Stored Run Record

Run #1639

Completed Aug 20, 2026, 00:01:40 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
13
Verified
0
Incomplete
3
Failed
10
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Venice.ai

e2ee-deepseek-v4-flash

E2ee Deepseek V4 Flash (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 24,206 b67e386640f1a73f60be8ba08a6884f851528bf24ab12786de4652c14db9d50d Open
provider-attestation-response application/json; charset=utf-8 209,121 96e8a61ebb773226ab00a881394aa1c363d3e18c685539ba1c3b0dda646c486d Open
tdx-quote application/vnd.intel.tdx.quote 5,010 f73a017c5bb332a2fa045d253b81c18ff6acf39c3c261b38fbad952c268b365f Open
verification-error text/plain; charset=utf-8 154 cf653d4957c7a38f0aca9c13c1528e89292c446580d70b1b0cd268fadd93178e Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-deepseek-v4-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-deepseek-v4-flash",
  "label": "E2ee Deepseek V4 Flash (TEE)",
  "model": "e2ee-deepseek-v4-flash",
  "status": "failed",
  "ts": "2026-08-20T00:01:09.361287787+00:00",
  "latency_ms": 3678,
  "error": "Policy check failed: TDX QVL status is not UpToDate: status=OutOfDate, advisories=[\"INTEL-SA-01192\", \"INTEL-SA-01245\", \"INTEL-SA-01312\", \"INTEL-SA-01313\"]",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "6bacc84fe763af7014ff7c9a51a99d349597d7e6eabd0c9a763d01c2d62932c8",
    "parsed_evidence_digest": "4925b47dd018fddc0788c9a3085786a2b5f11da13ec29a7a8c8749c4150ce168",
    "artifact_set_digest": "a48af57c4e65d2a9c02773588a52220fcac90ff6ab9043b6716314b2e9bc63d0"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:01:12.298288129+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-deepseek-v4-flash&nonce=7d6c94f8b064231628ef6e7f464393d9197b8aedd847cbcef60af94afc80696f",
      "sha256": "96e8a61ebb773226ab00a881394aa1c363d3e18c685539ba1c3b0dda646c486d",
      "size_bytes": 209121,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:12 GMT",
        "etag": "W/\"330e1-mNMNMfQohQtkGwccYvcmHPpHBYI\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:01:12.305786562+00:00",
      "sha256": "f73a017c5bb332a2fa045d253b81c18ff6acf39c3c261b38fbad952c268b365f",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:13.037641587+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "b67e386640f1a73f60be8ba08a6884f851528bf24ab12786de4652c14db9d50d",
      "size_bytes": 24206,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-deepseek-v4-flash"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:01:13.039767607+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "cf653d4957c7a38f0aca9c13c1528e89292c446580d70b1b0cd268fadd93178e",
      "size_bytes": 154,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-deepseek-v4-flash",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-26b-a4b-uncensored-p

E2ee Gemma 4 26b A4b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 23,925 d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2 Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 3,895 be6e3c2d4d5e254f1210136bb3b66e7b295a342caaf3d7555986cd270ee14f8a Open
nvidia-provider-evidence application/json 12,113 706a33301fc0703748d78b143764615593388b5943aa7c52869448ea61ca3d37 Open
provider-attestation-response application/json; charset=utf-8 73,099 5eeb3f84fc6847529700efa09301285e2179f7369f680d7cb3f0561847907bb1 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 e634a9e9248be05c4404df606a0175224aaeed85cdfd39aa2342c09a7f8748a7 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
  "label": "E2ee Gemma 4 26b A4b Uncensored P (TEE)",
  "model": "e2ee-gemma-4-26b-a4b-uncensored-p",
  "status": "failed",
  "ts": "2026-08-20T00:01:13.039997729+00:00",
  "latency_ms": 8043,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0173fa460888599ae66336ecd46b3c91d78f3061df474a95abed3dfd753793091a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000009398e7b8c4135c242dd58c16ca1be637e5497b253dfce540de4106f1bc357be1",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "df67e467e60edc1737bcf8e682d48131bfb427f523226aa7f197a7608e9b3784783fa759ef5b28191fa12f9ddb36b858",
    "rtmr3": "a8efdf31fb73736e2560aca938a6c67a4d564531ee5b87c7ce78b2f3111a40ee45d2720ff03ef415146cd20ec91e64bd",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "9398e7b8c4135c242dd58c16ca1be637e5497b253dfce540de4106f1bc357be1"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=9398e7b8c4135c242dd58c16ca1be637e5497b253dfce540de4106f1bc357be1",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/gemma-4-26b-a4b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "41c172ed2008d2092130db0be7a7613acf8cb488824bc71f5430b532a8d5d263",
    "parsed_evidence_digest": "8fc13874c633001ccda1c2041146c290cf78090213b839292ab95752017a4c3b",
    "artifact_set_digest": "f264fc2b64b40f4e6b7ae91b742066a1f23e0991f6f7c05f487ed1eb55e8b5e4"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:01:19.051672004+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=9398e7b8c4135c242dd58c16ca1be637e5497b253dfce540de4106f1bc357be1",
      "sha256": "5eeb3f84fc6847529700efa09301285e2179f7369f680d7cb3f0561847907bb1",
      "size_bytes": 73099,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:19 GMT",
        "etag": "W/\"11d8b-zMGF6EoaoZCcng0lcQY/UF9K6VM\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:01:19.054102325+00:00",
      "sha256": "e634a9e9248be05c4404df606a0175224aaeed85cdfd39aa2342c09a7f8748a7",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:19.876062263+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2",
      "size_bytes": 23925,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:19.878633849+00:00",
      "sha256": "706a33301fc0703748d78b143764615593388b5943aa7c52869448ea61ca3d37",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:20.387484270+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "be6e3c2d4d5e254f1210136bb3b66e7b295a342caaf3d7555986cd270ee14f8a",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:20 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:20.729819840+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:20 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:01:21.082174904+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:01:21.083125809+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-26b-a4b-uncensored-p&nonce=9398e7b8c4135c242dd58c16ca1be637e5497b253dfce540de4106f1bc357be1",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-gemma-4-26b-a4b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-2-p

E2ee Glm 5 2 P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 23,925 d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2 Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 27,372 3f4e3962acee02489bc2640869eb0c798f4655fd72f17ba3d870961d36951e62 Open
nvidia-provider-evidence application/json 98,158 2f90769c4b32eb4958f0f9a76f3dd729e669bf2f9bf543c1ad5ee4396a7a3283 Open
provider-attestation-response application/json; charset=utf-8 159,221 40f8d86d492e96f6441ab06e144cfb8bc0e69b390fa864f15d9543654e23d95d Open
tdx-quote application/vnd.intel.tdx.quote 5,006 a6078f065622ea96cd657f6c00769574b419586e10e956e58470eef305f9bf96 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-2-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-glm-5-2-p",
  "label": "E2ee Glm 5 2 P (TEE)",
  "model": "e2ee-glm-5-2-p",
  "status": "failed",
  "ts": "2026-08-20T00:01:21.083506643+00:00",
  "latency_ms": 6755,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0173fa460888599ae66336ecd46b3c91d78f3061df474a95abed3dfd753793091a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000432847605e418fe8f36b46537a7b174ae993c0e281591d534ef60d3ca039323f",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "df67e467e60edc1737bcf8e682d48131bfb427f523226aa7f197a7608e9b3784783fa759ef5b28191fa12f9ddb36b858",
    "rtmr3": "a8efdf31fb73736e2560aca938a6c67a4d564531ee5b87c7ce78b2f3111a40ee45d2720ff03ef415146cd20ec91e64bd",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "432847605e418fe8f36b46537a7b174ae993c0e281591d534ef60d3ca039323f"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=432847605e418fe8f36b46537a7b174ae993c0e281591d534ef60d3ca039323f",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "z-ai/glm-5.2"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "bfe8723519f8385580376b47989fb0ec8ca25514e2991643fc96586ab0101adc",
    "parsed_evidence_digest": "8f9fbdc729df3e26ea153a14ab736386fd8ea00fd8e5d986db5d91da8e45426c",
    "artifact_set_digest": "11d4004036043f7eb670653eaf9e16896a2958872612170fc9da05fc95f15769"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:01:25.839790640+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=432847605e418fe8f36b46537a7b174ae993c0e281591d534ef60d3ca039323f",
      "sha256": "40f8d86d492e96f6441ab06e144cfb8bc0e69b390fa864f15d9543654e23d95d",
      "size_bytes": 159221,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:25 GMT",
        "etag": "W/\"26df5-KSB1tve6Z0x+sw6fNR4DWEE0QpI\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:01:25.842176058+00:00",
      "sha256": "a6078f065622ea96cd657f6c00769574b419586e10e956e58470eef305f9bf96",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:26.777374616+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2",
      "size_bytes": 23925,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:26.782588832+00:00",
      "sha256": "2f90769c4b32eb4958f0f9a76f3dd729e669bf2f9bf543c1ad5ee4396a7a3283",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-2-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:27.136137958+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "3f4e3962acee02489bc2640869eb0c798f4655fd72f17ba3d870961d36951e62",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:27 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:27.496124255+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:27 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:01:27.837937233+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:01:27.838701818+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-2-p&nonce=432847605e418fe8f36b46537a7b174ae993c0e281591d534ef60d3ca039323f",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-glm-5-2-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-27b

E2ee Qwen3 6 27b (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 24,202 c73f7de277905db24748ea04c3859ef10d02e22345c95a68df3238a4496eaa6a Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 27,372 adc4ca13629d39ec8eec04e616a73a43fbab9b22e7bede8b80397899e80fbfc9 Open
nvidia-provider-evidence application/json 98,158 424a7a3c80fa04f86b6119f71836dc38cc91ef506f236431f3245503ab2dbbc9 Open
provider-attestation-response application/json; charset=utf-8 218,558 41b277155b79da5f47a0a9b1c972122fa359760b47521b8052558e2d232d963c Open
tdx-quote application/vnd.intel.tdx.quote 5,006 6c8f6573481cc3f0e76381e8bfd0ed4d14e2de3ba779c6f105723340d83deb14 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-27b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-27b",
  "label": "E2ee Qwen3 6 27b (TEE)",
  "model": "e2ee-qwen3-6-27b",
  "status": "partial",
  "ts": "2026-08-20T00:01:27.839422180+00:00",
  "latency_ms": 7867,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "019385918de0a73b861ae833d99fb5be6f7e1c8a50487a835df4f277497c206825000000000000000000000000000000",
    "report_data": "6eb6ce4fa9f7f704769afff165955105c1ae7b1d000000000000000000000000ec7b429e66d718be139d3996f9c25f3a6ed0f4f4ec288c7c6fd7663874929379",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "8f993f8b7a99d5e4ea49a3413a0d6311efa6a61be3ec6cae1d13b353dd1835544084cba4b4e767c17f5c513da1857de8",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "ec7b429e66d718be139d3996f9c25f3a6ed0f4f4ec288c7c6fd7663874929379"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.347",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884be",
    "nearaidev/compose-manager-launcher@sha256:91fdff3cfa3543d72656b2368c7d8a0a83d95a0f1087378c897aa1537acdba56"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=ec7b429e66d718be139d3996f9c25f3a6ed0f4f4ec288c7c6fd7663874929379",
  "signing_public_key": "04cf942c4bcb0f89ffd33e837d850ab3eb4ff66cee6b285db3bbdff6e815f81e7df9a4bfaf863207b5d4ccc99ea4c3eca3172a82b2a7717635522bd22fc0cf6219",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-27B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7e0ccb549a79a186da738c36fb21f4ac9a803041723f5569bbd7945a4ca7e530",
    "parsed_evidence_digest": "2a9628424a3b1f132c666339114aa173388c722495c0849d4a49e0ea87282ef8",
    "artifact_set_digest": "82fcadbae189e5072413b97738f7cce679e5a679881c60eaa8461baccc1c5793"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:01:31.823612070+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=ec7b429e66d718be139d3996f9c25f3a6ed0f4f4ec288c7c6fd7663874929379",
      "sha256": "41b277155b79da5f47a0a9b1c972122fa359760b47521b8052558e2d232d963c",
      "size_bytes": 218558,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:31 GMT",
        "etag": "W/\"355be-1c1ZWyV+AP3ayojPiITUTSrWafo\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:01:31.828722641+00:00",
      "sha256": "6c8f6573481cc3f0e76381e8bfd0ed4d14e2de3ba779c6f105723340d83deb14",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:32.573156175+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "c73f7de277905db24748ea04c3859ef10d02e22345c95a68df3238a4496eaa6a",
      "size_bytes": 24202,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:32.578571238+00:00",
      "sha256": "424a7a3c80fa04f86b6119f71836dc38cc91ef506f236431f3245503ab2dbbc9",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-27b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:33.287388104+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "adc4ca13629d39ec8eec04e616a73a43fbab9b22e7bede8b80397899e80fbfc9",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:33 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:33.618534984+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:33 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:01:35.705324435+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:01:35.706697001+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-27b&nonce=ec7b429e66d718be139d3996f9c25f3a6ed0f4f4ec288c7c6fd7663874929379",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-27b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b-uncensored-p

E2ee Qwen3 6 35b A3b Uncensored P (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 23,925 d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2 Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 3,895 0a9085b02c5fa430bbff2cab953e20b69136a0fa75ae69217870cbd2eae34e90 Open
nvidia-provider-evidence application/json 12,113 cd0d3d24ec9e0ef40f5627fee850514c1c4d4e407c27399340720694a5e6a54b Open
provider-attestation-response application/json; charset=utf-8 73,099 e1efe3f60d651a878dfe6b6745ce1c173080c1f0dde40d173debb61f276a6e65 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 f89af37f3d0a183f0dc1a9b2bff5a1a47808f1ab4b81b8de2a0a42facc9f19ab Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
  "label": "E2ee Qwen3 6 35b A3b Uncensored P (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b-uncensored-p",
  "status": "failed",
  "ts": "2026-08-20T00:01:35.707108343+00:00",
  "latency_ms": 4413,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0173fa460888599ae66336ecd46b3c91d78f3061df474a95abed3dfd753793091a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000638bd4faa57a9b3631d9dc809c3c998031fdf804c53c0fda07feddc89871086c",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "df67e467e60edc1737bcf8e682d48131bfb427f523226aa7f197a7608e9b3784783fa759ef5b28191fa12f9ddb36b858",
    "rtmr3": "a8efdf31fb73736e2560aca938a6c67a4d564531ee5b87c7ce78b2f3111a40ee45d2720ff03ef415146cd20ec91e64bd",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "638bd4faa57a9b3631d9dc809c3c998031fdf804c53c0fda07feddc89871086c"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=638bd4faa57a9b3631d9dc809c3c998031fdf804c53c0fda07feddc89871086c",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "phala/qwen3.6-35b-a3b-uncensored"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "c0ec14186368acfb7d45268916c145228ab1d980a998626b28563bc30d7e7d00",
    "parsed_evidence_digest": "c6c0d9d2e8e33fe0f8b8e38e1d21e78647bcdaec4d080905e1aa2cbd2568c85f",
    "artifact_set_digest": "04bd6d0a5e8c07df42c3966cbc7b45d5c3405cacd0af4343896866e8471b9ff4"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:01:38.540632026+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=638bd4faa57a9b3631d9dc809c3c998031fdf804c53c0fda07feddc89871086c",
      "sha256": "e1efe3f60d651a878dfe6b6745ce1c173080c1f0dde40d173debb61f276a6e65",
      "size_bytes": 73099,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:38 GMT",
        "etag": "W/\"11d8b-DgebfcczzEJEjb8Ch/49jn3uNWU\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:01:38.542625126+00:00",
      "sha256": "f89af37f3d0a183f0dc1a9b2bff5a1a47808f1ab4b81b8de2a0a42facc9f19ab",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:39.300247703+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2",
      "size_bytes": 23925,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:39.302888710+00:00",
      "sha256": "cd0d3d24ec9e0ef40f5627fee850514c1c4d4e407c27399340720694a5e6a54b",
      "size_bytes": 12113,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:39.490310430+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "0a9085b02c5fa430bbff2cab953e20b69136a0fa75ae69217870cbd2eae34e90",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:39 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:39.796658928+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:39 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:01:40.119121589+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:01:40.119860596+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b-uncensored-p&nonce=638bd4faa57a9b3631d9dc809c3c998031fdf804c53c0fda07feddc89871086c",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-e2ee-qwen3-6-35b-a3b-uncensored-p",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-3-27b-p

Gemma 3 27B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 23,925 d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2 Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 27,372 868399bb61b36623ebb54f12ea64b3181d95a9283947a1b2b2390b6354187b3f Open
nvidia-provider-evidence application/json 98,158 0bbf1d07299644b8e6f205ba96dad050b7a43be6b939f13a33433083156350da Open
provider-attestation-response application/json; charset=utf-8 159,233 2dd431126df8ed9257f89eb23adc687d04fe3d0c0792ea23e39c921068acf89e Open
tdx-quote application/vnd.intel.tdx.quote 5,006 276e343fc89e4bc125e4a3645e0b109559d5ce4a5aaf0b19d0ae5d715759afb3 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-3-27b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma-3-27b",
  "label": "Gemma 3 27B (TEE)",
  "model": "e2ee-gemma-3-27b-p",
  "status": "failed",
  "ts": "2026-08-20T00:01:02.479233498+00:00",
  "latency_ms": 6882,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0173fa460888599ae66336ecd46b3c91d78f3061df474a95abed3dfd753793091a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000eb46086c730148ae0d3df8f88b87a0a9056105d36401856771129afa438f9296",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "df67e467e60edc1737bcf8e682d48131bfb427f523226aa7f197a7608e9b3784783fa759ef5b28191fa12f9ddb36b858",
    "rtmr3": "a8efdf31fb73736e2560aca938a6c67a4d564531ee5b87c7ce78b2f3111a40ee45d2720ff03ef415146cd20ec91e64bd",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "eb46086c730148ae0d3df8f88b87a0a9056105d36401856771129afa438f9296"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=eb46086c730148ae0d3df8f88b87a0a9056105d36401856771129afa438f9296",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "google/gemma-3-27b-it"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "fa4442e03eb3a89481106f42ca4b584c3c805376ae8bc948779c9f3a37429dd8",
    "parsed_evidence_digest": "5031377f8535f0ac6979914a4a9a5f0b938d8a6cf64ac1bb48a84f8bb67fb663",
    "artifact_set_digest": "e8d8d2092790e8f4f2055bb266a5c5b0304003050e1560657b905115ff059749"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:01:06.880779779+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=eb46086c730148ae0d3df8f88b87a0a9056105d36401856771129afa438f9296",
      "sha256": "2dd431126df8ed9257f89eb23adc687d04fe3d0c0792ea23e39c921068acf89e",
      "size_bytes": 159233,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:06 GMT",
        "etag": "W/\"26e01-46arhuhDdCzX1epb6Qv4dXWcUsI\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:01:06.883417089+00:00",
      "sha256": "276e343fc89e4bc125e4a3645e0b109559d5ce4a5aaf0b19d0ae5d715759afb3",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:07.601286044+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2",
      "size_bytes": 23925,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:07.606100570+00:00",
      "sha256": "0bbf1d07299644b8e6f205ba96dad050b7a43be6b939f13a33433083156350da",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-3-27b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:08.322580469+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "868399bb61b36623ebb54f12ea64b3181d95a9283947a1b2b2390b6354187b3f",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:08 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:09.014068973+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:08 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:01:09.359733019+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:01:09.360809760+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-3-27b-p&nonce=eb46086c730148ae0d3df8f88b87a0a9056105d36401856771129afa438f9296",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma-3-27b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gemma-4-31b

Gemma 4 31B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 24,202 f6caea38fa0c82e86145750799bd7d6bf5e02724c8ec112d389d81e96a6e0696 Open
provider-attestation-response application/json; charset=utf-8 209,098 abfcd992e6c47fd4e845af09265eab2ec8f80720708722fe7bf5987bc4cdcad7 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 162d7328ec093f2393b6b04c539671b3884853088be23c79f796316db2eed3ce Open
verification-error text/plain; charset=utf-8 154 cf653d4957c7a38f0aca9c13c1528e89292c446580d70b1b0cd268fadd93178e Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gemma-4-31b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gemma4-31b",
  "label": "Gemma 4 31B (TEE)",
  "model": "e2ee-gemma-4-31b",
  "status": "failed",
  "ts": "2026-08-20T00:00:30.273522231+00:00",
  "latency_ms": 3027,
  "error": "Policy check failed: TDX QVL status is not UpToDate: status=OutOfDate, advisories=[\"INTEL-SA-01192\", \"INTEL-SA-01245\", \"INTEL-SA-01312\", \"INTEL-SA-01313\"]",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified"
  },
  "gates": {
    "hardware": {
      "state": "failed",
      "detail": "Required hardware evidence was not verified."
    },
    "tcb": {
      "state": "failed",
      "detail": "TCB policy did not produce verified evidence."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d4203286afffcc9a39b1f45d1c7d5c74fb13348e957819581946cb00b2e48a7a",
    "parsed_evidence_digest": "4925b47dd018fddc0788c9a3085786a2b5f11da13ec29a7a8c8749c4150ce168",
    "artifact_set_digest": "90b8b1c3a90682895829891f5dbffbfdc2191d33a70b7db293b76b18bfc0a36e"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:00:32.562070+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gemma-4-31b&nonce=9f540d166980310853cd782129ed0070725e9ec84ef06f7cd5a859e74baa61fe",
      "sha256": "abfcd992e6c47fd4e845af09265eab2ec8f80720708722fe7bf5987bc4cdcad7",
      "size_bytes": 209098,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:32 GMT",
        "etag": "W/\"330ca-Fj0g/RozvtlQycWBmrFhqP/wYw8\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:00:32.566878385+00:00",
      "sha256": "162d7328ec093f2393b6b04c539671b3884853088be23c79f796316db2eed3ce",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:33.298834670+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "f6caea38fa0c82e86145750799bd7d6bf5e02724c8ec112d389d81e96a6e0696",
      "size_bytes": 24202,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gemma-4-31b"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:00:33.301086476+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "cf653d4957c7a38f0aca9c13c1528e89292c446580d70b1b0cd268fadd93178e",
      "size_bytes": 154,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gemma4-31b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-glm-5-1

GLM 5.1 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 24,206 bcf24c16fe2a7781a5e08418f1ae109609bf6843fea72ae9bba8ef79b050eaae Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 27,372 a58355b3a4cae42151a1c1bcecdb91b7bb699f36a792dab8e4d6835df4ba214b Open
nvidia-provider-evidence application/json 98,158 28f554274707d17f0bcbd089bd69ca089ee8bd464939abc8fd3e377828ae13d0 Open
provider-attestation-response application/json; charset=utf-8 208,922 03e76a7874d85b836cd3ae6e1c56588d9d28c4d8668b6d67ea3df9b32cb3fe3e Open
tdx-quote application/vnd.intel.tdx.quote 5,010 cc421944c862b17bbbe462de5c7f6694aa9380138b745cce8c05f1c704d671b5 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-glm-5-1",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-glm-5-1",
  "label": "GLM 5.1 (TEE)",
  "model": "e2ee-glm-5-1",
  "status": "partial",
  "ts": "2026-08-20T00:00:23.850786990+00:00",
  "latency_ms": 6422,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "012c650eae81601afade86d1aa5ad898473b992081998026bb42ee1524ce99ee38000000000000000000000000000000",
    "report_data": "bb4d2e7ffe98eefcd9690e2139be41e92b95e3330000000000000000000000002c4c42f98730b53f0583d94f7eec370dff913fd4b0af66ea42a48eb1054d9ae7",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "6464dcacd5c7ca6f0de0e081327df1fa842f29ec8038176554c816809977796603c874530219ddeeaf068c20209f5b1d",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "2c4c42f98730b53f0583d94f7eec370dff913fd4b0af66ea42a48eb1054d9ae7"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.340",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "datadog/agent@sha256:5556fb80b952832719a76b016f905616c76ee0989a239c4680c6220148e865d6",
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:b487f39160e9a53c3d98943a9c709d28e12babef75e0bb5a6cd5692abc8b2db6",
    "nearaidev/compose-manager-launcher@sha256:78afb82330137c2fd90a9c8c6e452f8f178c15d863f87c079a11c13e92216e00"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=2c4c42f98730b53f0583d94f7eec370dff913fd4b0af66ea42a48eb1054d9ae7",
  "signing_public_key": "042a1c47aad08a4f47dcb67134d77b83d8a1d5c895e37e959189249e819c3939289d8c59acb07d262db3ca946d52c51ae079fde6708cb0af7e25a57d35c8e0ac30",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "zai-org/GLM-5.1-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "03fdc558c673ff52a8bca5e89d896269b6ea362754c83b7d85252611a05588d8",
    "parsed_evidence_digest": "7a5f8b3441c47d260f884df4a22858f54a635630a37654ebfdf5c074d9958676",
    "artifact_set_digest": "b726c95de47727e1d260c7338c6c7ef2cf6a13f945cab3707e20278cbf233098"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:00:26.004551042+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=2c4c42f98730b53f0583d94f7eec370dff913fd4b0af66ea42a48eb1054d9ae7",
      "sha256": "03e76a7874d85b836cd3ae6e1c56588d9d28c4d8668b6d67ea3df9b32cb3fe3e",
      "size_bytes": 208922,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:25 GMT",
        "etag": "W/\"3301a-yW/LTLO+hwrDR2TsZcVdZMTiUSg\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:00:26.008712402+00:00",
      "sha256": "cc421944c862b17bbbe462de5c7f6694aa9380138b745cce8c05f1c704d671b5",
      "size_bytes": 5010,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:26.759146648+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "bcf24c16fe2a7781a5e08418f1ae109609bf6843fea72ae9bba8ef79b050eaae",
      "size_bytes": 24206,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:26.763648798+00:00",
      "sha256": "28f554274707d17f0bcbd089bd69ca089ee8bd464939abc8fd3e377828ae13d0",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-glm-5-1"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:27.118485630+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "a58355b3a4cae42151a1c1bcecdb91b7bb699f36a792dab8e4d6835df4ba214b",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:27 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:27.461539307+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:27 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:00:30.271429583+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:00:30.273108564+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-glm-5-1&nonce=2c4c42f98730b53f0583d94f7eec370dff913fd4b0af66ea42a48eb1054d9ae7",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-glm-5-1",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-120b-p

GPT-OSS 120B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 23,925 d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2 Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 27,372 4ce419fdfd49be34f05291a8d20b4bd96ea819557c760a77bff59a58aaae68b8 Open
nvidia-provider-evidence application/json 98,158 5e41c487f8505cbd3d073b555db918ca99b66bd4475c93feb92fff417bb2937f Open
provider-attestation-response application/json; charset=utf-8 159,233 b49b3ed84daa770925abfa5da898d4e1ab74613e32eaa5d71842de842ef1af66 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 aec315352a4d8f330b0024d8a372d3ee2a74b19e50a584d1408659b7fc0b99b4 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-120b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "e2ee-gpt-oss-120b-p",
  "status": "failed",
  "ts": "2026-08-20T00:00:17.788138726+00:00",
  "latency_ms": 6062,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0173fa460888599ae66336ecd46b3c91d78f3061df474a95abed3dfd753793091a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b7900000000000000000000000033280f1a0362ff3bf6baa6759382bf98525e8f8ff2879cd898c0d7815eb74541",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "df67e467e60edc1737bcf8e682d48131bfb427f523226aa7f197a7608e9b3784783fa759ef5b28191fa12f9ddb36b858",
    "rtmr3": "a8efdf31fb73736e2560aca938a6c67a4d564531ee5b87c7ce78b2f3111a40ee45d2720ff03ef415146cd20ec91e64bd",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "33280f1a0362ff3bf6baa6759382bf98525e8f8ff2879cd898c0d7815eb74541"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=33280f1a0362ff3bf6baa6759382bf98525e8f8ff2879cd898c0d7815eb74541",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-120b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "aaf74ec046ce1c78396bcc35ccf903c96e46ed1e1c464fe7f775626827dd3e3e",
    "parsed_evidence_digest": "6fb767ececa15d96519d61f043f09ec5cda33480357478a0f6b5c46ee722c900",
    "artifact_set_digest": "1d26ab5eb465f0718efd5eb8012d9bfb6e37c743449bd371800d52bea33d332c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:00:20.208907162+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=33280f1a0362ff3bf6baa6759382bf98525e8f8ff2879cd898c0d7815eb74541",
      "sha256": "b49b3ed84daa770925abfa5da898d4e1ab74613e32eaa5d71842de842ef1af66",
      "size_bytes": 159233,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:20 GMT",
        "etag": "W/\"26e01-MS6Toci7Iv3H7KttehZ/ewsOS2c\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:00:20.211229761+00:00",
      "sha256": "aec315352a4d8f330b0024d8a372d3ee2a74b19e50a584d1408659b7fc0b99b4",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:22.300273744+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2",
      "size_bytes": 23925,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:22.304879999+00:00",
      "sha256": "5e41c487f8505cbd3d073b555db918ca99b66bd4475c93feb92fff417bb2937f",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-120b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:22.710006387+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "4ce419fdfd49be34f05291a8d20b4bd96ea819557c760a77bff59a58aaae68b8",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:22 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:23.429848746+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:23 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:00:23.849234236+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:00:23.850389184+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-120b-p&nonce=33280f1a0362ff3bf6baa6759382bf98525e8f8ff2879cd898c0d7815eb74541",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-120b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-gpt-oss-20b-p

GPT-OSS 20B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 23,925 d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2 Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 3,895 cc9616d928011a3b40c38ec8fa85d78cd7e435993b125bf1887e505e7285f237 Open
nvidia-provider-evidence application/json 12,103 84348fc8f8fab010cb2329c438787ab835dbdc14387af8be2d450fca5062fc11 Open
provider-attestation-response application/json; charset=utf-8 73,060 30815233a3e9ca28290015408c5a6ba09ac631eba2dac61804973a71ae5b5e51 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 423671a4665a9a0249be4c59c44b595926f9110f8d1edfdfb55186b1a91b24aa Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-gpt-oss-20b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-gpt-oss-20b",
  "label": "GPT-OSS 20B (TEE)",
  "model": "e2ee-gpt-oss-20b-p",
  "status": "failed",
  "ts": "2026-08-20T00:00:33.301302472+00:00",
  "latency_ms": 11526,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0173fa460888599ae66336ecd46b3c91d78f3061df474a95abed3dfd753793091a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000006a080a38b89881f69c2e5c803b7fd93b8d41fd9d08ea7895a00e58bc79c3038a",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "df67e467e60edc1737bcf8e682d48131bfb427f523226aa7f197a7608e9b3784783fa759ef5b28191fa12f9ddb36b858",
    "rtmr3": "a8efdf31fb73736e2560aca938a6c67a4d564531ee5b87c7ce78b2f3111a40ee45d2720ff03ef415146cd20ec91e64bd",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "6a080a38b89881f69c2e5c803b7fd93b8d41fd9d08ea7895a00e58bc79c3038a"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=6a080a38b89881f69c2e5c803b7fd93b8d41fd9d08ea7895a00e58bc79c3038a",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "openai/gpt-oss-20b"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "154a32eee1670d93a604cad1a45dbefe22b555596136cb0b33d566fe3bced80c",
    "parsed_evidence_digest": "f363d6b7d1714dc4966aea30e2092fb564f753e5d0190dce64123306872989c9",
    "artifact_set_digest": "660d4e4b40da85d99f25ec2eef5a4926c41e0efa0cc05cbcb8403af48483a709"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:00:43.240281862+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=6a080a38b89881f69c2e5c803b7fd93b8d41fd9d08ea7895a00e58bc79c3038a",
      "sha256": "30815233a3e9ca28290015408c5a6ba09ac631eba2dac61804973a71ae5b5e51",
      "size_bytes": 73060,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:43 GMT",
        "etag": "W/\"11d64-HzlLrtLD6xz6+V16R/8xKJSD/jQ\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:00:43.242145961+00:00",
      "sha256": "423671a4665a9a0249be4c59c44b595926f9110f8d1edfdfb55186b1a91b24aa",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:43.965664089+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2",
      "size_bytes": 23925,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:43.968613244+00:00",
      "sha256": "84348fc8f8fab010cb2329c438787ab835dbdc14387af8be2d450fca5062fc11",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-gpt-oss-20b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:44.147737041+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "cc9616d928011a3b40c38ec8fa85d78cd7e435993b125bf1887e505e7285f237",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:44 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:44.446403971+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:44 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:00:44.826442953+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:00:44.827437119+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-gpt-oss-20b-p&nonce=6a080a38b89881f69c2e5c803b7fd93b8d41fd9d08ea7895a00e58bc79c3038a",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-gpt-oss-20b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen-2-5-7b-p

Qwen 2.5 7B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 23,925 d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2 Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 3,895 6624d8388ef9bcf4a78eb4721e55effa274bc546479b0513adb10cbf48e8413e Open
nvidia-provider-evidence application/json 12,103 fa0bd9769962eabf36a66552a6b3942209c1f7d545b5110c39e7f5ad924ed106 Open
provider-attestation-response application/json; charset=utf-8 73,067 9958c8cc915f80ab9d17479a6b44fe7aa8c43dc9a5e7b52b0f6d12d11fdc7b39 Open
tdx-quote application/vnd.intel.tdx.quote 5,006 e0826400222169dc5f515acd594e8a9ba30959c380b07c0387270d2ccea39fb3 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen-2-5-7b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen-2-5-7b",
  "label": "Qwen 2.5 7B (TEE)",
  "model": "e2ee-qwen-2-5-7b-p",
  "status": "failed",
  "ts": "2026-08-20T00:00:44.827858200+00:00",
  "latency_ms": 3629,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0173fa460888599ae66336ecd46b3c91d78f3061df474a95abed3dfd753793091a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b790000000000000000000000003e394ca47680a5f98abb95e875b34c4aa83b6f1bdf0af1d3c155df5aec8d4137",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "df67e467e60edc1737bcf8e682d48131bfb427f523226aa7f197a7608e9b3784783fa759ef5b28191fa12f9ddb36b858",
    "rtmr3": "a8efdf31fb73736e2560aca938a6c67a4d564531ee5b87c7ce78b2f3111a40ee45d2720ff03ef415146cd20ec91e64bd",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "3e394ca47680a5f98abb95e875b34c4aa83b6f1bdf0af1d3c155df5aec8d4137"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=3e394ca47680a5f98abb95e875b34c4aa83b6f1bdf0af1d3c155df5aec8d4137",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen-2.5-7b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "35d5376e2888c2959f84cf1777577615992bf3ca1c8acbdef28792d28906ef44",
    "parsed_evidence_digest": "a0bcafdb562a3b5e4040ac6d5aa3a7174e5fc54ee80db7ae0e82db149ae55530",
    "artifact_set_digest": "cc3387db751f2890b74682bd9ce42228eaab87b770cd6942b218e5da735b3e1a"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:00:46.440574180+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=3e394ca47680a5f98abb95e875b34c4aa83b6f1bdf0af1d3c155df5aec8d4137",
      "sha256": "9958c8cc915f80ab9d17479a6b44fe7aa8c43dc9a5e7b52b0f6d12d11fdc7b39",
      "size_bytes": 73067,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:46 GMT",
        "etag": "W/\"11d6b-BMzXBM/6cbYkMlnPFEwF9MnfBoU\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:00:46.442235999+00:00",
      "sha256": "e0826400222169dc5f515acd594e8a9ba30959c380b07c0387270d2ccea39fb3",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:47.211452406+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2",
      "size_bytes": 23925,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:47.214334215+00:00",
      "sha256": "fa0bd9769962eabf36a66552a6b3942209c1f7d545b5110c39e7f5ad924ed106",
      "size_bytes": 12103,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen-2-5-7b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:47.389705829+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "6624d8388ef9bcf4a78eb4721e55effa274bc546479b0513adb10cbf48e8413e",
      "size_bytes": 3895,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:47 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:48.087566964+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:47 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:00:48.456599439+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:00:48.457171963+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen-2-5-7b-p&nonce=3e394ca47680a5f98abb95e875b34c4aa83b6f1bdf0af1d3c155df5aec8d4137",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen-2-5-7b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-6-35b-a3b

Qwen3 35B (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 24,202 c73f7de277905db24748ea04c3859ef10d02e22345c95a68df3238a4496eaa6a Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 27,372 eca1d72587610b22fd49a6e7d61303a69a6854268e680f63541672f9ae99ddb8 Open
nvidia-provider-evidence application/json 98,158 1962b274313c4989450b5bb7446647a609f45ea81f3baa16323cc9cb3546c9d7 Open
provider-attestation-response application/json; charset=utf-8 218,571 46e7a338ac30a71df2754819c68769ff0f5f6ed34df21835b6b4c6ac20ba162a Open
tdx-quote application/vnd.intel.tdx.quote 5,006 4811debfd746749d637f41d444e72040e0e060b0f4823b5229f30e797c00322f Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 137 c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87 Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-6-35b-a3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-6-35b",
  "label": "Qwen3 35B (TEE)",
  "model": "e2ee-qwen3-6-35b-a3b",
  "status": "partial",
  "ts": "2026-08-20T00:00:48.457648578+00:00",
  "latency_ms": 8126,
  "error": "Evidence incomplete: No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010400000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "e702060000000000",
    "mr_td": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
    "mr_config_id": "019385918de0a73b861ae833d99fb5be6f7e1c8a50487a835df4f277497c206825000000000000000000000000000000",
    "report_data": "e5d0fec43b001f181a3410b96715ec54171f36da000000000000000000000000bcab7d46893f5add94af454a04b43320428a3d7090ff48a003f3f0808d9e853a",
    "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
    "rtmr1": "c0445b704e4c48139496ae337423ddb1dcee3a673fd5fb60a53d562f127d235f11de471a7b4ee12c9027c829786757dc",
    "rtmr2": "564622c7ddc55a53272cc9f0956d29b3f7e0dd18ede432720b71fd89e5b5d76cb0b99be7b7ff2a6a92b89b6b01643135",
    "rtmr3": "8f993f8b7a99d5e4ea49a3413a0d6311efa6a61be3ec6cae1d13b353dd1835544084cba4b4e767c17f5c513da1857de8",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "bcab7d46893f5add94af454a04b43320428a3d7090ff48a003f3f0808d9e853a"
  },
  "compose_hash_valid": false,
  "compose_hash_vs_tcb": true,
  "images_verified": true,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "last_deploy_tag": "v0.0.347",
  "app_name": "dstack-nvidia-0.5.5",
  "app_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "compose_images": [
    "otel/opentelemetry-collector-contrib@sha256:85ac41c2db88d0df9bd6145e608a3cb023f5d8443868adbfbbf66efb51087917",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "certbot/dns-cloudflare@sha256:742dbd2e61c8709b930712c38958386c3cb3928e09eeb1f1e490600c127e2edb",
    "nearaidev/compose-manager@sha256:6e035c8fb99c1d31f41760d25af178683a658cca4afd73cd0d366fbb5bf884be",
    "nearaidev/compose-manager-launcher@sha256:91fdff3cfa3543d72656b2368c7d8a0a83d95a0f1087378c897aa1537acdba56"
  ],
  "rtmr0": "bc122d143ab768565ba5c3774ff5f03a63c89a4df7c1f5ea38d3bd173409d14f8cbdcc36d40e703cccb996a9d9687590",
  "mrtd": "b24d3b24e9e3c16012376b52362ca09856c4adecb709d5fac33addf1c47e193da075b125b6c364115771390a5461e217",
  "os_image_hash": "9b69bb1698bacbb6985409a2c272bcb892e09cdcea63d5399c6768b67d3ff677",
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=bcab7d46893f5add94af454a04b43320428a3d7090ff48a003f3f0808d9e853a",
  "signing_public_key": "0489f03d8ed945eff27ad1053f87ece198409aff78c5c2aea3e438c460482f67ff5b900054dc129f6ce57e40e8875ceac0ddf30aeb885c28fd2c3e05bf3fbaa4d9",
  "signing_algo": "ecdsa",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala-dstack",
      "confidence": "corroborated",
      "evidence": "The quote-bound deployment uses a known dstack application identity."
    },
    "deployment_id": "2c0a0c96cb6dbd659bf1446e2f3fce58172ff91b",
    "upstream_model": "Qwen/Qwen3.6-35B-A3B-FP8"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "28b59278d6e285fe41fde0af552060aefc77c50a2c8d1403c805e1fea57569e1",
    "parsed_evidence_digest": "76c6229aded813b48bd9c54b10ee6728b1cd2be350ef22e71ba29bb6db5ed678",
    "artifact_set_digest": "804dfd8872a9ba18eb09e078ce1b9a048d941f728260cfed9e4fd8a7292da669"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:00:52.111996937+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=bcab7d46893f5add94af454a04b43320428a3d7090ff48a003f3f0808d9e853a",
      "sha256": "46e7a338ac30a71df2754819c68769ff0f5f6ed34df21835b6b4c6ac20ba162a",
      "size_bytes": 218571,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:52 GMT",
        "etag": "W/\"355cb-HmgyZjhjx9xr+aULoQ6TxAvIAWE\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:00:52.117201265+00:00",
      "sha256": "4811debfd746749d637f41d444e72040e0e060b0f4823b5229f30e797c00322f",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:52.856751733+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "c73f7de277905db24748ea04c3859ef10d02e22345c95a68df3238a4496eaa6a",
      "size_bytes": 24202,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:52.861411569+00:00",
      "sha256": "1962b274313c4989450b5bb7446647a609f45ea81f3baa16323cc9cb3546c9d7",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-6-35b-a3b"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:53.576179384+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "eca1d72587610b22fd49a6e7d61303a69a6854268e680f63541672f9ae99ddb8",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:53 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:00:54.315818779+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:00:54 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:00:56.582361178+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:00:56.583615963+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-6-35b-a3b&nonce=bcab7d46893f5add94af454a04b43320428a3d7090ff48a003f3f0808d9e853a",
      "sha256": "c5c6d4b8d0ad520ecbc9f5c9e0aa0ee9d0f77c6c927102ced307e7c4790b5e87",
      "size_bytes": 137,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-6-35b",
        "provider": "venice",
        "status": "partial"
      }
    }
  ]
}

Venice.ai

e2ee-qwen3-vl-30b-a3b-p

Qwen3-VL 30B (TEE)

failed

Captured evidence

KindTypeBytesSHA-256Artifact
intel-dcap-collateral application/json 23,925 d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2 Open
nvidia-nras-jwks application/json 80,970 5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10 Open
nvidia-nras-response application/json 27,372 340f1e3540f2cc949c7323ad0886fe403c74544bc1fe53a513262cd28fa83d3f Open
nvidia-provider-evidence application/json 98,158 357fd6da631e7ae5ffb0fe8523f021f32183f0902abf2549e3314a5ab0265b96 Open
provider-attestation-response application/json; charset=utf-8 159,248 fec2d9894f16316126326f70d2b9c98ae4b71660a8526f6a0daa4012199b42bc Open
tdx-quote application/vnd.intel.tdx.quote 5,006 53c26f0f9c4bbb12c3b1d026dff6655c041cfff6ed3610bd19a0bfa6564cca25 Open
tls-leaf-certificate application/pkix-cert 907 f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00 Open
verification-error text/plain; charset=utf-8 272 b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c Open
Sanitized target
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "type": "venice",
  "url": "https://api.venice.ai/",
  "host": "api.venice.ai",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "venice",
  "id": "venice-qwen3-vl-30b",
  "label": "Qwen3-VL 30B (TEE)",
  "model": "e2ee-qwen3-vl-30b-a3b-p",
  "status": "failed",
  "ts": "2026-08-20T00:00:56.584039959+00:00",
  "latency_ms": 5895,
  "error": "Trust decision failed: Compose manager actions hash is false; TCB compose hash consistency was not verified; Pinned image registry lookup was not verified; No signed workload/source provenance was verified; No request-bound storefront-to-backend route receipt was verified",
  "tdx": {
    "tee_tcb_svn": "0b010500000000000000000000000000",
    "mr_seam": "7bf063280e94fb051f5dd7b1fc59ce9aac42bb961df8d44b709c9b0ff87a7b4df648657ba6d1189589feab1d5a3c9a9d",
    "mr_signer_seam": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "td_attributes": "0000001000000000",
    "xfam": "0702000000000000",
    "mr_td": "f06dfda6dce1cf904d4e2bab1dc370634cf95cefa2ceb2de2eee127c9382698090d7a4a13e14c536ec6c9c3c8fa87077",
    "mr_config_id": "0173fa460888599ae66336ecd46b3c91d78f3061df474a95abed3dfd753793091a000000000000000000000000000000",
    "report_data": "79a5061efe5a46b0d1f33b11cf1c5adbedae6b79000000000000000000000000a92aa6bac344ab6338b43f6e218e72d31d95a1576d8788171832d89c5d4a7648",
    "rtmr0": "d6118f0eeb30e9d9178d2b9106dddd002d979b6fa79bdec415051afae2021384c29a32d2f6454fa369617598378ffb5e",
    "rtmr1": "07e6f51aa763abfe75c3ddfbf4f425fe3f0ceff66d807a75e049303dce9addf68e7218729bd419638af63a370f65878c",
    "rtmr2": "df67e467e60edc1737bcf8e682d48131bfb427f523226aa7f197a7608e9b3784783fa759ef5b28191fa12f9ddb36b858",
    "rtmr3": "a8efdf31fb73736e2560aca938a6c67a4d564531ee5b87c7ce78b2f3111a40ee45d2720ff03ef415146cd20ec91e64bd",
    "tcb_level": "status=UpToDate, advisories=[]"
  },
  "nvidia": {
    "jwt_valid": true,
    "issuer_valid": true,
    "nonce_matches": true,
    "overall_result": "true",
    "eat_nonce": "a92aa6bac344ab6338b43f6e218e72d31d95a1576d8788171832d89c5d4a7648"
  },
  "compose_hash_valid": false,
  "tls_fingerprint": "efcb39af5e8c6eca015a0080ee349e18b01c791aa39023fb9a0ba84523e0e33f",
  "tls_matches": false,
  "report_data_binds_signer": true,
  "report_data_binds_nonce": true,
  "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=a92aa6bac344ab6338b43f6e218e72d31d95a1576d8788171832d89c5d4a7648",
  "signing_public_key": "04943cea0b4babf60f6e2031e9a00866a37c4ae696fb45895b3a9b38ab8cbb898f42c85b704aceaa0a396cf26f7fdf79d83205be7e11d3a5d70419a68277158c3d",
  "signing_algo": "ecdsa",
  "trust_tier": "none",
  "e2ee_capability": "ecdsa",
  "route": {
    "route_binding": "not-verified",
    "tee_platform": {
      "organization": "phala",
      "confidence": "inferred",
      "evidence": "The operator label was returned with the attestation evidence."
    },
    "upstream_model": "qwen/qwen3-vl-30b-a3b-instruct"
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "failed",
      "detail": "Measured workload evidence did not match the expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "7289104bde08feb53e83f2c066e36a948c5f65fef123a919bf4f17bc5de4f338",
    "parsed_evidence_digest": "3d242227b71457d870ec046f528aaf76ec79b41e1a35f66e9a8427e82d20b3b5",
    "artifact_set_digest": "77f8f1c081da94e7ae2a02bd52f041ab418bb34f02d3d0828a2d57572b06adc8"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-20T00:01:00.315883204+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=a92aa6bac344ab6338b43f6e218e72d31d95a1576d8788171832d89c5d4a7648",
      "sha256": "fec2d9894f16316126326f70d2b9c98ae4b71660a8526f6a0daa4012199b42bc",
      "size_bytes": 159248,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:00 GMT",
        "etag": "W/\"26e10-8GfwI893tnN7lKXf+trZPWUKBME\"",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tdx-quote",
      "media_type": "application/vnd.intel.tdx.quote",
      "collected_at": "2026-08-20T00:01:00.319847444+00:00",
      "sha256": "53c26f0f9c4bbb12c3b1d026dff6655c041cfff6ed3610bd19a0bfa6564cca25",
      "size_bytes": 5006,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "intel-dcap-collateral",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:01.047672286+00:00",
      "source_url": "https://api.trustedservices.intel.com/",
      "sha256": "d0584deea098c14009375596061d7fcec600df658c2bcf881d2f475e839b60d2",
      "size_bytes": 23925,
      "encoding": "binary",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-provider-evidence",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:01.052499355+00:00",
      "sha256": "357fd6da631e7ae5ffb0fe8523f021f32183f0902abf2549e3314a5ab0265b96",
      "size_bytes": 98158,
      "encoding": "utf-8",
      "metadata": {
        "backend_id": "venice-e2ee-qwen3-vl-30b-a3b-p"
      }
    },
    {
      "kind": "nvidia-nras-response",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:01.409682130+00:00",
      "source_url": "https://nras.attestation.nvidia.com/v4/attest/gpu",
      "sha256": "340f1e3540f2cc949c7323ad0886fe403c74544bc1fe53a513262cd28fa83d3f",
      "size_bytes": 27372,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:01 GMT",
        "http_method": "POST",
        "http_status": "200"
      }
    },
    {
      "kind": "nvidia-nras-jwks",
      "media_type": "application/json",
      "collected_at": "2026-08-20T00:01:02.107438748+00:00",
      "source_url": "https://nras.attestation.nvidia.com/.well-known/jwks.json",
      "sha256": "5573e0dcb782c0cbf4bd32fa0f5849543f8a31b8b70aceffe7fae2ffb7a19e10",
      "size_bytes": 80970,
      "encoding": "binary",
      "metadata": {
        "date": "Thu, 20 Aug 2026 00:01:01 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "tls-leaf-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-20T00:01:02.477696453+00:00",
      "source_url": "https://api.venice.ai/",
      "sha256": "f862b29dc04013edde129fac58ed114b4e9c990ae9576c033e6fae2bb753af00",
      "size_bytes": 907,
      "encoding": "binary",
      "metadata": {
        "host": "api.venice.ai"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-20T00:01:02.478722839+00:00",
      "source_url": "https://api.venice.ai/api/v1/tee/attestation?model=e2ee-qwen3-vl-30b-a3b-p&nonce=a92aa6bac344ab6338b43f6e218e72d31d95a1576d8788171832d89c5d4a7648",
      "sha256": "b309b2510df8704b9f077676d13c328ed1e6bab51398d22d235b89a8d580680c",
      "size_bytes": 272,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "venice-qwen3-vl-30b",
        "provider": "venice",
        "status": "failed"
      }
    }
  ]
}