Stored Run Record

Run #1284

Completed Aug 5, 2026, 05:00:21 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
8
Verified
0
Incomplete
8
Failed
0
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Privatemode

gemma-4-31b

Gemma 4 31b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
independent-verifier-stderr text/plain 0 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Open
independent-verifier-stdout text/plain 0 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Open
provider-catalog-response application/json 859 0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451 Open
provider-manifest-response binary/octet-stream 7,006 401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gemma-4-31b",
  "label": "Gemma 4 31b",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "gemma-4-31b",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gemma-4-31b",
  "label": "Gemma 4 31b",
  "model": "gemma-4-31b",
  "status": "partial",
  "ts": "2026-08-05T05:00:17.500261810+00:00",
  "latency_ms": 3248,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.50.0@sha256:ab547e26ac3ee20725b78e068d7a42b9db1232a192fab32cbfc55bbbabf6e888",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.50.0@sha256:787be019d015020abe286c46a47ec9d0db7469848d5fa43a678c7cabc6fabd8e",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.50.0@sha256:da5e3ffb1b61b11d957e7a86b78d2dc0f87567cf471ed2891f4f6884cacdb5ed",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.50.0@sha256:c8a5f1000457b9d1c6ee2d972e1e6b36592cb2d5dcdc50a0c1de4d15cc7c3734",
    "quay.io/unstructured-io/unstructured-api:0.1.8@sha256:cd18ed5ac5e0284f4d7647774e63863190b0bad4b765a049cfc91c643c55396c"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7d916608e07c25346485a606e54d29bcab1d7602951db9f23df5c3e7f4d42526",
    "parsed_evidence_digest": "62603da5ec0a48eb472f034398e32ecb273f261686b84b893a782e4fbdd3f132",
    "artifact_set_digest": "93ab2a8ff861584fe8bc2ca55ff55986fd65348fe0fce708c8ddbe8658906076"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T05:00:17.840015272+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
      "size_bytes": 7006,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:18 GMT",
        "etag": "\"a2f0f0ea0a62fbf4820bd044ac07effc\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Mon, 27 Jul 2026 10:43:44 GMT"
      }
    },
    {
      "kind": "independent-verifier-stdout",
      "media_type": "text/plain",
      "collected_at": "2026-08-05T05:00:20.689233714+00:00",
      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "size_bytes": 0,
      "encoding": "binary",
      "metadata": {
        "exit_status": "exit status: 0"
      }
    },
    {
      "kind": "independent-verifier-stderr",
      "media_type": "text/plain",
      "collected_at": "2026-08-05T05:00:20.689255846+00:00",
      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "size_bytes": 0,
      "encoding": "binary",
      "metadata": {
        "exit_status": "exit status: 0"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T05:00:20.746398513+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451",
      "size_bytes": 859,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:20 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T05:00:20.747455918+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gemma-4-31b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gemma-latest

Gemma Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 859 0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451 Open
provider-manifest-response binary/octet-stream 7,006 401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gemma-latest",
  "label": "Gemma Latest",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "gemma-latest",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gemma-latest",
  "label": "Gemma Latest",
  "model": "gemma-latest",
  "status": "partial",
  "ts": "2026-08-05T05:00:20.749075607+00:00",
  "latency_ms": 178,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.50.0@sha256:ab547e26ac3ee20725b78e068d7a42b9db1232a192fab32cbfc55bbbabf6e888",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.50.0@sha256:787be019d015020abe286c46a47ec9d0db7469848d5fa43a678c7cabc6fabd8e",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.50.0@sha256:da5e3ffb1b61b11d957e7a86b78d2dc0f87567cf471ed2891f4f6884cacdb5ed",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.50.0@sha256:c8a5f1000457b9d1c6ee2d972e1e6b36592cb2d5dcdc50a0c1de4d15cc7c3734",
    "quay.io/unstructured-io/unstructured-api:0.1.8@sha256:cd18ed5ac5e0284f4d7647774e63863190b0bad4b765a049cfc91c643c55396c"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "785a8a679639698074d979ec2acc11d19357fa652d82acf4e949fe48b3531050",
    "parsed_evidence_digest": "62603da5ec0a48eb472f034398e32ecb273f261686b84b893a782e4fbdd3f132",
    "artifact_set_digest": "baca719c9a3d34b4e8864fecc518753896ad0ec36d71a73b85ff4457ad39465c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T05:00:20.875796199+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
      "size_bytes": 7006,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:21 GMT",
        "etag": "\"a2f0f0ea0a62fbf4820bd044ac07effc\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Mon, 27 Jul 2026 10:43:44 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T05:00:20.926355191+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451",
      "size_bytes": 859,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:20 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T05:00:20.927135385+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gemma-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-120b

Gpt Oss 120b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 859 0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451 Open
provider-manifest-response binary/octet-stream 7,006 401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "Gpt Oss 120b",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "gpt-oss-120b",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "Gpt Oss 120b",
  "model": "gpt-oss-120b",
  "status": "partial",
  "ts": "2026-08-05T05:00:20.927490923+00:00",
  "latency_ms": 174,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.50.0@sha256:ab547e26ac3ee20725b78e068d7a42b9db1232a192fab32cbfc55bbbabf6e888",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.50.0@sha256:787be019d015020abe286c46a47ec9d0db7469848d5fa43a678c7cabc6fabd8e",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.50.0@sha256:da5e3ffb1b61b11d957e7a86b78d2dc0f87567cf471ed2891f4f6884cacdb5ed",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.50.0@sha256:c8a5f1000457b9d1c6ee2d972e1e6b36592cb2d5dcdc50a0c1de4d15cc7c3734",
    "quay.io/unstructured-io/unstructured-api:0.1.8@sha256:cd18ed5ac5e0284f4d7647774e63863190b0bad4b765a049cfc91c643c55396c"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "026ec7c501b4e6e8b4cf73f5da2d04198e4ccd5632b942c1553c669d7fba4d87",
    "parsed_evidence_digest": "62603da5ec0a48eb472f034398e32ecb273f261686b84b893a782e4fbdd3f132",
    "artifact_set_digest": "baca719c9a3d34b4e8864fecc518753896ad0ec36d71a73b85ff4457ad39465c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T05:00:21.051206295+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
      "size_bytes": 7006,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:22 GMT",
        "etag": "\"a2f0f0ea0a62fbf4820bd044ac07effc\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Mon, 27 Jul 2026 10:43:44 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T05:00:21.101384753+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451",
      "size_bytes": 859,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T05:00:21.101995729+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-120b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-latest

Gpt Oss Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 859 0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451 Open
provider-manifest-response binary/octet-stream 7,006 401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "Gpt Oss Latest",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "gpt-oss-latest",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "Gpt Oss Latest",
  "model": "gpt-oss-latest",
  "status": "partial",
  "ts": "2026-08-05T05:00:21.102510646+00:00",
  "latency_ms": 176,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.50.0@sha256:ab547e26ac3ee20725b78e068d7a42b9db1232a192fab32cbfc55bbbabf6e888",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.50.0@sha256:787be019d015020abe286c46a47ec9d0db7469848d5fa43a678c7cabc6fabd8e",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.50.0@sha256:da5e3ffb1b61b11d957e7a86b78d2dc0f87567cf471ed2891f4f6884cacdb5ed",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.50.0@sha256:c8a5f1000457b9d1c6ee2d972e1e6b36592cb2d5dcdc50a0c1de4d15cc7c3734",
    "quay.io/unstructured-io/unstructured-api:0.1.8@sha256:cd18ed5ac5e0284f4d7647774e63863190b0bad4b765a049cfc91c643c55396c"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "968bfa9ba0053eef33ff595bdd0efb1e874039f6b4bc12254bfa8d2254f8ab2c",
    "parsed_evidence_digest": "62603da5ec0a48eb472f034398e32ecb273f261686b84b893a782e4fbdd3f132",
    "artifact_set_digest": "baca719c9a3d34b4e8864fecc518753896ad0ec36d71a73b85ff4457ad39465c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T05:00:21.227716164+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
      "size_bytes": 7006,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:22 GMT",
        "etag": "\"a2f0f0ea0a62fbf4820bd044ac07effc\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Mon, 27 Jul 2026 10:43:44 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T05:00:21.278346460+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451",
      "size_bytes": 859,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T05:00:21.278727125+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

kimi-k2.6

Kimi K2.6

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 859 0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451 Open
provider-manifest-response binary/octet-stream 7,006 401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-kimi-k2-6",
  "label": "Kimi K2.6",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "kimi-k2.6",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-kimi-k2-6",
  "label": "Kimi K2.6",
  "model": "kimi-k2.6",
  "status": "partial",
  "ts": "2026-08-05T05:00:21.279111125+00:00",
  "latency_ms": 180,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.50.0@sha256:ab547e26ac3ee20725b78e068d7a42b9db1232a192fab32cbfc55bbbabf6e888",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.50.0@sha256:787be019d015020abe286c46a47ec9d0db7469848d5fa43a678c7cabc6fabd8e",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.50.0@sha256:da5e3ffb1b61b11d957e7a86b78d2dc0f87567cf471ed2891f4f6884cacdb5ed",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.50.0@sha256:c8a5f1000457b9d1c6ee2d972e1e6b36592cb2d5dcdc50a0c1de4d15cc7c3734",
    "quay.io/unstructured-io/unstructured-api:0.1.8@sha256:cd18ed5ac5e0284f4d7647774e63863190b0bad4b765a049cfc91c643c55396c"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "6c73cce717bf9f128c0341a676c87bb7ca35e493af74354aaa855736f01cecd4",
    "parsed_evidence_digest": "62603da5ec0a48eb472f034398e32ecb273f261686b84b893a782e4fbdd3f132",
    "artifact_set_digest": "baca719c9a3d34b4e8864fecc518753896ad0ec36d71a73b85ff4457ad39465c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T05:00:21.409310025+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
      "size_bytes": 7006,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:22 GMT",
        "etag": "\"a2f0f0ea0a62fbf4820bd044ac07effc\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Mon, 27 Jul 2026 10:43:44 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T05:00:21.459029031+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451",
      "size_bytes": 859,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T05:00:21.459440453+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-kimi-k2-6",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

qwen3-embedding-4b

Qwen3 Embedding 4b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 859 0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451 Open
provider-manifest-response binary/octet-stream 7,006 401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4b",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "qwen3-embedding-4b",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4b",
  "model": "qwen3-embedding-4b",
  "status": "partial",
  "ts": "2026-08-05T05:00:21.459815487+00:00",
  "latency_ms": 163,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.50.0@sha256:ab547e26ac3ee20725b78e068d7a42b9db1232a192fab32cbfc55bbbabf6e888",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.50.0@sha256:787be019d015020abe286c46a47ec9d0db7469848d5fa43a678c7cabc6fabd8e",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.50.0@sha256:da5e3ffb1b61b11d957e7a86b78d2dc0f87567cf471ed2891f4f6884cacdb5ed",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.50.0@sha256:c8a5f1000457b9d1c6ee2d972e1e6b36592cb2d5dcdc50a0c1de4d15cc7c3734",
    "quay.io/unstructured-io/unstructured-api:0.1.8@sha256:cd18ed5ac5e0284f4d7647774e63863190b0bad4b765a049cfc91c643c55396c"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "b4d1e1ff987f3c2da406a3a46c73c6e3eb82c5f43922bdc1528f7fac7cb9a2bd",
    "parsed_evidence_digest": "62603da5ec0a48eb472f034398e32ecb273f261686b84b893a782e4fbdd3f132",
    "artifact_set_digest": "baca719c9a3d34b4e8864fecc518753896ad0ec36d71a73b85ff4457ad39465c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T05:00:21.572446126+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
      "size_bytes": 7006,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:22 GMT",
        "etag": "\"a2f0f0ea0a62fbf4820bd044ac07effc\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Mon, 27 Jul 2026 10:43:44 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T05:00:21.621910003+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451",
      "size_bytes": 859,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T05:00:21.622692792+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-qwen3-embedding-4b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

voxtral-mini-3b

Voxtral Mini 3b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 859 0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451 Open
provider-manifest-response binary/octet-stream 7,006 401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3b",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "voxtral-mini-3b",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3b",
  "model": "voxtral-mini-3b",
  "status": "partial",
  "ts": "2026-08-05T05:00:21.623075791+00:00",
  "latency_ms": 177,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.50.0@sha256:ab547e26ac3ee20725b78e068d7a42b9db1232a192fab32cbfc55bbbabf6e888",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.50.0@sha256:787be019d015020abe286c46a47ec9d0db7469848d5fa43a678c7cabc6fabd8e",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.50.0@sha256:da5e3ffb1b61b11d957e7a86b78d2dc0f87567cf471ed2891f4f6884cacdb5ed",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.50.0@sha256:c8a5f1000457b9d1c6ee2d972e1e6b36592cb2d5dcdc50a0c1de4d15cc7c3734",
    "quay.io/unstructured-io/unstructured-api:0.1.8@sha256:cd18ed5ac5e0284f4d7647774e63863190b0bad4b765a049cfc91c643c55396c"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "856d409031b03d7f9d744679b353cbcb80fa2d25143ae3c649c70f8dca07e0d4",
    "parsed_evidence_digest": "62603da5ec0a48eb472f034398e32ecb273f261686b84b893a782e4fbdd3f132",
    "artifact_set_digest": "baca719c9a3d34b4e8864fecc518753896ad0ec36d71a73b85ff4457ad39465c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T05:00:21.749775434+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
      "size_bytes": 7006,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:22 GMT",
        "etag": "\"a2f0f0ea0a62fbf4820bd044ac07effc\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Mon, 27 Jul 2026 10:43:44 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T05:00:21.799329991+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451",
      "size_bytes": 859,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T05:00:21.800387135+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-voxtral-mini-3b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

whisper-large-v3

Whisper Large V3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 859 0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451 Open
provider-manifest-response binary/octet-stream 7,006 401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "whisper-large-v3",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "partial",
  "ts": "2026-08-05T05:00:21.800915396+00:00",
  "latency_ms": 177,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.50.0@sha256:ab547e26ac3ee20725b78e068d7a42b9db1232a192fab32cbfc55bbbabf6e888",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.50.0@sha256:787be019d015020abe286c46a47ec9d0db7469848d5fa43a678c7cabc6fabd8e",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.50.0@sha256:da5e3ffb1b61b11d957e7a86b78d2dc0f87567cf471ed2891f4f6884cacdb5ed",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.50.0@sha256:c8a5f1000457b9d1c6ee2d972e1e6b36592cb2d5dcdc50a0c1de4d15cc7c3734",
    "quay.io/unstructured-io/unstructured-api:0.1.8@sha256:cd18ed5ac5e0284f4d7647774e63863190b0bad4b765a049cfc91c643c55396c"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "gemma-4-31b",
    "gemma-latest",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "438aafe83b34a5ced795f901bd8e124ad7ffd566ab04943b43c93afe4534a092",
    "parsed_evidence_digest": "62603da5ec0a48eb472f034398e32ecb273f261686b84b893a782e4fbdd3f132",
    "artifact_set_digest": "baca719c9a3d34b4e8864fecc518753896ad0ec36d71a73b85ff4457ad39465c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T05:00:21.927330384+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "401ba08e8528baf2762cb7457a1a59f1553521277f41b64b2a0d1ec57bdaa7a4",
      "size_bytes": 7006,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:22 GMT",
        "etag": "\"a2f0f0ea0a62fbf4820bd044ac07effc\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Mon, 27 Jul 2026 10:43:44 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T05:00:21.977293668+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "0a57e8abc09250a472829c2f379208d33c1b0df5fe7b7d00f59cfa10b4397451",
      "size_bytes": 859,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 05:00:21 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T05:00:21.978029860+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-whisper-large-v3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}