Stored Run Record

Run #1293

Completed Aug 5, 2026, 14:00:45 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
7
Verified
0
Incomplete
7
Failed
0
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Privatemode

deepseek-ocr-2

Deepseek Ocr 2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
independent-verifier-stderr text/plain 0 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Open
independent-verifier-stdout text/plain 0 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Open
provider-catalog-response application/json 763 d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d Open
provider-manifest-response binary/octet-stream 5,855 590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "Deepseek Ocr 2",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "deepseek-ocr-2",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "Deepseek Ocr 2",
  "model": "deepseek-ocr-2",
  "status": "partial",
  "ts": "2026-08-05T14:00:41.763936159+00:00",
  "latency_ms": 3126,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.51.0@sha256:851dbb5b5d7f8702c8e2a5d62382e1eef80283a388afdd97cc91f378ff30ac94",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.51.0@sha256:85ac209b0d98f0ee99d347be60e55ca031ef8869d48a790b48e9f77ba2947eae",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.51.0@sha256:2093301b31cd979eeff87f04724762fa35d52433a8b9e2e42b592cf91b32b8c7",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.51.0@sha256:d233520d213af4cd4a750b87255c8a7a1399e978f4c20d809664779bb5c81f7b",
    "quay.io/unstructured-io/unstructured-api:0.1.10@sha256:0df934a22e4e893cf15e7aeaf35c463ecc75937758a83099aefdc13041619a1d"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "e52f0f6855174e8917125d218d04ab574d0affe03b3bb9d2a39cadad810019ee",
    "parsed_evidence_digest": "2c04bbef0b0f7a8eb16d7a34209ae7e9950a109576deadb8b4e379bbac62e88e",
    "artifact_set_digest": "98eb0881fe288a379158b5f00ecb320ffe679721cb6920ee00c6dd2a860ce7a6"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T14:00:42.090425964+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
      "size_bytes": 5855,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:43 GMT",
        "etag": "\"004e949a5a8a4956c43242b822ec1021\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Wed, 05 Aug 2026 09:02:33 GMT"
      }
    },
    {
      "kind": "independent-verifier-stdout",
      "media_type": "text/plain",
      "collected_at": "2026-08-05T14:00:44.839046564+00:00",
      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "size_bytes": 0,
      "encoding": "binary",
      "metadata": {
        "exit_status": "exit status: 0"
      }
    },
    {
      "kind": "independent-verifier-stderr",
      "media_type": "text/plain",
      "collected_at": "2026-08-05T14:00:44.839065289+00:00",
      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "size_bytes": 0,
      "encoding": "binary",
      "metadata": {
        "exit_status": "exit status: 0"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T14:00:44.889208493+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d",
      "size_bytes": 763,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:44 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T14:00:44.889625005+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-deepseek-ocr-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-120b

Gpt Oss 120b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 763 d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d Open
provider-manifest-response binary/octet-stream 5,855 590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "Gpt Oss 120b",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "gpt-oss-120b",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "Gpt Oss 120b",
  "model": "gpt-oss-120b",
  "status": "partial",
  "ts": "2026-08-05T14:00:44.890077294+00:00",
  "latency_ms": 185,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.51.0@sha256:851dbb5b5d7f8702c8e2a5d62382e1eef80283a388afdd97cc91f378ff30ac94",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.51.0@sha256:85ac209b0d98f0ee99d347be60e55ca031ef8869d48a790b48e9f77ba2947eae",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.51.0@sha256:2093301b31cd979eeff87f04724762fa35d52433a8b9e2e42b592cf91b32b8c7",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.51.0@sha256:d233520d213af4cd4a750b87255c8a7a1399e978f4c20d809664779bb5c81f7b",
    "quay.io/unstructured-io/unstructured-api:0.1.10@sha256:0df934a22e4e893cf15e7aeaf35c463ecc75937758a83099aefdc13041619a1d"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "026ec7c501b4e6e8b4cf73f5da2d04198e4ccd5632b942c1553c669d7fba4d87",
    "parsed_evidence_digest": "2c04bbef0b0f7a8eb16d7a34209ae7e9950a109576deadb8b4e379bbac62e88e",
    "artifact_set_digest": "ddfd6a78a305eec4ba285040b822f71f69970256512905d089a3ef78a2be7a59"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T14:00:45.028271034+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
      "size_bytes": 5855,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:45 GMT",
        "etag": "\"004e949a5a8a4956c43242b822ec1021\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Wed, 05 Aug 2026 09:02:33 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T14:00:45.074520117+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d",
      "size_bytes": 763,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:45 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T14:00:45.074879812+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-120b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-latest

Gpt Oss Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 763 d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d Open
provider-manifest-response binary/octet-stream 5,855 590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "Gpt Oss Latest",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "gpt-oss-latest",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "Gpt Oss Latest",
  "model": "gpt-oss-latest",
  "status": "partial",
  "ts": "2026-08-05T14:00:45.075332612+00:00",
  "latency_ms": 188,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.51.0@sha256:851dbb5b5d7f8702c8e2a5d62382e1eef80283a388afdd97cc91f378ff30ac94",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.51.0@sha256:85ac209b0d98f0ee99d347be60e55ca031ef8869d48a790b48e9f77ba2947eae",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.51.0@sha256:2093301b31cd979eeff87f04724762fa35d52433a8b9e2e42b592cf91b32b8c7",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.51.0@sha256:d233520d213af4cd4a750b87255c8a7a1399e978f4c20d809664779bb5c81f7b",
    "quay.io/unstructured-io/unstructured-api:0.1.10@sha256:0df934a22e4e893cf15e7aeaf35c463ecc75937758a83099aefdc13041619a1d"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "968bfa9ba0053eef33ff595bdd0efb1e874039f6b4bc12254bfa8d2254f8ab2c",
    "parsed_evidence_digest": "2c04bbef0b0f7a8eb16d7a34209ae7e9950a109576deadb8b4e379bbac62e88e",
    "artifact_set_digest": "ddfd6a78a305eec4ba285040b822f71f69970256512905d089a3ef78a2be7a59"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T14:00:45.215851527+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
      "size_bytes": 5855,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:46 GMT",
        "etag": "\"004e949a5a8a4956c43242b822ec1021\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Wed, 05 Aug 2026 09:02:33 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T14:00:45.262668867+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d",
      "size_bytes": 763,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:45 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T14:00:45.263198722+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

kimi-k2.6

Kimi K2.6

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 763 d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d Open
provider-manifest-response binary/octet-stream 5,855 590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-kimi-k2-6",
  "label": "Kimi K2.6",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "kimi-k2.6",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-kimi-k2-6",
  "label": "Kimi K2.6",
  "model": "kimi-k2.6",
  "status": "partial",
  "ts": "2026-08-05T14:00:45.263690224+00:00",
  "latency_ms": 178,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.51.0@sha256:851dbb5b5d7f8702c8e2a5d62382e1eef80283a388afdd97cc91f378ff30ac94",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.51.0@sha256:85ac209b0d98f0ee99d347be60e55ca031ef8869d48a790b48e9f77ba2947eae",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.51.0@sha256:2093301b31cd979eeff87f04724762fa35d52433a8b9e2e42b592cf91b32b8c7",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.51.0@sha256:d233520d213af4cd4a750b87255c8a7a1399e978f4c20d809664779bb5c81f7b",
    "quay.io/unstructured-io/unstructured-api:0.1.10@sha256:0df934a22e4e893cf15e7aeaf35c463ecc75937758a83099aefdc13041619a1d"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "6c73cce717bf9f128c0341a676c87bb7ca35e493af74354aaa855736f01cecd4",
    "parsed_evidence_digest": "2c04bbef0b0f7a8eb16d7a34209ae7e9950a109576deadb8b4e379bbac62e88e",
    "artifact_set_digest": "ddfd6a78a305eec4ba285040b822f71f69970256512905d089a3ef78a2be7a59"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T14:00:45.389523838+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
      "size_bytes": 5855,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:46 GMT",
        "etag": "\"004e949a5a8a4956c43242b822ec1021\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Wed, 05 Aug 2026 09:02:33 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T14:00:45.440345556+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d",
      "size_bytes": 763,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:45 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T14:00:45.440840405+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-kimi-k2-6",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

qwen3-embedding-4b

Qwen3 Embedding 4b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 763 d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d Open
provider-manifest-response binary/octet-stream 5,855 590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4b",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "qwen3-embedding-4b",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4b",
  "model": "qwen3-embedding-4b",
  "status": "partial",
  "ts": "2026-08-05T14:00:45.442009339+00:00",
  "latency_ms": 171,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.51.0@sha256:851dbb5b5d7f8702c8e2a5d62382e1eef80283a388afdd97cc91f378ff30ac94",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.51.0@sha256:85ac209b0d98f0ee99d347be60e55ca031ef8869d48a790b48e9f77ba2947eae",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.51.0@sha256:2093301b31cd979eeff87f04724762fa35d52433a8b9e2e42b592cf91b32b8c7",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.51.0@sha256:d233520d213af4cd4a750b87255c8a7a1399e978f4c20d809664779bb5c81f7b",
    "quay.io/unstructured-io/unstructured-api:0.1.10@sha256:0df934a22e4e893cf15e7aeaf35c463ecc75937758a83099aefdc13041619a1d"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "b4d1e1ff987f3c2da406a3a46c73c6e3eb82c5f43922bdc1528f7fac7cb9a2bd",
    "parsed_evidence_digest": "2c04bbef0b0f7a8eb16d7a34209ae7e9950a109576deadb8b4e379bbac62e88e",
    "artifact_set_digest": "ddfd6a78a305eec4ba285040b822f71f69970256512905d089a3ef78a2be7a59"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T14:00:45.565950640+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
      "size_bytes": 5855,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:46 GMT",
        "etag": "\"004e949a5a8a4956c43242b822ec1021\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Wed, 05 Aug 2026 09:02:33 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T14:00:45.612812293+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d",
      "size_bytes": 763,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:45 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T14:00:45.613582779+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-qwen3-embedding-4b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

voxtral-mini-3b

Voxtral Mini 3b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 763 d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d Open
provider-manifest-response binary/octet-stream 5,855 590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3b",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "voxtral-mini-3b",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3b",
  "model": "voxtral-mini-3b",
  "status": "partial",
  "ts": "2026-08-05T14:00:45.614020541+00:00",
  "latency_ms": 188,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.51.0@sha256:851dbb5b5d7f8702c8e2a5d62382e1eef80283a388afdd97cc91f378ff30ac94",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.51.0@sha256:85ac209b0d98f0ee99d347be60e55ca031ef8869d48a790b48e9f77ba2947eae",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.51.0@sha256:2093301b31cd979eeff87f04724762fa35d52433a8b9e2e42b592cf91b32b8c7",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.51.0@sha256:d233520d213af4cd4a750b87255c8a7a1399e978f4c20d809664779bb5c81f7b",
    "quay.io/unstructured-io/unstructured-api:0.1.10@sha256:0df934a22e4e893cf15e7aeaf35c463ecc75937758a83099aefdc13041619a1d"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "856d409031b03d7f9d744679b353cbcb80fa2d25143ae3c649c70f8dca07e0d4",
    "parsed_evidence_digest": "2c04bbef0b0f7a8eb16d7a34209ae7e9950a109576deadb8b4e379bbac62e88e",
    "artifact_set_digest": "ddfd6a78a305eec4ba285040b822f71f69970256512905d089a3ef78a2be7a59"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T14:00:45.755878921+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
      "size_bytes": 5855,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:46 GMT",
        "etag": "\"004e949a5a8a4956c43242b822ec1021\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Wed, 05 Aug 2026 09:02:33 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T14:00:45.801666167+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d",
      "size_bytes": 763,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:45 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T14:00:45.802031383+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-voxtral-mini-3b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

whisper-large-v3

Whisper Large V3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
provider-catalog-response application/json 763 d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d Open
provider-manifest-response binary/octet-stream 5,855 590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8 Open
verification-error text/plain; charset=utf-8 217 b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "type": "privatemode",
  "url": "http://localhost:58080/",
  "host": null,
  "model": "whisper-large-v3",
  "metadata": {
    "proxy_url": "http://localhost:58080"
  }
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "partial",
  "ts": "2026-08-05T14:00:45.802379977+00:00",
  "latency_ms": 158,
  "error": "Evidence incomplete: No attested application channel binding was verified for an inference request; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "images_verified": true,
  "version": "v1.21.0",
  "compose_images": [
    "docker.io/vllm/vllm-openai:v0.24.0@sha256:251eba5cc7c12fed0b75da22a9240e582b1c9e39f6fbc064f86781b963bd814f",
    "docker.io/vllm/vllm-openai:v0.25.0@sha256:fc56161ee42a011aeee78b65d0a81b6683c7d04402fd40503d14d4d6c98f07cb",
    "ghcr.io/edgelesssys/contrast/coordinator:v1.22.0@sha256:b7468ad7b0d2670d1921174362d23038b89056197f16ec3081db8d93c6a5eb9e",
    "ghcr.io/edgelesssys/contrast/initializer:v1.22.0@sha256:a5add238cb9e115d038b68743df4203001ce7128feb952fbfd3a68255de14dd4",
    "ghcr.io/edgelesssys/privatemode/attestation-agent:v1.51.0@sha256:851dbb5b5d7f8702c8e2a5d62382e1eef80283a388afdd97cc91f378ff30ac94",
    "ghcr.io/edgelesssys/privatemode/disk-mounter:v1.51.0@sha256:85ac209b0d98f0ee99d347be60e55ca031ef8869d48a790b48e9f77ba2947eae",
    "ghcr.io/edgelesssys/privatemode/inference-proxy:v1.51.0@sha256:2093301b31cd979eeff87f04724762fa35d52433a8b9e2e42b592cf91b32b8c7",
    "ghcr.io/edgelesssys/privatemode/secret-service:v1.51.0@sha256:d233520d213af4cd4a750b87255c8a7a1399e978f4c20d809664779bb5c81f7b",
    "quay.io/unstructured-io/unstructured-api:0.1.10@sha256:0df934a22e4e893cf15e7aeaf35c463ecc75937758a83099aefdc13041619a1d"
  ],
  "manifest_pinned_measurements": [
    "manifest-sha256:590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
    "SNP/Genoa:fad4113937545dc568d61c26",
    "TDX:a7568bf0b3630aa33402bfec",
    "coordinator:coordinator.privatemode.ai:443",
    "contrast-cli:v1.21.0:52e6156e205ce7ca18554c9b5f8f6f5ca5df7834a88af4390fe60220bc694a25",
    "contrast-active-manifest:verified"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "kimi-k2.6",
    "kimi-latest",
    "openai/gpt-oss-120b",
    "openai/whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b",
    "whisper-large-v3"
  ],
  "source_url": "http://localhost:58080/v1/models",
  "signing_algo": "Privatemode Contrast Coordinator attestation + active manifest + E2EE",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "438aafe83b34a5ced795f901bd8e124ad7ffd566ab04943b43c93afe4534a092",
    "parsed_evidence_digest": "2c04bbef0b0f7a8eb16d7a34209ae7e9950a109576deadb8b4e379bbac62e88e",
    "artifact_set_digest": "ddfd6a78a305eec4ba285040b822f71f69970256512905d089a3ef78a2be7a59"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-08-05T14:00:45.911166094+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "590d8aa40ea83d5b364f4e4c85d7c899f9f8e2b714bec08a67407fb1599c25d8",
      "size_bytes": 5855,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:46 GMT",
        "etag": "\"004e949a5a8a4956c43242b822ec1021\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Wed, 05 Aug 2026 09:02:33 GMT"
      }
    },
    {
      "kind": "provider-catalog-response",
      "media_type": "application/json",
      "collected_at": "2026-08-05T14:00:45.960181851+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "d5b93503ae18e9ede7368a0a006a77a34574fd5f4e9cd9dd5a184681b654c24d",
      "size_bytes": 763,
      "encoding": "binary",
      "metadata": {
        "date": "Wed, 05 Aug 2026 14:00:45 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-05T14:00:45.960793750+00:00",
      "source_url": "http://localhost:58080/v1/models",
      "sha256": "b1d8f37ec89bf6fe1160916c0242e24024ad9b38cbbc1bdf840b08fc685fb2dc",
      "size_bytes": 217,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-whisper-large-v3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}