Stored Run Record

Run #1225

Completed Aug 2, 2026, 18:02:53 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
16
Verified
0
Incomplete
5
Failed
8
Unavailable
3

Recorded Decisions

Checks in this run

Run JSON

Venice.ai

e2ee-deepseek-v4-flash

E2ee Deepseek V4 Flash (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 aea29eafce0ccb76dc4195971dd51edb95441027583cc81401a100ae7d787388 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 27,372 2bd10e0d2bdb3f5fffdc9edd10736dca2f6dfcd01ed3b6e3753d2c90857e6a88 Open
nvidia-provider-evidence application/json 98,158 283464c3cbe91dfee9b36e02b00b606ac9eb3f5e8d09383094a2782377005052 Open
provider-attestation-response application/json; charset=utf-8 199,831 d5f86b3bad2fd699d3957d5e970c3d8c9a7060597114728975cf16862938db10 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 25d5101f072c36424a508e790627df3eb02be27f2ca0b0fe640d377fa023cb28 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-deepseek-v4-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "model": "e2ee-deepseek-v4-flash",
  "status": "partial",
  "ts": "2026-08-02T18:01:54.685957918+00:00",
  "latency_ms": 10203,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "0166007399f064f058af68771c552bcae150c9f88622305631b5141da1aa2f7b7e000000000000000000000000000000",
    "report_data": "c5f6bf2f1bc666569157ec1bb4066cdaf48d026c000000000000000000000000cf756b94c8489a446c7d75467f4531f6debb1f0359ab7cf6c674397353da5454",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "18c28d262ab4733031c19fa1af233686e227a789955ba9dba2065b398c9f5dbfb76133d751dac412540dc5ac992b1b73",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "cf756b94c8489a446c7d75467f4531f6debb1f0359ab7cf6c674397353da5454"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.325",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=cf756b94c8489a446c7d75467f4531f6debb1f0359ab7cf6c674397353da5454",
  "signing_public_key": "0434ba223c3175c4debee8cd12d72f55869b6cf1ccc5ff578e940a23c7bf9dcf3abd6530ce8d8624ffd150900fd31bae802eb75367a154a75e39cc87f748b63b84",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "deepseek-ai/DeepSeek-V4-Flash"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "6bacc84fe763af7014ff7c9a51a99d349597d7e6eabd0c9a763d01c2d62932c8",
    "parsed_evidence_digest": "a78b63253ec6258f276392e40cfd37ce1061799c8813e266ee114e9cc5031ea2",
    "artifact_set_digest": "14e2a8094da465007eb1a7c10e63fd36fb53360b3f3859431e8bd7577e6d3ab9"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:02:01.045124394+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=cf756b94c8489a446c7d75467f4531f6debb1f0359ab7cf6c674397353da5454",
      "sha256": "d5f86b3bad2fd699d3957d5e970c3d8c9a7060597114728975cf16862938db10",
      "size_bytes": 199831,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:00 GMT",
        "etag": "W/\"30c97-uae0SzjiTSUxluCEV5qiyxBi19U\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:02:01.049060881+00:00",
      "sha256": "25d5101f072c36424a508e790627df3eb02be27f2ca0b0fe640d377fa023cb28",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:01.750266121+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "aea29eafce0ccb76dc4195971dd51edb95441027583cc81401a100ae7d787388",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:01.754850724+00:00",
      "sha256": "283464c3cbe91dfee9b36e02b00b606ac9eb3f5e8d09383094a2782377005052",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:02.100696237+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "2bd10e0d2bdb3f5fffdc9edd10736dca2f6dfcd01ed3b6e3753d2c90857e6a88",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:02 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:02.395307853+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:02 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:02:04.887985436+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:02:04.889285505+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=cf756b94c8489a446c7d75467f4531f6debb1f0359ab7cf6c674397353da5454",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-deepseek-v4-flash",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-26b-a4b-uncensored-p

E2ee Gemma 4 26b A4b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 3,895 c244cb326be8c8d95d3947335c11c423df6febf81506377ed7135fb978afbeeb Open
nvidia-provider-evidence application/json 12,113 7d0521bd949c9cb1fb530f3266e0177a420154d87b57a7fc9331334fcd9e75f2 Open
provider-attestation-response application/json; charset=utf-8 75,437 c9729f08d35fb3e7eba064edecf6df9610eef851d4630f94f2b5bf04bda23c2e Open
tdx-quote application/vnd.intel.tdx.quote 5,006 2df856fb8ed9abf0d1453ec76e3e0f3d9da6f97dac9a3b5d0f5d850a3779a8a0 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "status": "failed",
  "ts": "2026-08-02T18:02:04.889713940+00:00",
  "latency_ms": 5324,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000000e60c428e34b0ac32ccfaa3942fc331b5e9893c83a71df052ce4a525f7d303b1",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "0e60c428e34b0ac32ccfaa3942fc331b5e9893c83a71df052ce4a525f7d303b1"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=0e60c428e34b0ac32ccfaa3942fc331b5e9893c83a71df052ce4a525f7d303b1",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/gemma-4-26b-a4b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "41c172ed2008d2092130db0be7a7613acf8cb488824bc71f5430b532a8d5d263",
    "parsed_evidence_digest": "73d884fff1e3c86b6cb4d49aa55c201febc203ce0cd2497a76d803e466174c30",
    "artifact_set_digest": "504b3c9cdccacbebd1d693df12801f923625345bdd4b1d4d88590e341adf6c38"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:02:08.635149991+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=0e60c428e34b0ac32ccfaa3942fc331b5e9893c83a71df052ce4a525f7d303b1",
      "sha256": "c9729f08d35fb3e7eba064edecf6df9610eef851d4630f94f2b5bf04bda23c2e",
      "size_bytes": 75437,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:08 GMT",
        "etag": "W/\"126ad-001pNYOh+KZEpGJGjhIgnJ2WVAY\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:02:08.637050388+00:00",
      "sha256": "2df856fb8ed9abf0d1453ec76e3e0f3d9da6f97dac9a3b5d0f5d850a3779a8a0",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:09.373002144+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:09.375280369+00:00",
      "sha256": "7d0521bd949c9cb1fb530f3266e0177a420154d87b57a7fc9331334fcd9e75f2",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:09.551330309+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "c244cb326be8c8d95d3947335c11c423df6febf81506377ed7135fb978afbeeb",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:09 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:09.844922171+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:09 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:02:10.213032737+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:02:10.213684921+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=0e60c428e34b0ac32ccfaa3942fc331b5e9893c83a71df052ce4a525f7d303b1",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-2-p

E2ee Glm 5 2 P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 27,372 889845c1520929d75f4a055a4b8a2a9c1fb94aaec8864a93d517dd8270a63c7c Open
nvidia-provider-evidence application/json 98,158 c23ca04125115178e2c2adf5026ddb40abf87d91a34150a51a7c7394ee53f3dd Open
provider-attestation-response application/json; charset=utf-8 161,559 6c72a81a7e4c9787d5507e2e4606df25fd846296ba59f60d67684f6e5a630ec3 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 c68d3b59afd157f2a6765e3cfb51f8adc2e4f9e18a08517bd863298de307b73c Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-2-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "model": "e2ee-glm-5-2-p",
  "status": "failed",
  "ts": "2026-08-02T18:02:10.214107764+00:00",
  "latency_ms": 7826,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000021450fc0c5b917a1855ff4051aa60b68833d2caca571561337d0978f9ea4e663",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "21450fc0c5b917a1855ff4051aa60b68833d2caca571561337d0978f9ea4e663"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=21450fc0c5b917a1855ff4051aa60b68833d2caca571561337d0978f9ea4e663",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "z-ai/glm-5.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "bfe8723519f8385580376b47989fb0ec8ca25514e2991643fc96586ab0101adc",
    "parsed_evidence_digest": "ea680bac723f3a0c9db067012aa8ca5bd6ad61a7b399bf932f20bb877b3a6c7e",
    "artifact_set_digest": "eb7aa033f4b0ced9c7290ae2a75ef73ce4b1d69dfd1794f6f8609830f8951fba"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:02:15.824768976+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=21450fc0c5b917a1855ff4051aa60b68833d2caca571561337d0978f9ea4e663",
      "sha256": "6c72a81a7e4c9787d5507e2e4606df25fd846296ba59f60d67684f6e5a630ec3",
      "size_bytes": 161559,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:15 GMT",
        "etag": "W/\"27717-CSvojpcR8vWSzeSFwgrBw8xGeQw\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:02:15.827307059+00:00",
      "sha256": "c68d3b59afd157f2a6765e3cfb51f8adc2e4f9e18a08517bd863298de307b73c",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:16.524365827+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:16.531033099+00:00",
      "sha256": "c23ca04125115178e2c2adf5026ddb40abf87d91a34150a51a7c7394ee53f3dd",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:16.896678349+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "889845c1520929d75f4a055a4b8a2a9c1fb94aaec8864a93d517dd8270a63c7c",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:16 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:17.587018288+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:17 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:02:18.039049462+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:02:18.039683732+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=21450fc0c5b917a1855ff4051aa60b68833d2caca571561337d0978f9ea4e663",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-glm-5-2-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-27b

E2ee Qwen3 6 27b (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 29397aa62243c7f21ceaf6a8d16c66dda6e73aebabb82d2553f94e0d8127842b Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 27,372 ca7aa8b8321701382c5ad48e656fa1e9f9a70bbc724a6b44a145ca981b96f15c Open
nvidia-provider-evidence application/json 98,158 5109188c99ffd57ef947bc1a3b5a50f4877bad43adca37ebf5aac1575fd0edcc Open
provider-attestation-response application/json; charset=utf-8 211,890 37e901f35f0e4a7661dc8918a65b64d311cb886c5a41321170a6870d1a4ba7e8 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 4af56cd5dede0e023ab048952834175969e68528950c120df6cebed27533e93e Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-27b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "model": "e2ee-qwen3-6-27b",
  "status": "partial",
  "ts": "2026-08-02T18:02:18.040373076+00:00",
  "latency_ms": 6939,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "6eb6ce4fa9f7f704769afff165955105c1ae7b1d00000000000000000000000081ae225f24ff8441d876497a37444e5d1e504c87445caadc93ac2f41feea236f",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "81ae225f24ff8441d876497a37444e5d1e504c87445caadc93ac2f41feea236f"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=81ae225f24ff8441d876497a37444e5d1e504c87445caadc93ac2f41feea236f",
  "signing_public_key": "04cf942c4bcb0f89ffd33e837d850ab3eb4ff66cee6b285db3bbdff6e815f81e7df9a4bfaf863207b5d4ccc99ea4c3eca3172a82b2a7717635522bd22fc0cf6219",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-27B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7e0ccb549a79a186da738c36fb21f4ac9a803041723f5569bbd7945a4ca7e530",
    "parsed_evidence_digest": "59841cccf125f33320efb7deb71ee11d5ced3647ba1bba920a862c9b7755810e",
    "artifact_set_digest": "809b3bb45740ee5fae89917dfea78ce930138d08743af0001a71f921aca5ef01"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:02:20.671725850+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=81ae225f24ff8441d876497a37444e5d1e504c87445caadc93ac2f41feea236f",
      "sha256": "37e901f35f0e4a7661dc8918a65b64d311cb886c5a41321170a6870d1a4ba7e8",
      "size_bytes": 211890,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:20 GMT",
        "etag": "W/\"33bb2-jxd2lCYg1fLwRPoMD7LHOkBMM1A\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:02:20.676254679+00:00",
      "sha256": "4af56cd5dede0e023ab048952834175969e68528950c120df6cebed27533e93e",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:21.449580272+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "29397aa62243c7f21ceaf6a8d16c66dda6e73aebabb82d2553f94e0d8127842b",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:21.454241700+00:00",
      "sha256": "5109188c99ffd57ef947bc1a3b5a50f4877bad43adca37ebf5aac1575fd0edcc",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:22.161548249+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "ca7aa8b8321701382c5ad48e656fa1e9f9a70bbc724a6b44a145ca981b96f15c",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:22 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:22.473317544+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:22 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:02:24.977817383+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:02:24.979657025+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=81ae225f24ff8441d876497a37444e5d1e504c87445caadc93ac2f41feea236f",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-27b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b-uncensored-p

E2ee Qwen3 6 35b A3b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 3,895 7a33c07c4745b530bbaa67d86b0cd9cb8a5cfb58370fe64f578532732aba2e1c Open
nvidia-provider-evidence application/json 12,113 43495ea3434eb3f97f092593c46c83bdc00ee448b692b1c65c75ff4ef0c2e3cd Open
provider-attestation-response application/json; charset=utf-8 75,437 46b71e1789e9ffed95d47e8c2f845512cd8bd5c37cf3dc3ed1f0aa954bd21392 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 8e1c78d121f94030cc44d447356fd9ccca0f443e2213dc4edf44b925fa140e36 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "status": "failed",
  "ts": "2026-08-02T18:02:24.980124673+00:00",
  "latency_ms": 4931,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000050f2ce2348b73e665f3ac8dffedeca47cf69bd87edf720acd5ea6a24f65b7c31",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "50f2ce2348b73e665f3ac8dffedeca47cf69bd87edf720acd5ea6a24f65b7c31"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=50f2ce2348b73e665f3ac8dffedeca47cf69bd87edf720acd5ea6a24f65b7c31",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/qwen3.6-35b-a3b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "c0ec14186368acfb7d45268916c145228ab1d980a998626b28563bc30d7e7d00",
    "parsed_evidence_digest": "c2efd385a08807e4992d1445db24b07b825d870b6357cdbc9ccb846ba921927d",
    "artifact_set_digest": "4a5ad2fd7c7c4b5dc26ad9c79ff42da2fc70bed6c2298b52057aea9c525e3aee"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:02:28.109855116+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=50f2ce2348b73e665f3ac8dffedeca47cf69bd87edf720acd5ea6a24f65b7c31",
      "sha256": "46b71e1789e9ffed95d47e8c2f845512cd8bd5c37cf3dc3ed1f0aa954bd21392",
      "size_bytes": 75437,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:28 GMT",
        "etag": "W/\"126ad-oh5oBxQKEQg3JtPwSZrDV7+eMFw\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:02:28.111866200+00:00",
      "sha256": "8e1c78d121f94030cc44d447356fd9ccca0f443e2213dc4edf44b925fa140e36",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:29.006480105+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:29.008855473+00:00",
      "sha256": "43495ea3434eb3f97f092593c46c83bdc00ee448b692b1c65c75ff4ef0c2e3cd",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:29.188651693+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "7a33c07c4745b530bbaa67d86b0cd9cb8a5cfb58370fe64f578532732aba2e1c",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:29 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:02:29.492874616+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:29 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:02:29.910360831+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:02:29.911409950+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=50f2ce2348b73e665f3ac8dffedeca47cf69bd87edf720acd5ea6a24f65b7c31",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-venice-uncensored-24b-p

E2ee Venice Uncensored 24b P (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,306 d00bec48d45af527ca5c16d994b78a4637a1e6edd5993750837c125467c0ce2e Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-venice-uncensored-24b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "model": "e2ee-venice-uncensored-24b-p",
  "status": "unreachable",
  "ts": "2026-08-02T18:02:29.911865324+00:00",
  "latency_ms": 23246,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "63737b0ef3638ef36a5dcb75926d9a9e85b48ce5dfcd4d665f43e42d70902809",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "9393b69c2d485089395a3c69357021bc92634204acb8518ffa13344174e5e78a"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:02:53.158331913+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-venice-uncensored-24b-p&nonce=cda9035ca921b6f894131aeaaba6bcf2c7935770d7b4bd056ca5cd3be73f85a3",
      "sha256": "d00bec48d45af527ca5c16d994b78a4637a1e6edd5993750837c125467c0ce2e",
      "size_bytes": 63306,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:02:53 GMT",
        "etag": "W/\"f74a-iDPJZZIW3U5cHf1xAlv7rSKCpi8\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:02:53.158564490+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-venice-uncensored-24b-p",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-3-27b-p

Gemma 3 27B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 27,372 cece1e0f2b2b9802b11b85ad5eced1bdde818dc8ae13b4607b6aa12a64835af1 Open
nvidia-provider-evidence application/json 98,158 4cd7e0cb6b5856a33c965783b4f1571222872bbe9b3bb0029c6445dbc592dc24 Open
provider-attestation-response application/json; charset=utf-8 161,572 20cc53969158ce87107505b8afe1a9f511176106a4525d47689f225db354ed2b Open
tdx-quote application/vnd.intel.tdx.quote 5,006 fad60368c1416e9b7da669bd20c94bedd65bca024c6b63636c69b555f83e216d Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-3-27b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "model": "e2ee-gemma-3-27b-p",
  "status": "failed",
  "ts": "2026-08-02T18:01:25.478940605+00:00",
  "latency_ms": 6995,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000001d236b867e72ce41655ff3f39871046cfc4e841c426c96aafcd3335920825852",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "1d236b867e72ce41655ff3f39871046cfc4e841c426c96aafcd3335920825852"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=1d236b867e72ce41655ff3f39871046cfc4e841c426c96aafcd3335920825852",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "google/gemma-3-27b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "fa4442e03eb3a89481106f42ca4b584c3c805376ae8bc948779c9f3a37429dd8",
    "parsed_evidence_digest": "4eb7285cd0abfef9caf9780fce85a58860196a129296d98cbe3cfc8bb1dfe0e1",
    "artifact_set_digest": "e44c81fabe8f7c00ca62c9ddf801be5837f73456770d31f332b73ced8961b531"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:01:30.345333684+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=1d236b867e72ce41655ff3f39871046cfc4e841c426c96aafcd3335920825852",
      "sha256": "20cc53969158ce87107505b8afe1a9f511176106a4525d47689f225db354ed2b",
      "size_bytes": 161572,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:30 GMT",
        "etag": "W/\"27724-TnGvxLJk5jAuNiwJRq1GVZxWer0\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:01:30.347478579+00:00",
      "sha256": "fad60368c1416e9b7da669bd20c94bedd65bca024c6b63636c69b555f83e216d",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:31.038495750+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:31.043017936+00:00",
      "sha256": "4cd7e0cb6b5856a33c965783b4f1571222872bbe9b3bb0029c6445dbc592dc24",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:31.406216113+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "cece1e0f2b2b9802b11b85ad5eced1bdde818dc8ae13b4607b6aa12a64835af1",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:31 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:32.079782205+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:31 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:01:32.472991151+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:01:32.473646731+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=1d236b867e72ce41655ff3f39871046cfc4e841c426c96aafcd3335920825852",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma-3-27b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-31b

Gemma 4 31B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,565 53b01fb34fbf38910f475c7ae74cb8d5bbba208ff2d938beca6225c3fbdbf814 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 27,372 9f75798cb2742f15f17f03c2cbfc173d665ea9c08773c7cdb0282d89b566b20e Open
nvidia-provider-evidence application/json 98,158 c5ffb6694d6ba87f6a41a64766929f8a447d8836df1bbd6f97cce2d33eb62c79 Open
provider-attestation-response application/json; charset=utf-8 207,135 09ab57ecdc724f77777094d3476413fa1aca715b997e161fd7e8b9598b644b19 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 d01c5ec07e7ba59257527289c2712ca5e140ef47ee3d5a7d7dc0ccfa80fa4773 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-31b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "e2ee-gemma-4-31b",
  "status": "partial",
  "ts": "2026-08-02T18:00:49.632213943+00:00",
  "latency_ms": 10459,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000",
    "report_data": "9765596f43dd91d1467f9a370682173741786d8c0000000000000000000000002586460887b7ab7c48a906c221a2fd1448778991bbbc42bcbf6dc8a7c6c5a946",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "2586460887b7ab7c48a906c221a2fd1448778991bbbc42bcbf6dc8a7c6c5a946"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b",
    "nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=2586460887b7ab7c48a906c221a2fd1448778991bbbc42bcbf6dc8a7c6c5a946",
  "signing_public_key": "04323149efe98c490b9b44b517b3bd599defd1ad5a61f580ca27bfd3daedd3333eddd6e40663c9a79556897ddf9ecf9dfb937ebd3cfbac512d2a7620b3c2df09d2",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "google/gemma-4-31B-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d4203286afffcc9a39b1f45d1c7d5c74fb13348e957819581946cb00b2e48a7a",
    "parsed_evidence_digest": "e05f0268743df87d32685b8424f84ea5a8d30b029011b329fe9cf4f434a7a198",
    "artifact_set_digest": "f5b743e3f82bb0b1147dbb3ce19836049ced0522588859975036b651dcf2c645"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:00:56.160569344+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=2586460887b7ab7c48a906c221a2fd1448778991bbbc42bcbf6dc8a7c6c5a946",
      "sha256": "09ab57ecdc724f77777094d3476413fa1aca715b997e161fd7e8b9598b644b19",
      "size_bytes": 207135,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:56 GMT",
        "etag": "W/\"3291f-0FSYweLx56heEvcXr7lvmdlO1R8\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:00:56.164663687+00:00",
      "sha256": "d01c5ec07e7ba59257527289c2712ca5e140ef47ee3d5a7d7dc0ccfa80fa4773",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:56.878230044+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "53b01fb34fbf38910f475c7ae74cb8d5bbba208ff2d938beca6225c3fbdbf814",
      "size_bytes": 22565,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:56.882756408+00:00",
      "sha256": "c5ffb6694d6ba87f6a41a64766929f8a447d8836df1bbd6f97cce2d33eb62c79",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:57.230587257+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "9f75798cb2742f15f17f03c2cbfc173d665ea9c08773c7cdb0282d89b566b20e",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:57 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:57.581696207+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:57 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:01:00.089439783+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:01:00.091000913+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=2586460887b7ab7c48a906c221a2fd1448778991bbbc42bcbf6dc8a7c6c5a946",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma4-31b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-glm-4-7-p

GLM 4.7 (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,285 da0ce63bd6d35ccf2be8498db2f892f7851a0b222ee07854bb7e98127955c111 Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-4-7-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "model": "e2ee-glm-4-7-p",
  "status": "unreachable",
  "ts": "2026-08-02T18:01:32.474085685+00:00",
  "latency_ms": 22211,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "2bef40dba80458d0ffdef8a081a97b86dcfe49653846ea7087cba6af79da09fd",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "f3faa9573fc468d033073c6cf351de4857923909a7041de03262454ccadff8cc"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:01:54.685462077+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-4-7-p&nonce=17e67a2d0d9d87fec90c6c8102eecddef3864b801a7a4a7845f162ff67cf4c46",
      "sha256": "da0ce63bd6d35ccf2be8498db2f892f7851a0b222ee07854bb7e98127955c111",
      "size_bytes": 63285,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:54 GMT",
        "etag": "W/\"f735-tH8FFf4SCkpCPCw0V5aHR1D6KBs\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:01:54.685758814+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-glm-4-7",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-1

GLM 5.1 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 fa6a4c63bc4036c28aa5df3ece47ab67433caebee3b4962f5d6e061a0630ccdb Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 27,372 caaa414c88be8d52e063b4ae9aceeb7985348e7fe5351069123e9885b6db30e2 Open
nvidia-provider-evidence application/json 98,158 3cda9edf052d5922ff6730ef4fb346629d26d6a61d82b4782276208a778ef718 Open
provider-attestation-response application/json; charset=utf-8 188,025 1623330d4c484d8e3a1d2db3f74d53f37ee7f3677cb7b265afa1620baa4e79e5 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 54edb0f5541f61daef1888beb8cd75f06ffdb1b305cd60155a2705e0ba678499 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-1",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "e2ee-glm-5-1",
  "status": "partial",
  "ts": "2026-08-02T18:00:22.875350383+00:00",
  "latency_ms": 6051,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01d98a2568546afce9ab53f7eb4d4b2058e5497e1efd05a8ad0934793043240ed7000000000000000000000000000000",
    "report_data": "bb4d2e7ffe98eefcd9690e2139be41e92b95e333000000000000000000000000c9626950fe59f8af53f31b9d72de894ebc4533207f5eddbd40d1cfbffa79116b",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "b59915c0d50b09151f1e7fd6d6b571feded8e45eab874fffdcbd1e0341fb60eb25e9a07404a5adcc918ad684564a30ea",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "c9626950fe59f8af53f31b9d72de894ebc4533207f5eddbd40d1cfbffa79116b"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "gpu02-glm51-20260730",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884be",
    "nearaidev/compose-manager-launcher@sha256:91fdff3cfa3543d72656b2368c7d8a0a83d95a0f1087378c897aa1537acdba56"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=c9626950fe59f8af53f31b9d72de894ebc4533207f5eddbd40d1cfbffa79116b",
  "signing_public_key": "042a1c47aad08a4f47dcb67134d77b83d8a1d5c895e37e959189249e819c3939289d8c59acb07d262db3ca946d52c51ae079fde6708cb0af7e25a57d35c8e0ac30",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "zai-org/GLM-5.1-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "03fdc558c673ff52a8bca5e89d896269b6ea362754c83b7d85252611a05588d8",
    "parsed_evidence_digest": "aef60ee0f3806d79e9a4bafd98040fca710d6831b2bf39f80e8ea8bd46d77539",
    "artifact_set_digest": "efb7e4dabef1b758eefab91d641d0bba8035addc7a8ba3b0e4f29911ec9aa568"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:00:24.739594702+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=c9626950fe59f8af53f31b9d72de894ebc4533207f5eddbd40d1cfbffa79116b",
      "sha256": "1623330d4c484d8e3a1d2db3f74d53f37ee7f3677cb7b265afa1620baa4e79e5",
      "size_bytes": 188025,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:24 GMT",
        "etag": "W/\"2de79-U7WOXtThN4vGHqv2cv6CVebsBDo\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:00:24.742795779+00:00",
      "sha256": "54edb0f5541f61daef1888beb8cd75f06ffdb1b305cd60155a2705e0ba678499",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:25.471811699+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "fa6a4c63bc4036c28aa5df3ece47ab67433caebee3b4962f5d6e061a0630ccdb",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:25.476277059+00:00",
      "sha256": "3cda9edf052d5922ff6730ef4fb346629d26d6a61d82b4782276208a778ef718",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:25.829809818+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "caaa414c88be8d52e063b4ae9aceeb7985348e7fe5351069123e9885b6db30e2",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:25 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:26.544074866+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:26 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:00:28.924939167+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:00:28.926208429+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=c9626950fe59f8af53f31b9d72de894ebc4533207f5eddbd40d1cfbffa79116b",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-glm-5-1",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-120b-p

GPT-OSS 120B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 27,372 f7b1b0e1c81b259f3c67695be5800a0dd8e5f0e76d693a39d212c7d355d1d97b Open
nvidia-provider-evidence application/json 98,158 e7e9e718fb7da74e1cf1f1c67a3797fd1948cfe3b0892c1cd0e9e5368ef8d523 Open
provider-attestation-response application/json; charset=utf-8 161,571 f26cde0650a868db5f3bae6fb497a54cd574060fdc4322de16a2bb8ccbcd8aa0 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 b1954c3153ebce429930358e53809a798ee9cac4c948f73d006895e07208d107 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-120b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "e2ee-gpt-oss-120b-p",
  "status": "failed",
  "ts": "2026-08-02T18:00:15.978325197+00:00",
  "latency_ms": 6897,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000b8b4db2b3dfb0a0e86f163bce4e4eee2723689a082db17714b5df8c8ce3d2283",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "b8b4db2b3dfb0a0e86f163bce4e4eee2723689a082db17714b5df8c8ce3d2283"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=b8b4db2b3dfb0a0e86f163bce4e4eee2723689a082db17714b5df8c8ce3d2283",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "aaf74ec046ce1c78396bcc35ccf903c96e46ed1e1c464fe7f775626827dd3e3e",
    "parsed_evidence_digest": "b931caa89ec5e14d0190d3697ed19ddc51276ffe2fb66794d143b1a47b38c0ab",
    "artifact_set_digest": "c4294d06f3268ef2e3fb3c9ca2296cfbe1e417e34483b4f031f98e236a137881"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:00:18.528938093+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=b8b4db2b3dfb0a0e86f163bce4e4eee2723689a082db17714b5df8c8ce3d2283",
      "sha256": "f26cde0650a868db5f3bae6fb497a54cd574060fdc4322de16a2bb8ccbcd8aa0",
      "size_bytes": 161571,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:18 GMT",
        "etag": "W/\"27723-2QiotkoKJVTZls/FAtE67Z1rvuo\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:00:18.532688732+00:00",
      "sha256": "b1954c3153ebce429930358e53809a798ee9cac4c948f73d006895e07208d107",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:21.744909388+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:21.750448453+00:00",
      "sha256": "e7e9e718fb7da74e1cf1f1c67a3797fd1948cfe3b0892c1cd0e9e5368ef8d523",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:22.133225753+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "f7b1b0e1c81b259f3c67695be5800a0dd8e5f0e76d693a39d212c7d355d1d97b",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:22 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:00:22.429546506+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:22 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:00:22.874097111+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:00:22.874796463+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=b8b4db2b3dfb0a0e86f163bce4e4eee2723689a082db17714b5df8c8ce3d2283",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-120b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-20b-p

GPT-OSS 20B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 3,895 1615a15020503b725a2b0d0b9d8b9aebb9b97ada0a2b00b276efd779a458ed34 Open
nvidia-provider-evidence application/json 12,103 81d371b7596909db17dd09283c3cc0048cab1eaab7873834c45ea84bc68c6495 Open
provider-attestation-response application/json; charset=utf-8 75,398 4dfb5e295449f556f8b7c755581988ab3eee5d4659931e6453faa863a5381d8a Open
tdx-quote application/vnd.intel.tdx.quote 5,006 350bc0f07af7787c76f703390a8c529e4e077191e5456243b40733d35cbf85be Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-20b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "model": "e2ee-gpt-oss-20b-p",
  "status": "failed",
  "ts": "2026-08-02T18:01:00.091370216+00:00",
  "latency_ms": 5099,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000ae712408ccffc253f7d4cc7652699eebad84f12caf4fb770c00c812115ebb20e",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "ae712408ccffc253f7d4cc7652699eebad84f12caf4fb770c00c812115ebb20e"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=ae712408ccffc253f7d4cc7652699eebad84f12caf4fb770c00c812115ebb20e",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-20b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "154a32eee1670d93a604cad1a45dbefe22b555596136cb0b33d566fe3bced80c",
    "parsed_evidence_digest": "7af5897081c8659bbf912d1c967ecb1f0fa884efad2f0287f55333a31cf6baac",
    "artifact_set_digest": "c9df70acf209dbc58b974d0e5cded54f85ddf50d7d6cc40db965903f365e95f8"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:01:03.549569271+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=ae712408ccffc253f7d4cc7652699eebad84f12caf4fb770c00c812115ebb20e",
      "sha256": "4dfb5e295449f556f8b7c755581988ab3eee5d4659931e6453faa863a5381d8a",
      "size_bytes": 75398,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:03 GMT",
        "etag": "W/\"12686-/657xh35qncaXltYkuG038XlPYs\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:01:03.551369750+00:00",
      "sha256": "350bc0f07af7787c76f703390a8c529e4e077191e5456243b40733d35cbf85be",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:04.272738489+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:04.275129336+00:00",
      "sha256": "81d371b7596909db17dd09283c3cc0048cab1eaab7873834c45ea84bc68c6495",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:04.452356034+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "1615a15020503b725a2b0d0b9d8b9aebb9b97ada0a2b00b276efd779a458ed34",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:04 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:04.794279767+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:04 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:01:05.190117837+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:01:05.190597758+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=ae712408ccffc253f7d4cc7652699eebad84f12caf4fb770c00c812115ebb20e",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-20b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen-2-5-7b-p

Qwen 2.5 7B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 3,895 ba0e367d89a9f9ce17782c460076f70caf4410f74b29e512099fed35ef6d71bc Open
nvidia-provider-evidence application/json 12,103 a4c3280ecfcb8a407debc530d2852f9581ac0cd52b6cc79de410a7a2c93bea62 Open
provider-attestation-response application/json; charset=utf-8 75,405 7b15332781caa9a65fdac97c8648f67a10f6e7d2947f478bcc8e243ef87b504e Open
tdx-quote application/vnd.intel.tdx.quote 5,006 538f4c451dff6e16c760cf16b863f260092543ff4205fc55180964e7978ecb8b Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen-2-5-7b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "model": "e2ee-qwen-2-5-7b-p",
  "status": "failed",
  "ts": "2026-08-02T18:01:05.191000163+00:00",
  "latency_ms": 6745,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000dac987058742a7b053184f7796a3c38cfee8be9bed8cd8623981bf548cab2be1",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "dac987058742a7b053184f7796a3c38cfee8be9bed8cd8623981bf548cab2be1"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=dac987058742a7b053184f7796a3c38cfee8be9bed8cd8623981bf548cab2be1",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen-2.5-7b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "35d5376e2888c2959f84cf1777577615992bf3ca1c8acbdef28792d28906ef44",
    "parsed_evidence_digest": "cfd99c8286f0dbde838680d995be7d573da62c212ebacd72ef5bb0d63b07027e",
    "artifact_set_digest": "9023c6670da3bd89d283186132c2598349a39ed9b9b1249c907ca445c6d3bcab"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:01:09.924730934+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=dac987058742a7b053184f7796a3c38cfee8be9bed8cd8623981bf548cab2be1",
      "sha256": "7b15332781caa9a65fdac97c8648f67a10f6e7d2947f478bcc8e243ef87b504e",
      "size_bytes": 75405,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:09 GMT",
        "etag": "W/\"1268d-uM97giG7ubb5e4lCCFyD6H3LYQA\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:01:09.926673349+00:00",
      "sha256": "538f4c451dff6e16c760cf16b863f260092543ff4205fc55180964e7978ecb8b",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:10.633401804+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:10.635733670+00:00",
      "sha256": "a4c3280ecfcb8a407debc530d2852f9581ac0cd52b6cc79de410a7a2c93bea62",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:10.870736182+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "ba0e367d89a9f9ce17782c460076f70caf4410f74b29e512099fed35ef6d71bc",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:10 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:11.556031034+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:11 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:01:11.935381413+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:01:11.935919593+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=dac987058742a7b053184f7796a3c38cfee8be9bed8cd8623981bf548cab2be1",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen-2-5-7b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-30b-a3b-p

Qwen3 30B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,311 ad49401c7146f470d35a7b37730cd6348bd64b3487ce4ab12fb3bc9c1f39af9d Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-30b-a3b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "model": "e2ee-qwen3-30b-a3b-p",
  "status": "unreachable",
  "ts": "2026-08-02T18:00:28.926608560+00:00",
  "latency_ms": 20705,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d3b7d5b034fa8eef6ec5eac7e82f838edee010abaf721fc13160072d702a8d97",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "b5f03f2a645115adf335e35e2670dd6e90fa0c21b84547976096fa9b27c89876"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:00:49.631717021+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-30b-a3b-p&nonce=d1ed5d112e78dfb0c96a9f6bb0bfa23bd33a73381b7ee3ebea3a726ba239cc13",
      "sha256": "ad49401c7146f470d35a7b37730cd6348bd64b3487ce4ab12fb3bc9c1f39af9d",
      "size_bytes": 63311,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:00:49 GMT",
        "etag": "W/\"f74f-SnoPWV0PQGq2schniTA/2xPjcRc\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:00:49.632004540+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-30b",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b

Qwen3 35B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,569 29397aa62243c7f21ceaf6a8d16c66dda6e73aebabb82d2553f94e0d8127842b Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 27,372 d79c1614ad1d15baa1777cdfb3e5a163b6fb17e02982238a8d72ab6ea3093ec5 Open
nvidia-provider-evidence application/json 98,158 44cd9e3e2916309238a542c14c86abb233730b8844cb70b31ccfd7b1e9075dbd Open
provider-attestation-response application/json; charset=utf-8 211,902 94d4526571ef96941284096592eae64931c7e8bbfcf613cd43eb40bb521deb4d Open
tdx-quote application/vnd.intel.tdx.quote 5,010 97c85a0bb30e5affa90c7a10e0558a2d2f42cd8fcc92ebd0a263332053794bf0 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b",
  "status": "partial",
  "ts": "2026-08-02T18:01:11.936459837+00:00",
  "latency_ms": 9118,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "e5d0fec43b001f181a3410b96715ec54171f36da000000000000000000000000257ad9f8e2982bd8d3012dfb750752c50e93cee2d4c1c8b0cc7ba68b0af13a44",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "257ad9f8e2982bd8d3012dfb750752c50e93cee2d4c1c8b0cc7ba68b0af13a44"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=257ad9f8e2982bd8d3012dfb750752c50e93cee2d4c1c8b0cc7ba68b0af13a44",
  "signing_public_key": "0489f03d8ed945eff27ad1053f87ece198409aff78c5c2aea3e438c460482f67ff5b900054dc129f6ce57e40e8875ceac0ddf30aeb885c28fd2c3e05bf3fbaa4d9",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-35B-A3B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "28b59278d6e285fe41fde0af552060aefc77c50a2c8d1403c805e1fea57569e1",
    "parsed_evidence_digest": "fdce7467066935ef18dad882a85921f699d5da0f884abc150cd73fb43e546bef",
    "artifact_set_digest": "e03b67f0824a05a6bdf6ac86892ef50fd3d509899697e6feb23899df6c41877d"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:01:16.611995437+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=257ad9f8e2982bd8d3012dfb750752c50e93cee2d4c1c8b0cc7ba68b0af13a44",
      "sha256": "94d4526571ef96941284096592eae64931c7e8bbfcf613cd43eb40bb521deb4d",
      "size_bytes": 211902,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:16 GMT",
        "etag": "W/\"33bbe-iJ5pEcp3IMHF/5tqLf6g8IqYoIE\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:01:16.616947991+00:00",
      "sha256": "97c85a0bb30e5affa90c7a10e0558a2d2f42cd8fcc92ebd0a263332053794bf0",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:17.365057463+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "29397aa62243c7f21ceaf6a8d16c66dda6e73aebabb82d2553f94e0d8127842b",
      "size_bytes": 22569,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:17.369559351+00:00",
      "sha256": "44cd9e3e2916309238a542c14c86abb233730b8844cb70b31ccfd7b1e9075dbd",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:18.092089761+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "d79c1614ad1d15baa1777cdfb3e5a163b6fb17e02982238a8d72ab6ea3093ec5",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:18 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:18.393573142+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:18 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:01:21.052946491+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:01:21.054425757+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=257ad9f8e2982bd8d3012dfb750752c50e93cee2d4c1c8b0cc7ba68b0af13a44",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-6-35b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-vl-30b-a3b-p

Qwen3-VL 30B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,229 5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467 Open
nvidia-nras-jwks application/json 80,970 daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f Open
nvidia-nras-response application/json 27,372 dd04715ed4b8d4aac35d9da03b8c253378945f4eb965e8e8d7774598ba3277ac Open
nvidia-provider-evidence application/json 98,158 8380bc9b2d6d4642f2729dcbab7cbc0deaf07c646072db80400968d2855c7664 Open
provider-attestation-response application/json; charset=utf-8 161,586 994c73c2b732d57e6d487b5f658bcfe6af0644757d205ad088bc8f871d7047d8 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 2f830d07775c58ee9c6bd50401ffdd7c361cbcba869ef33974f040c5f9f70cbb Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "status": "failed",
  "ts": "2026-08-02T18:01:21.055053034+00:00",
  "latency_ms": 4423,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0194ad706cfab181b79aafa2635cfdb55b546290849956f8c1c6155ab8a4f7fe1a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000c6131f11d9b70e230f98d4d62f68651f667e20c437d953882a3b818289773e63",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "b7b5e0d109480ff10144146c498b378fe41eab27896bf5cdb881674a71b05b767e3abdb70d619878a99c0a3933ab05f5",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "c6131f11d9b70e230f98d4d62f68651f667e20c437d953882a3b818289773e63"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=c6131f11d9b70e230f98d4d62f68651f667e20c437d953882a3b818289773e63",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen3-vl-30b-a3b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7289104bde08feb53e83f2c066e36a948c5f65fef123a919bf4f17bc5de4f338",
    "parsed_evidence_digest": "126edf230a5d16346347726c6e1c3af3943b38ad889a82b39781af7c6cdbc096",
    "artifact_set_digest": "6aaf989de56bc6ccb65767cba2d51c3a73760335acc71fbf7aaf4de979442e7c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-02T18:01:23.392175648+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=c6131f11d9b70e230f98d4d62f68651f667e20c437d953882a3b818289773e63",
      "sha256": "994c73c2b732d57e6d487b5f658bcfe6af0644757d205ad088bc8f871d7047d8",
      "size_bytes": 161586,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:23 GMT",
        "etag": "W/\"27732-F+BKV2dAIZa2PfmFf3iAde3hwjk\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-02T18:01:23.394393881+00:00",
      "sha256": "2f830d07775c58ee9c6bd50401ffdd7c361cbcba869ef33974f040c5f9f70cbb",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:24.413619396+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "5ba0d90934ab419e74d3c5ce5b7ea9e40bebc3b1d366c97d15cf69b604970467",
      "size_bytes": 22229,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:24.419977578+00:00",
      "sha256": "8380bc9b2d6d4642f2729dcbab7cbc0deaf07c646072db80400968d2855c7664",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:24.773178855+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "dd04715ed4b8d4aac35d9da03b8c253378945f4eb965e8e8d7774598ba3277ac",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:24 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-02T18:01:25.072099827+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "daf7af690e65c63ff578c1e3ce2c0d57b773f85d00e504f9d9f54afb6f95cd2f",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 02 Aug 2026 18:01:24 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-02T18:01:25.477701811+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-02T18:01:25.478306535+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=c6131f11d9b70e230f98d4d62f68651f667e20c437d953882a3b818289773e63",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-vl-30b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}