Stored Run Record

Run #1252

Completed Aug 3, 2026, 21:02:49 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
16
Verified
0
Incomplete
5
Failed
8
Unavailable
3

Recorded Decisions

Checks in this run

Run JSON

Venice.ai

e2ee-deepseek-v4-flash

E2ee Deepseek V4 Flash (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,571 20e28cb41d973c903e7daeba70c5cd5512cb5fade6be6a5c0a5059ba90beade7 Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 27,372 e41196fee62486f41b687488258f8b5d4c55223a41424362922577a55391b3a6 Open
nvidia-provider-evidence application/json 98,158 0f34fc9b293e4129b380eb820e2e2abbb6c35a232fe287b94b510037ae2d34f9 Open
provider-attestation-response application/json; charset=utf-8 199,831 c42df5cfc237759c332d7f40e8c4f2d5b2fc252896650d9d35ab6c3e8578f15e Open
tdx-quote application/vnd.intel.tdx.quote 5,010 3905f59bfeccfbf8016e27ff29495ca3731b31ba9cede50469881767820dfd14 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-deepseek-v4-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "model": "e2ee-deepseek-v4-flash",
  "status": "partial",
  "ts": "2026-08-03T21:01:50.567044842+00:00",
  "latency_ms": 11263,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "0166007399f064f058af68771c552bcae150c9f88622305631b5141da1aa2f7b7e000000000000000000000000000000",
    "report_data": "c5f6bf2f1bc666569157ec1bb4066cdaf48d026c00000000000000000000000014d3772499c52a8a34bf4ba495368f0cdf99a77314b2f7b2751c48d5b4efc254",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "18c28d262ab4733031c19fa1af233686e227a789955ba9dba2065b398c9f5dbfb76133d751dac412540dc5ac992b1b73",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "14d3772499c52a8a34bf4ba495368f0cdf99a77314b2f7b2751c48d5b4efc254"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.325",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=14d3772499c52a8a34bf4ba495368f0cdf99a77314b2f7b2751c48d5b4efc254",
  "signing_public_key": "0434ba223c3175c4debee8cd12d72f55869b6cf1ccc5ff578e940a23c7bf9dcf3abd6530ce8d8624ffd150900fd31bae802eb75367a154a75e39cc87f748b63b84",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "deepseek-ai/DeepSeek-V4-Flash"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "6bacc84fe763af7014ff7c9a51a99d349597d7e6eabd0c9a763d01c2d62932c8",
    "parsed_evidence_digest": "34a81da6832e453bcb7c1ed84fb6e966265adb69c1f125cdff686bc8ca69197c",
    "artifact_set_digest": "6b70d86b8aaade85be5f6bf5d78eff016ae8e1d732f51f201f992aaee9d6e485"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:01:57.910252365+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=14d3772499c52a8a34bf4ba495368f0cdf99a77314b2f7b2751c48d5b4efc254",
      "sha256": "c42df5cfc237759c332d7f40e8c4f2d5b2fc252896650d9d35ab6c3e8578f15e",
      "size_bytes": 199831,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:57 GMT",
        "etag": "W/\"30c97-MPDmK7YQw94rZyiSSWGWWQAqan8\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:01:57.914535323+00:00",
      "sha256": "3905f59bfeccfbf8016e27ff29495ca3731b31ba9cede50469881767820dfd14",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:58.645204920+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "20e28cb41d973c903e7daeba70c5cd5512cb5fade6be6a5c0a5059ba90beade7",
      "size_bytes": 22571,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:58.649801145+00:00",
      "sha256": "0f34fc9b293e4129b380eb820e2e2abbb6c35a232fe287b94b510037ae2d34f9",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:58.995409261+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "e41196fee62486f41b687488258f8b5d4c55223a41424362922577a55391b3a6",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:58 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:59.315784666+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:59 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:02:01.827951075+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:02:01.829887008+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=14d3772499c52a8a34bf4ba495368f0cdf99a77314b2f7b2751c48d5b4efc254",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-deepseek-v4-flash",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-26b-a4b-uncensored-p

E2ee Gemma 4 26b A4b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,231 d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 3,895 d1c24fb424f1a2b0a2532f3516a2d3fb1b2c7a03c6cbf62a900ddf38c86d54fb Open
nvidia-provider-evidence application/json 12,113 2114efd0c3cdef7183015294db0ce5213f54b0dac2824da500931f3faf6e01c6 Open
provider-attestation-response application/json; charset=utf-8 75,437 f81f2a0ebe1f814d354916b6218cd2edec222555e90577fa43e1b33af9c9dbe6 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 ea33148ed728284abf5ed03b413b14e7b01de43637c99fcbd05cf630376af59b Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "status": "failed",
  "ts": "2026-08-03T21:02:01.830342683+00:00",
  "latency_ms": 4256,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "014496101140734539fb1e72c22252a0ba9992e3822b64d333a2452357a4adf0bb000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000936817de8cc6dd2707e968c9d7a9bf9a4956ee19da04e81c79943f87515c15dd",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "58512f7be22b1dbd1c509e6aa0ad98ad2b5f1ede285355c0f97ebfa119f8538c4163d9d0ae347abb4d7bc557889b20aa",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "936817de8cc6dd2707e968c9d7a9bf9a4956ee19da04e81c79943f87515c15dd"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=936817de8cc6dd2707e968c9d7a9bf9a4956ee19da04e81c79943f87515c15dd",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/gemma-4-26b-a4b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "41c172ed2008d2092130db0be7a7613acf8cb488824bc71f5430b532a8d5d263",
    "parsed_evidence_digest": "cdf282dee8480a45f2a4c62dd66518bf0c38b8c7554f8d871ac12d5b4081b923",
    "artifact_set_digest": "411a5a10268d7f5149934cbaa11b7f33981bea693433cc73f2be6bac8ee809c6"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:02:04.513995998+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=936817de8cc6dd2707e968c9d7a9bf9a4956ee19da04e81c79943f87515c15dd",
      "sha256": "f81f2a0ebe1f814d354916b6218cd2edec222555e90577fa43e1b33af9c9dbe6",
      "size_bytes": 75437,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:04 GMT",
        "etag": "W/\"126ad-4yHaohT7ma7xJ8+6d7Pqf1xYpZY\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:02:04.515902025+00:00",
      "sha256": "ea33148ed728284abf5ed03b413b14e7b01de43637c99fcbd05cf630376af59b",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:05.241622786+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f",
      "size_bytes": 22231,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:05.244061102+00:00",
      "sha256": "2114efd0c3cdef7183015294db0ce5213f54b0dac2824da500931f3faf6e01c6",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:05.426481856+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "d1c24fb424f1a2b0a2532f3516a2d3fb1b2c7a03c6cbf62a900ddf38c86d54fb",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:05 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:05.722842004+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:05 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:02:06.085826277+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:02:06.086899291+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=936817de8cc6dd2707e968c9d7a9bf9a4956ee19da04e81c79943f87515c15dd",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-2-p

E2ee Glm 5 2 P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,231 d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 27,372 024e7498f96a9ade80def7e5ee687554466996b057e0ebed9b3168cd7ca4c331 Open
nvidia-provider-evidence application/json 98,158 5c3201f9035734622a6e02f7949f6aa8224b6c18c5a3a6fa3f8d5284a8a8f925 Open
provider-attestation-response application/json; charset=utf-8 161,559 971d908a97e352b89006870916a0f2500e0833f97d70e43e8ec6ead7c8075beb Open
tdx-quote application/vnd.intel.tdx.quote 5,006 4d69bee63b9314ed6ca140225c0ec96c16d4352ce3e1187a5c6c5fe15002af7a Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-2-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "model": "e2ee-glm-5-2-p",
  "status": "failed",
  "ts": "2026-08-03T21:02:06.087262292+00:00",
  "latency_ms": 6813,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "014496101140734539fb1e72c22252a0ba9992e3822b64d333a2452357a4adf0bb000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000d147b8cb0eccddf2a19374c97318b477bdfb091bafcf57a669775ee36ac13520",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "58512f7be22b1dbd1c509e6aa0ad98ad2b5f1ede285355c0f97ebfa119f8538c4163d9d0ae347abb4d7bc557889b20aa",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "d147b8cb0eccddf2a19374c97318b477bdfb091bafcf57a669775ee36ac13520"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=d147b8cb0eccddf2a19374c97318b477bdfb091bafcf57a669775ee36ac13520",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "z-ai/glm-5.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "bfe8723519f8385580376b47989fb0ec8ca25514e2991643fc96586ab0101adc",
    "parsed_evidence_digest": "73abbe5d4260aff1eb945e46cee5d354274582667414698606195c340057e132",
    "artifact_set_digest": "f53009002973eecdc6a7fd4b2c500b923cc806b268c09226f84fc0bf01b4b477"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:02:11.154594521+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=d147b8cb0eccddf2a19374c97318b477bdfb091bafcf57a669775ee36ac13520",
      "sha256": "971d908a97e352b89006870916a0f2500e0833f97d70e43e8ec6ead7c8075beb",
      "size_bytes": 161559,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:11 GMT",
        "etag": "W/\"27717-DI0fxVRIrk8BTIwMKjjL64gSM/A\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:02:11.158074362+00:00",
      "sha256": "4d69bee63b9314ed6ca140225c0ec96c16d4352ce3e1187a5c6c5fe15002af7a",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:11.845783090+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f",
      "size_bytes": 22231,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:11.850464656+00:00",
      "sha256": "5c3201f9035734622a6e02f7949f6aa8224b6c18c5a3a6fa3f8d5284a8a8f925",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:12.201574936+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "024e7498f96a9ade80def7e5ee687554466996b057e0ebed9b3168cd7ca4c331",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:12 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:12.534488189+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:12 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:02:12.899672711+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:02:12.900462734+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=d147b8cb0eccddf2a19374c97318b477bdfb091bafcf57a669775ee36ac13520",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-glm-5-2-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-27b

E2ee Qwen3 6 27b (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,571 760c54f39a4db9c513f99cf15fe1a64cf8cdac81db0879ca247adaaf82bcaeb2 Open
nvidia-nras-jwks application/json 80,970 900b5666f7935dbebc950f0456d938fad2a31b22e66c4962bd780e6c5d9bc1ac Open
nvidia-nras-response application/json 27,372 ad9b5b394130e71e915a2a734a3802d77837752e75d9cdc8cc577656fa85f997 Open
nvidia-provider-evidence application/json 98,158 0e242b472757a3b671c5daf812cee48c84ceddffc8844ab3dd5d6756120b9b44 Open
provider-attestation-response application/json; charset=utf-8 211,890 15dd93faab92dca7c8b0964d60b15d7a5222483844be10a89c84b99d9d36c0de Open
tdx-quote application/vnd.intel.tdx.quote 5,010 0d0dc41bf0b2715e09368cb58dfef41c0f4eca657011af1d58098846626edb75 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-27b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "model": "e2ee-qwen3-6-27b",
  "status": "partial",
  "ts": "2026-08-03T21:02:12.900844279+00:00",
  "latency_ms": 9109,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "6eb6ce4fa9f7f704769afff165955105c1ae7b1d000000000000000000000000c7abdf24aea4fbcafef576aeea426f7a5abe92b29413a45c5df7fddf6a3f3c63",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "c7abdf24aea4fbcafef576aeea426f7a5abe92b29413a45c5df7fddf6a3f3c63"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=c7abdf24aea4fbcafef576aeea426f7a5abe92b29413a45c5df7fddf6a3f3c63",
  "signing_public_key": "04cf942c4bcb0f89ffd33e837d850ab3eb4ff66cee6b285db3bbdff6e815f81e7df9a4bfaf863207b5d4ccc99ea4c3eca3172a82b2a7717635522bd22fc0cf6219",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-27B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7e0ccb549a79a186da738c36fb21f4ac9a803041723f5569bbd7945a4ca7e530",
    "parsed_evidence_digest": "d2f66b28547f33490447197316b3b33332d21abcaa7d0233e1920e3d99fce047",
    "artifact_set_digest": "3b74f342538cf96996c83712f5a3bea62edf0588b164902ddd3f687f9c5ae3a0"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:02:17.548146316+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=c7abdf24aea4fbcafef576aeea426f7a5abe92b29413a45c5df7fddf6a3f3c63",
      "sha256": "15dd93faab92dca7c8b0964d60b15d7a5222483844be10a89c84b99d9d36c0de",
      "size_bytes": 211890,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:17 GMT",
        "etag": "W/\"33bb2-EvBIHXJJtIwdLaLWDTTV3l0Fpmw\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:02:17.553158632+00:00",
      "sha256": "0d0dc41bf0b2715e09368cb58dfef41c0f4eca657011af1d58098846626edb75",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:18.241259968+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "760c54f39a4db9c513f99cf15fe1a64cf8cdac81db0879ca247adaaf82bcaeb2",
      "size_bytes": 22571,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:18.246583588+00:00",
      "sha256": "0e242b472757a3b671c5daf812cee48c84ceddffc8844ab3dd5d6756120b9b44",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:18.967939758+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "ad9b5b394130e71e915a2a734a3802d77837752e75d9cdc8cc577656fa85f997",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:18 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:19.698794463+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "900b5666f7935dbebc950f0456d938fad2a31b22e66c4962bd780e6c5d9bc1ac",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:19 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:02:22.007875720+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:02:22.010123659+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=c7abdf24aea4fbcafef576aeea426f7a5abe92b29413a45c5df7fddf6a3f3c63",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-27b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b-uncensored-p

E2ee Qwen3 6 35b A3b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,231 d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f Open
nvidia-nras-jwks application/json 80,970 900b5666f7935dbebc950f0456d938fad2a31b22e66c4962bd780e6c5d9bc1ac Open
nvidia-nras-response application/json 3,895 6d048a6f3705c92854919caf44f7024df8f5c404777f0872d97d8278872cd338 Open
nvidia-provider-evidence application/json 12,113 77b24a50e1d14495ad70464ef913a8f1f74efc8517d21543ddd9d14fc374902f Open
provider-attestation-response application/json; charset=utf-8 75,437 aaf38508660120f5f25ffd48aaab52b2a0a85fb98f0700ac122a4be9809d39b5 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 33a9412b9a2ffbd61827496926f784e922d4d7bd7455c5aed47fbf94947947b1 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "status": "failed",
  "ts": "2026-08-03T21:02:22.010684642+00:00",
  "latency_ms": 4125,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "014496101140734539fb1e72c22252a0ba9992e3822b64d333a2452357a4adf0bb000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000eb527a8fd26a217ec0f6fd6b1057a70b7ea9e97d8ea6c9bcdde214694c57e4d0",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "58512f7be22b1dbd1c509e6aa0ad98ad2b5f1ede285355c0f97ebfa119f8538c4163d9d0ae347abb4d7bc557889b20aa",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "eb527a8fd26a217ec0f6fd6b1057a70b7ea9e97d8ea6c9bcdde214694c57e4d0"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=eb527a8fd26a217ec0f6fd6b1057a70b7ea9e97d8ea6c9bcdde214694c57e4d0",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/qwen3.6-35b-a3b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "c0ec14186368acfb7d45268916c145228ab1d980a998626b28563bc30d7e7d00",
    "parsed_evidence_digest": "b2920905eea7ff37507ff32a4e2f1a5754fc6a3457961f7861af1465fba43ba5",
    "artifact_set_digest": "1bb889902d962f4b5daa1b0a36653e8f9b12b1b0ff49fa9f2f8313cdfe9dbac6"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:02:24.139533140+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=eb527a8fd26a217ec0f6fd6b1057a70b7ea9e97d8ea6c9bcdde214694c57e4d0",
      "sha256": "aaf38508660120f5f25ffd48aaab52b2a0a85fb98f0700ac122a4be9809d39b5",
      "size_bytes": 75437,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:24 GMT",
        "etag": "W/\"126ad-B+5AIOler2AVwCaGQKzDfahr5GM\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:02:24.142393408+00:00",
      "sha256": "33a9412b9a2ffbd61827496926f784e922d4d7bd7455c5aed47fbf94947947b1",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:25.285099679+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f",
      "size_bytes": 22231,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:25.288647276+00:00",
      "sha256": "77b24a50e1d14495ad70464ef913a8f1f74efc8517d21543ddd9d14fc374902f",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:25.471735993+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "6d048a6f3705c92854919caf44f7024df8f5c404777f0872d97d8278872cd338",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:25 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:02:25.777679335+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "900b5666f7935dbebc950f0456d938fad2a31b22e66c4962bd780e6c5d9bc1ac",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:25 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:02:26.134615539+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:02:26.135278463+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=eb527a8fd26a217ec0f6fd6b1057a70b7ea9e97d8ea6c9bcdde214694c57e4d0",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-venice-uncensored-24b-p

E2ee Venice Uncensored 24b P (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,307 26050697f1eb5f110abc6534ab15bcbb00c58728a3dd92003eae04c58e98387a Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-venice-uncensored-24b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-venice-uncensored-24b-p",
  "label": "E2ee Venice Uncensored 24b P (TEE)",
  "model": "e2ee-venice-uncensored-24b-p",
  "status": "unreachable",
  "ts": "2026-08-03T21:02:26.135721524+00:00",
  "latency_ms": 23031,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "63737b0ef3638ef36a5dcb75926d9a9e85b48ce5dfcd4d665f43e42d70902809",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "7502c6dc28d28cfefb6999be4c87c20359fb7f0fd9227a0ce8a5f334965b751d"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:02:49.166803046+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-venice-uncensored-24b-p&nonce=619d34414828285af3b2a171b0956aca08462d196a156f71601ed215f5271112",
      "sha256": "26050697f1eb5f110abc6534ab15bcbb00c58728a3dd92003eae04c58e98387a",
      "size_bytes": 63307,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:02:49 GMT",
        "etag": "W/\"f74b-cuaN9SQT+gi0grIx5PEsBig9Fog\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:02:49.167073333+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-venice-uncensored-24b-p",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-3-27b-p

Gemma 3 27B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,231 d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 27,372 155eb74e455fd87744c37a29572d737dbd1f7e42705eda37c0f1f0e10a1c0c2f Open
nvidia-provider-evidence application/json 98,158 276a4b4c222cfc2b9789d30291f2b1930f452d5a9fccfe4f78e0a31a0bf66c59 Open
provider-attestation-response application/json; charset=utf-8 161,572 d47fe3fc123f3f232b702062354e587b0c77348c7060f5c84069ffddc58cec64 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 c9927b84eae7e8bd0932ce6fb047ab6d5c68866a23e0c916bc62406661ba748b Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-3-27b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "model": "e2ee-gemma-3-27b-p",
  "status": "failed",
  "ts": "2026-08-03T21:01:21.979793656+00:00",
  "latency_ms": 5468,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "014496101140734539fb1e72c22252a0ba9992e3822b64d333a2452357a4adf0bb000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000004134f0f3728d90341d8d709a7ad74a8859f1fce7d6b647df6ae5f23d990065f",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "58512f7be22b1dbd1c509e6aa0ad98ad2b5f1ede285355c0f97ebfa119f8538c4163d9d0ae347abb4d7bc557889b20aa",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "04134f0f3728d90341d8d709a7ad74a8859f1fce7d6b647df6ae5f23d990065f"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=04134f0f3728d90341d8d709a7ad74a8859f1fce7d6b647df6ae5f23d990065f",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "google/gemma-3-27b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "fa4442e03eb3a89481106f42ca4b584c3c805376ae8bc948779c9f3a37429dd8",
    "parsed_evidence_digest": "3cb4067bd3e178f3dfbcee9ad5236f76b5dfb704709afe03436ff9f8457b5606",
    "artifact_set_digest": "3dab4a68f33aef4b625126e7922b8338a3b263a4294802995a9982e680ee2d00"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:01:25.686187288+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=04134f0f3728d90341d8d709a7ad74a8859f1fce7d6b647df6ae5f23d990065f",
      "sha256": "d47fe3fc123f3f232b702062354e587b0c77348c7060f5c84069ffddc58cec64",
      "size_bytes": 161572,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:25 GMT",
        "etag": "W/\"27724-Gv3aaU/BgGU3oq3soqVg/DJBxiw\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:01:25.688503935+00:00",
      "sha256": "c9927b84eae7e8bd0932ce6fb047ab6d5c68866a23e0c916bc62406661ba748b",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:26.412149883+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f",
      "size_bytes": 22231,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:26.416993452+00:00",
      "sha256": "276a4b4c222cfc2b9789d30291f2b1930f452d5a9fccfe4f78e0a31a0bf66c59",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:26.768186598+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "155eb74e455fd87744c37a29572d737dbd1f7e42705eda37c0f1f0e10a1c0c2f",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:26 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:27.106027969+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:26 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:01:27.447273878+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:01:27.448244700+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=04134f0f3728d90341d8d709a7ad74a8859f1fce7d6b647df6ae5f23d990065f",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma-3-27b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-31b

Gemma 4 31B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,567 72d371c059f7cab9329afc9ecd883121a9431e99b2ffe4051b1de015b7b795e2 Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 27,372 a93201be2d1613b825fc23d3ff38d49adaa1caa235c6ef04ba99478288e16f89 Open
nvidia-provider-evidence application/json 98,158 da5d5f6b89497a605ff23f39a4aee39c28f8c997d7eebdaec737353fd81e30a8 Open
provider-attestation-response application/json; charset=utf-8 207,135 12568637ccf7e99fb9cdda3e417478bb0d2b0d2d1d3d704915f98541560821b8 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 0978a891dd6a9d082465bb8e02fe165601f33fb7e52d541adc9e268d7d323004 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-31b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "e2ee-gemma-4-31b",
  "status": "partial",
  "ts": "2026-08-03T21:00:45.570437976+00:00",
  "latency_ms": 10412,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01fb3d47e5ae94ddfd43721002b127ce07d3828b05687e4e5a394a7a827d0ec55c000000000000000000000000000000",
    "report_data": "9765596f43dd91d1467f9a370682173741786d8c000000000000000000000000b6cf82a5f000b4b0c1939970505adfa863f860e9e8ac2b93820f5ca2a228cd98",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "7fa327ff09d29f0837e9d5cace6b5d5d39f6eb80c111f57cb1b5e126be410e8f737b9e0a56f4e03a7f3fe5f211ee6d64",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "b6cf82a5f000b4b0c1939970505adfa863f860e9e8ac2b93820f5ca2a228cd98"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:5165400d9eb43ab5da36986a85de0ba55f3fb4d05211c4397ecc4bde3ef0113b",
    "nearaidev/compose-manager-launcher@sha256:d652f92b64f57ef8aa086bd77a4cf932c1976965b3cea2814a7ee82fe73aa993"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=b6cf82a5f000b4b0c1939970505adfa863f860e9e8ac2b93820f5ca2a228cd98",
  "signing_public_key": "04323149efe98c490b9b44b517b3bd599defd1ad5a61f580ca27bfd3daedd3333eddd6e40663c9a79556897ddf9ecf9dfb937ebd3cfbac512d2a7620b3c2df09d2",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "google/gemma-4-31B-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d4203286afffcc9a39b1f45d1c7d5c74fb13348e957819581946cb00b2e48a7a",
    "parsed_evidence_digest": "fa0b4616170a3ba1f77ad65cc4ee9c2ead63c5d4a164b4f62a0ca6c3ad379d6a",
    "artifact_set_digest": "56d2c75d99c733e93dddc14a8878cddf2041a9c45e06a80b30344b7ca0242125"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:00:51.910212574+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=b6cf82a5f000b4b0c1939970505adfa863f860e9e8ac2b93820f5ca2a228cd98",
      "sha256": "12568637ccf7e99fb9cdda3e417478bb0d2b0d2d1d3d704915f98541560821b8",
      "size_bytes": 207135,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:51 GMT",
        "etag": "W/\"3291f-DPHSrJDzMUmFEa25M09QNM3TtAw\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:00:51.914516531+00:00",
      "sha256": "0978a891dd6a9d082465bb8e02fe165601f33fb7e52d541adc9e268d7d323004",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:52.636679545+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "72d371c059f7cab9329afc9ecd883121a9431e99b2ffe4051b1de015b7b795e2",
      "size_bytes": 22567,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:52.642640521+00:00",
      "sha256": "da5d5f6b89497a605ff23f39a4aee39c28f8c997d7eebdaec737353fd81e30a8",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:53.001024852+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "a93201be2d1613b825fc23d3ff38d49adaa1caa235c6ef04ba99478288e16f89",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:52 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:53.304379456+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:53 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:00:55.981449418+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:00:55.982974499+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=b6cf82a5f000b4b0c1939970505adfa863f860e9e8ac2b93820f5ca2a228cd98",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma4-31b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-glm-4-7-p

GLM 4.7 (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,284 03475039e502c5682c7eee03bdbb38b9dc1f7c309fcef8b85996466f806e0fd1 Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-4-7-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-4-7",
  "label": "GLM 4.7 (TEE)",
  "model": "e2ee-glm-4-7-p",
  "status": "unreachable",
  "ts": "2026-08-03T21:01:27.448592483+00:00",
  "latency_ms": 23118,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "2bef40dba80458d0ffdef8a081a97b86dcfe49653846ea7087cba6af79da09fd",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "aa490567708395a8348cc2497ac7c2f6ee170a76d3ed5d4b61a590ce93ad66e7"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:01:50.566427684+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-4-7-p&nonce=c24a670aaa50e63e8c9f57a4283cceee540d92b30ab4f04b056432b5ecf4ff02",
      "sha256": "03475039e502c5682c7eee03bdbb38b9dc1f7c309fcef8b85996466f806e0fd1",
      "size_bytes": 63284,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:50 GMT",
        "etag": "W/\"f734-Zw4BapeAJJpHYg/xaVsdKmPJY4Q\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:01:50.566763344+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-glm-4-7",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-1

GLM 5.1 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,571 fe44bf6c6c55fa3681795d182966ac63c824c5cab80587a43e71cb1815235f46 Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 27,372 90f4ccd833af9bcdeb2f6df8293792eac1de5d631056cb74e34fb21b45f88662 Open
nvidia-provider-evidence application/json 98,158 6ccc44d8a7aec28cf60ecbc608e70e86f824e8916b5f611f8257f7b7cccd4df4 Open
provider-attestation-response application/json; charset=utf-8 217,642 67df249927e0ece4d411e75b533fb0cd40e63aa25db228c77a700c54c943fe37 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 c9e364e6424164fdd753faa681729ab40691a84ca9fe37a8893797aa6138c7b3 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-1",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "e2ee-glm-5-1",
  "status": "partial",
  "ts": "2026-08-03T21:00:18.810549752+00:00",
  "latency_ms": 5881,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "07010300000000000000000000000000",
    "mr_seam": "49b66faa451d19ebbdbe89371b8daf2b65aa3984ec90110343e9e2eec116af08850fa20e3b1aa9a874d77a65380ee7e6",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "010fccab4eb7ffc4c9ec1be8e2851e7b820efef0485cfd21ac027bf1408dc836b0000000000000000000000000000000",
    "report_data": "bb4d2e7ffe98eefcd9690e2139be41e92b95e3330000000000000000000000005c55b862851e634cb9e08afc75893d4a090aeadd37d7033be2b6a916fc5ef0dc",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "33a68f88f7ada9fef354f4099b1bf412a655204ca821581b758857b88d27cc37dcf4912c4da3d90e39b6cd1aee5c090d",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "5c55b862851e634cb9e08afc75893d4a090aeadd37d7033be2b6a916fc5ef0dc"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=5c55b862851e634cb9e08afc75893d4a090aeadd37d7033be2b6a916fc5ef0dc",
  "signing_public_key": "042a1c47aad08a4f47dcb67134d77b83d8a1d5c895e37e959189249e819c3939289d8c59acb07d262db3ca946d52c51ae079fde6708cb0af7e25a57d35c8e0ac30",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "zai-org/GLM-5.1-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "03fdc558c673ff52a8bca5e89d896269b6ea362754c83b7d85252611a05588d8",
    "parsed_evidence_digest": "f4f7477573bfca324c464d8f30d559136096f011208e1d415e5ee85386738ff8",
    "artifact_set_digest": "dce4eac81d60736ab92398e9c97503819bf39c6259fa4b06cc05db02ff6adec0"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:00:20.657058503+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=5c55b862851e634cb9e08afc75893d4a090aeadd37d7033be2b6a916fc5ef0dc",
      "sha256": "67df249927e0ece4d411e75b533fb0cd40e63aa25db228c77a700c54c943fe37",
      "size_bytes": 217642,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:20 GMT",
        "etag": "W/\"3522a-5Y7y4Y/Wb1bIg/YxVotg+z7P7t0\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:00:20.662081899+00:00",
      "sha256": "c9e364e6424164fdd753faa681729ab40691a84ca9fe37a8893797aa6138c7b3",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:21.358240395+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "fe44bf6c6c55fa3681795d182966ac63c824c5cab80587a43e71cb1815235f46",
      "size_bytes": 22571,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:21.363291183+00:00",
      "sha256": "6ccc44d8a7aec28cf60ecbc608e70e86f824e8916b5f611f8257f7b7cccd4df4",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:21.721254233+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "90f4ccd833af9bcdeb2f6df8293792eac1de5d631056cb74e34fb21b45f88662",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:21 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:22.020241712+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:00:24.690558851+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:00:24.692029902+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=5c55b862851e634cb9e08afc75893d4a090aeadd37d7033be2b6a916fc5ef0dc",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-glm-5-1",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-120b-p

GPT-OSS 120B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,231 d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 27,372 fd88e1fa8615f683936e0b50fcefe9e4344f2dc8640a804dce848c93a1aaa995 Open
nvidia-provider-evidence application/json 98,158 32c9bcd1f445336ca4f65038c805f6d80647f2538bcd21ca91cef03789d7b28f Open
provider-attestation-response application/json; charset=utf-8 161,571 277e0293706cef706ff59ab8df48c98b763e205884220776259d440d4cb62f53 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 107809e0144254cce99a730bbd5152017843650ba3b1d8f6611db90027e4fbe6 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-120b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "e2ee-gpt-oss-120b-p",
  "status": "failed",
  "ts": "2026-08-03T21:00:11.664399719+00:00",
  "latency_ms": 7146,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "014496101140734539fb1e72c22252a0ba9992e3822b64d333a2452357a4adf0bb000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000ffccc66e4f0c6f953eec133ffd73e5611aaf587c0bbc8e5ff8f56614cf26af3a",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "58512f7be22b1dbd1c509e6aa0ad98ad2b5f1ede285355c0f97ebfa119f8538c4163d9d0ae347abb4d7bc557889b20aa",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "ffccc66e4f0c6f953eec133ffd73e5611aaf587c0bbc8e5ff8f56614cf26af3a"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=ffccc66e4f0c6f953eec133ffd73e5611aaf587c0bbc8e5ff8f56614cf26af3a",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "aaf74ec046ce1c78396bcc35ccf903c96e46ed1e1c464fe7f775626827dd3e3e",
    "parsed_evidence_digest": "74c4576201396f9c01fe65bb6870bf92155a34a1c7d9e5578fd1fa0db018e37e",
    "artifact_set_digest": "b9e71b1ed17c8c4c91a8a1056376d921842e6191440bcf776d1124247b620e7e"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:00:13.933058231+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=ffccc66e4f0c6f953eec133ffd73e5611aaf587c0bbc8e5ff8f56614cf26af3a",
      "sha256": "277e0293706cef706ff59ab8df48c98b763e205884220776259d440d4cb62f53",
      "size_bytes": 161571,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:13 GMT",
        "etag": "W/\"27723-vpgN58zCEA0ZoeoBWhPl3QIvw1s\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:00:13.935588328+00:00",
      "sha256": "107809e0144254cce99a730bbd5152017843650ba3b1d8f6611db90027e4fbe6",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:16.811563247+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f",
      "size_bytes": 22231,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:16.816757204+00:00",
      "sha256": "32c9bcd1f445336ca4f65038c805f6d80647f2538bcd21ca91cef03789d7b28f",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:17.338746690+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "fd88e1fa8615f683936e0b50fcefe9e4344f2dc8640a804dce848c93a1aaa995",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:17 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:00:18.061369107+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:17 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:00:18.809027085+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:00:18.810181822+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=ffccc66e4f0c6f953eec133ffd73e5611aaf587c0bbc8e5ff8f56614cf26af3a",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-120b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-20b-p

GPT-OSS 20B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,231 d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 3,895 2cf8725b64fde6f1e6f660527c55b43225f7de7154b9e705e47e7105bf7a4ef7 Open
nvidia-provider-evidence application/json 12,103 c3ffd7d5a0512c47979cb0e8d2c91edfb5e5ed6892c2e30eb2ce129d4e196d7c Open
provider-attestation-response application/json; charset=utf-8 75,398 00f960f9051a7b47a29eda4bc1568b9fa1a90f70ebca154d4571e260825ba4fb Open
tdx-quote application/vnd.intel.tdx.quote 5,006 59f191116bc7c0d20aedb4e2d26c54e6783a880b4d1606442ab08e1339f710f6 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-20b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "model": "e2ee-gpt-oss-20b-p",
  "status": "failed",
  "ts": "2026-08-03T21:00:55.983374690+00:00",
  "latency_ms": 5108,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "014496101140734539fb1e72c22252a0ba9992e3822b64d333a2452357a4adf0bb000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000008510adf03e7caa781656e11e01176e0e451c4b21d0a82d704bf7ba0b6ece41ee",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "58512f7be22b1dbd1c509e6aa0ad98ad2b5f1ede285355c0f97ebfa119f8538c4163d9d0ae347abb4d7bc557889b20aa",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "8510adf03e7caa781656e11e01176e0e451c4b21d0a82d704bf7ba0b6ece41ee"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=8510adf03e7caa781656e11e01176e0e451c4b21d0a82d704bf7ba0b6ece41ee",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-20b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "154a32eee1670d93a604cad1a45dbefe22b555596136cb0b33d566fe3bced80c",
    "parsed_evidence_digest": "10ac76315549274e59298f4f1e63c6a08ae5f2320527be5537dfa602d7d08a14",
    "artifact_set_digest": "289368836daed5c2ca3aec4f4b61ef175606a4516c509b12d90e492925a4510e"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:00:59.441616069+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=8510adf03e7caa781656e11e01176e0e451c4b21d0a82d704bf7ba0b6ece41ee",
      "sha256": "00f960f9051a7b47a29eda4bc1568b9fa1a90f70ebca154d4571e260825ba4fb",
      "size_bytes": 75398,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:59 GMT",
        "etag": "W/\"12686-KDl7gG4vaiKn8mZ7s0aHGSSTfKg\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:00:59.443520994+00:00",
      "sha256": "59f191116bc7c0d20aedb4e2d26c54e6783a880b4d1606442ab08e1339f710f6",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:00.166593936+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f",
      "size_bytes": 22231,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:00.168943004+00:00",
      "sha256": "c3ffd7d5a0512c47979cb0e8d2c91edfb5e5ed6892c2e30eb2ce129d4e196d7c",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:00.364210867+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "2cf8725b64fde6f1e6f660527c55b43225f7de7154b9e705e47e7105bf7a4ef7",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:00 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:00.703397502+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:00 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:01:01.091039437+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:01:01.091642348+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=8510adf03e7caa781656e11e01176e0e451c4b21d0a82d704bf7ba0b6ece41ee",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-20b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen-2-5-7b-p

Qwen 2.5 7B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,231 d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 3,895 6216cd194296a9801cf86ef24023a27ae9aceb24defadd4ed388da1d1c64274c Open
nvidia-provider-evidence application/json 12,103 fcb539b8b757cf99aa8adcffdbfd193877d2027b6d2a5fe8d955f333910e7aef Open
provider-attestation-response application/json; charset=utf-8 75,405 bb1eb19c9efdcbfb2d2828e2d87a710c2e3f17027837d5a9e6c994b977ee5001 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 ec41ebcdbef559a3211c611db297492b4db97f7b8fd6913608930374b75a9b55 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen-2-5-7b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "model": "e2ee-qwen-2-5-7b-p",
  "status": "failed",
  "ts": "2026-08-03T21:01:01.092094927+00:00",
  "latency_ms": 6413,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "014496101140734539fb1e72c22252a0ba9992e3822b64d333a2452357a4adf0bb000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000d87a947b22858f32e7d4c2a59890a31855bf0475b5479b0bb289550ff8b24565",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "58512f7be22b1dbd1c509e6aa0ad98ad2b5f1ede285355c0f97ebfa119f8538c4163d9d0ae347abb4d7bc557889b20aa",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "d87a947b22858f32e7d4c2a59890a31855bf0475b5479b0bb289550ff8b24565"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=d87a947b22858f32e7d4c2a59890a31855bf0475b5479b0bb289550ff8b24565",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen-2.5-7b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "35d5376e2888c2959f84cf1777577615992bf3ca1c8acbdef28792d28906ef44",
    "parsed_evidence_digest": "3cfe46e39738094d04db99e1783434817dad5febf6aa107fceea1181327fa4f5",
    "artifact_set_digest": "774308b2e7312aaaaf238883ffb74135eb579aef5ce84b39ccbec7c8fd68b4b0"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:01:05.910343175+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=d87a947b22858f32e7d4c2a59890a31855bf0475b5479b0bb289550ff8b24565",
      "sha256": "bb1eb19c9efdcbfb2d2828e2d87a710c2e3f17027837d5a9e6c994b977ee5001",
      "size_bytes": 75405,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:05 GMT",
        "etag": "W/\"1268d-0TNHDqQ10L6KDqu30TiRCgnfkTI\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:01:05.912303053+00:00",
      "sha256": "ec41ebcdbef559a3211c611db297492b4db97f7b8fd6913608930374b75a9b55",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:06.611223251+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f",
      "size_bytes": 22231,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:06.615831869+00:00",
      "sha256": "fcb539b8b757cf99aa8adcffdbfd193877d2027b6d2a5fe8d955f333910e7aef",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:06.797167677+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "6216cd194296a9801cf86ef24023a27ae9aceb24defadd4ed388da1d1c64274c",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:06 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:07.090622995+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:06 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:01:07.504543332+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:01:07.505517681+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=d87a947b22858f32e7d4c2a59890a31855bf0475b5479b0bb289550ff8b24565",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen-2-5-7b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-30b-a3b-p

Qwen3 30B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
provider-http-error-response application/json; charset=utf-8 63,311 b147c7a99506a32d49b72daf2f3b2fe2491bf08d806fbe3a2b0403cc89a82473 Open
verification-error text/plain; charset=utf-8 35 9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-30b-a3b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-30b",
  "label": "Qwen3 30B (TEE)",
  "model": "e2ee-qwen3-30b-a3b-p",
  "status": "unreachable",
  "ts": "2026-08-03T21:00:24.692397181+00:00",
  "latency_ms": 20878,
  "error": "Network error: HTTP 502 Bad Gateway",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d3b7d5b034fa8eef6ec5eac7e82f838edee010abaf721fc13160072d702a8d97",
    "parsed_evidence_digest": "c2b23b813f7cf037325784e81abe2d946c62c4985fa4d9de8110e4ea2dd6d9ce",
    "artifact_set_digest": "747f8cf47828fb2c3524a0c6feb1f3dd7058c931f08e4a571fd6948119e465d8"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-http-error-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:00:45.569674403+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-30b-a3b-p&nonce=b5cd89e5e5df8014b56729dfd34aeee64cbec13de46f5b98d82b272359234fc6",
      "sha256": "b147c7a99506a32d49b72daf2f3b2fe2491bf08d806fbe3a2b0403cc89a82473",
      "size_bytes": 63311,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:00:45 GMT",
        "etag": "W/\"f74f-xonv7EckI+KGsCSjFNbpO4/QNM0\"",
        "http_method": "GET",
        "http_status": "502"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:00:45.570112906+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "9d49ff43afc338da66e0854d44362aeae181341136c543f0ce3f3c30f1263606",
      "size_bytes": 35,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-30b",
        "provider": "venice",
        "status": "unreachable"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b

Qwen3 35B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,571 760c54f39a4db9c513f99cf15fe1a64cf8cdac81db0879ca247adaaf82bcaeb2 Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 27,372 d6417ebea11ae3a3881cddb87002a0878ff2f208e242e6fc235574cb4484fd5d Open
nvidia-provider-evidence application/json 98,158 1c53751761293a6303973340da56e61158cfbd53e2c8fcfeea755025c47db292 Open
provider-attestation-response application/json; charset=utf-8 211,901 c5d185ee38fa993c57a4dca0200b8f11a48ba22799c4e799aa238d81c7ae3be5 Open
tdx-quote application/vnd.intel.tdx.quote 5,010 843091527eeaadd71cb638d28cb316c79e3b8c132ba6c4838cae13496007b74b Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b",
  "status": "partial",
  "ts": "2026-08-03T21:01:07.505878198+00:00",
  "latency_ms": 9143,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "01db6943f37a4f54bd12144ecbf9f8c780ca14c0c44600a5a9ca09a041d92ba5ca000000000000000000000000000000",
    "report_data": "e5d0fec43b001f181a3410b96715ec54171f36da000000000000000000000000b7528328ec94d0111b84d1c790fbdc02f4686b3a012943f4e1cd441b4742a6c5",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "3738dac7d405c7dab13aa50ae54a3c9b4d8ea7964038a24d80ed46ef9d3cb1bedcbdbe35ad55bc3247b369d8c8d790b4",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "b7528328ec94d0111b84d1c790fbdc02f4686b3a012943f4e1cd441b4742a6c5"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=b7528328ec94d0111b84d1c790fbdc02f4686b3a012943f4e1cd441b4742a6c5",
  "signing_public_key": "0489f03d8ed945eff27ad1053f87ece198409aff78c5c2aea3e438c460482f67ff5b900054dc129f6ce57e40e8875ceac0ddf30aeb885c28fd2c3e05bf3fbaa4d9",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-35B-A3B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "28b59278d6e285fe41fde0af552060aefc77c50a2c8d1403c805e1fea57569e1",
    "parsed_evidence_digest": "1d5603d6dd537d277ad620d1df42de4bf7001213ca2a8e3051805bb001827ca8",
    "artifact_set_digest": "2a1d519b44ea6b8fe1fc5a1e582e075c635cebe7d785027fa7a1aa3617cc72d8"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:01:12.396477867+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=b7528328ec94d0111b84d1c790fbdc02f4686b3a012943f4e1cd441b4742a6c5",
      "sha256": "c5d185ee38fa993c57a4dca0200b8f11a48ba22799c4e799aa238d81c7ae3be5",
      "size_bytes": 211901,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:12 GMT",
        "etag": "W/\"33bbd-hSBs3A3rA35hY/3UDRdWT4kviUg\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:01:12.400939991+00:00",
      "sha256": "843091527eeaadd71cb638d28cb316c79e3b8c132ba6c4838cae13496007b74b",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:13.124243075+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "760c54f39a4db9c513f99cf15fe1a64cf8cdac81db0879ca247adaaf82bcaeb2",
      "size_bytes": 22571,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:13.129631907+00:00",
      "sha256": "1c53751761293a6303973340da56e61158cfbd53e2c8fcfeea755025c47db292",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:13.843750536+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "d6417ebea11ae3a3881cddb87002a0878ff2f208e242e6fc235574cb4484fd5d",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:13 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:14.187251868+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:14 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:01:16.647191180+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:01:16.648797664+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=b7528328ec94d0111b84d1c790fbdc02f4686b3a012943f4e1cd441b4742a6c5",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-6-35b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-vl-30b-a3b-p

Qwen3-VL 30B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 22,231 d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f Open
nvidia-nras-jwks application/json 80,970 107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d Open
nvidia-nras-response application/json 27,372 7c372cd83c859a8f02f4ea3ec01fac1c80c3c6d6269b11615b2a8d459bab2471 Open
nvidia-provider-evidence application/json 98,158 dc403e398c947f81a7858c7f617f023b4982b734c4113cfd337f9b4ed4848149 Open
provider-attestation-response application/json; charset=utf-8 161,585 2793f064ca0ea85687c5295dda77edd576bbf4e6f343266ff8ff935de11087f4 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 54e74deccd2fcf39513772578252ac4ca15841082d4dcba812f69ed43083b597 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "status": "failed",
  "ts": "2026-08-03T21:01:16.649223664+00:00",
  "latency_ms": 5330,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "014496101140734539fb1e72c22252a0ba9992e3822b64d333a2452357a4adf0bb000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000a14dd32c64f846254a6fc445f1257ff6721cac9dfc030a04d2289ceee5bacb1a",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "a2a58c9a959a4fa44bd6da0c97a2270c051faf12084cfe91ae900e4fdff6cdd4f69a82005e04ee920f231497894d677f",
    "rtmr3": "58512f7be22b1dbd1c509e6aa0ad98ad2b5f1ede285355c0f97ebfa119f8538c4163d9d0ae347abb4d7bc557889b20aa",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "a14dd32c64f846254a6fc445f1257ff6721cac9dfc030a04d2289ceee5bacb1a"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=a14dd32c64f846254a6fc445f1257ff6721cac9dfc030a04d2289ceee5bacb1a",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen3-vl-30b-a3b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7289104bde08feb53e83f2c066e36a948c5f65fef123a919bf4f17bc5de4f338",
    "parsed_evidence_digest": "8f33761be7659bde7de5904f801c151058a695e4d86aba6dd9ac729409aae184",
    "artifact_set_digest": "a820b82eeb19610ee3205857ee0185af10295b7ab89a9dd01beb8087863fef3f"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-03T21:01:19.503472843+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=a14dd32c64f846254a6fc445f1257ff6721cac9dfc030a04d2289ceee5bacb1a",
      "sha256": "2793f064ca0ea85687c5295dda77edd576bbf4e6f343266ff8ff935de11087f4",
      "size_bytes": 161585,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:19 GMT",
        "etag": "W/\"27731-jxjVRJF0eJ/hyoi7ihhX7w7euJs\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-03T21:01:19.506068774+00:00",
      "sha256": "54e74deccd2fcf39513772578252ac4ca15841082d4dcba812f69ed43083b597",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:20.564116648+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0b18ada070ca4de0991cb6e4a6d75ad29d8156bd95be675467beef4e1cd528f",
      "size_bytes": 22231,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:20.569130637+00:00",
      "sha256": "dc403e398c947f81a7858c7f617f023b4982b734c4113cfd337f9b4ed4848149",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:20.934630381+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "7c372cd83c859a8f02f4ea3ec01fac1c80c3c6d6269b11615b2a8d459bab2471",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:20 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-03T21:01:21.611497575+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "107e6ebf1daf2f17aa853329f5c5c557a1786cb5c9931aac385e4d611bd7155d",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 03 Aug 2026 21:01:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-03T21:01:21.977610649+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-03T21:01:21.979152102+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=a14dd32c64f846254a6fc445f1257ff6721cac9dfc030a04d2289ceee5bacb1a",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-vl-30b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}