
},
{
"kind": "tls-leaf-certificate",
"media_type": "application/pkix-cert",
"collected_at": "2026-07-31T11:00:18.534561928+00:00",
"source_url": "https://inference.tinfoil.sh/",
"sha256": "c7a815c9c4212098226ac3a8f69e14ac20fcee666f496298bbb7945216719aa3",
"size_bytes": 891,
"encoding": "binary",
"metadata": {
"host": "inference.tinfoil.sh"
}
},
{
"kind": "source-provenance-response",
"media_type": "application/json; charset=utf-8",
"collected_at": "2026-07-31T11:00:18.782404990+00:00",
"source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest",
"sha256": "0eab40d1d6b8585412cabea63ab4439d61e1e83aa627f3d6c316592ec4810206",
"size_bytes": 6017,
"encoding": "binary",
"metadata": {
"date": "Fri, 31 Jul 2026 11:00:18 GMT",
"etag": "W/\"c5a72dfb3956072714b2ed606eea5d05f531e5e1f7ce5ae7f9ce1049eaf4770f\"",
"http_method": "GET",
"http_status": "200",
"last_modified": "Wed, 29 Jul 2026 06:58:33 GMT"
}
},
{
"kind": "source-provenance-response",
"media_type": "application/json; charset=utf-8",
"collected_at": "2026-07-31T11:00:19.407990944+00:00",
"source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/attestations/sha256:173ed0cb9c2664c8412b4c8dc4f0b35d400cf88a8f4dc87e8c5eb04e7a4c3470",
"sha256": "38ce2f7c46354707f6a498754570ac227b7c3f27c4618c017bf5e401b406f2fe",
"size_bytes": 14197,
"encoding": "binary",
"metadata": {
"date": "Fri, 31 Jul 2026 11:00:19 GMT",
"etag": "W/\"b9f5f04ba227caf25c62cf5abe1457246d53b4f0f3a3bc56b9f0a060d91d585f\"",
"http_method": "GET",
"http_status": "200"
}
},
{
"kind": "verification-error",
"media_type": "text/plain; charset=utf-8",
"collected_at": "2026-07-31T11:00:30.300315879+00:00",
"source_url": "https://inference.tinfoil.sh/.well-known/tinfoil-attestation",
"sha256": "ed059696db704aee8d53a631dbbc0644f3c3841ec42ceda69c19a6a5513c7afd",
"size_bytes": 62,
"encoding": "utf-8",
"metadata": {
"check_id": "tinfoil-router",
"provider": "tinfoil",
"status": "partial"
}
}
]
}