Stored Run Record

Run #1898

Completed Aug 30, 2026, 19:01:31 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
6
Verified
0
Incomplete
3
Failed
0
Unavailable
3

Recorded Decisions

Checks in this run

Run JSON

PPQ.AI

private/deepseek-v4-flash

Deepseek V4 Flash (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6 Open
provider-attestation-response application/json 18,467 54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2 Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf Open
verification-error text/plain; charset=utf-8 230 f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003 Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-deepseek-v4-flash",
  "label": "Deepseek V4 Flash (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/deepseek-v4-flash",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-deepseek-v4-flash",
  "label": "Deepseek V4 Flash (TEE)",
  "model": "private/deepseek-v4-flash",
  "status": "partial",
  "ts": "2026-08-30T19:01:26.644564579+00:00",
  "latency_ms": 2526,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "337f5b317aac6edb6e22b07380fc8dc1126e7450d1cb9eee85e30052b41407d50b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c",
    "measurement": "6dd91ce3a9b812c7b22f4fb0bd53c025c0b4fb6f4469a97f966ad50a0bc71496fb2723ddabe96a6c79da746a64af129a",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.142",
  "release_digest": "7299507cca23c4af0c289564778885d37d9c36dcf13eeb3fe74677b4639c5c91",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-flash",
  "signing_public_key": "0b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c",
  "signing_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "fd9cf9bd230acc0c24aba81778a15e6b183358294a7d834b2270dc85f9b992cc",
    "parsed_evidence_digest": "bea15d8f067619133580514e71984855473b985417a175ae5b0affcfa0dd1048",
    "artifact_set_digest": "a37c2141a82c00b72d7cccfbaa372d8465875a94999e85d243fdc5827af4f77e"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-08-30T19:01:27.824195247+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-flash",
      "sha256": "54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2",
      "size_bytes": 18467,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 30 Aug 2026 19:01:27 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-08-30T19:01:27.824633199+00:00",
      "sha256": "77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-30T19:01:27.825586848+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-30T19:01:29.170564694+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-flash",
      "sha256": "f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-deepseek-v4-flash",
        "provider": "ppq",
        "status": "partial"
      }
    }
  ]
}

PPQ.AI

private/gemma4-31b

Gemma 4 31B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6 Open
provider-attestation-response application/json 18,467 54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2 Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf Open
verification-error text/plain; charset=utf-8 178 f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4 Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-gemma4",
  "label": "Gemma 4 31B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/gemma4-31b",
  "metadata": {
    "backend_host": "gemma4-31b-1.inf10.tinfoil.sh",
    "backend_repo": "tinfoilsh/confidential-gemma4-31b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-gemma4",
  "label": "Gemma 4 31B (TEE)",
  "model": "private/gemma4-31b",
  "status": "unreachable",
  "ts": "2026-08-30T19:00:54.550013450+00:00",
  "latency_ms": 32094,
  "error": "Network error: Tinfoil attestation request to gemma4-31b-1.inf10.tinfoil.sh: error sending request for url (https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "4bc79df7e73dc310c6faedd024d5ab7a421d11e9a24cb27c13ee0fe2f6c6d57a",
    "parsed_evidence_digest": "36f36326fa90452f01476b3e2bacfc89892cb723129778f023d9121bacf0bb69",
    "artifact_set_digest": "e92de3103981ff8b307b36c15dd3063b0af0efa349d91c9859e21530144576cb"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-08-30T19:00:55.322798730+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b",
      "sha256": "54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2",
      "size_bytes": 18467,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 30 Aug 2026 19:00:55 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-08-30T19:00:55.323225510+00:00",
      "sha256": "77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-30T19:00:55.324120951+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-30T19:01:26.644222207+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4",
      "size_bytes": 178,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-gemma4",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}

PPQ.AI

private/glm-5-2

GLM 5.2 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6 Open
provider-attestation-response application/json 18,467 54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2 Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf Open
verification-error text/plain; charset=utf-8 230 f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003 Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-glm-5-2",
  "label": "GLM 5.2 (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/glm-5-2",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-glm-5-2",
  "label": "GLM 5.2 (TEE)",
  "model": "private/glm-5-2",
  "status": "partial",
  "ts": "2026-08-30T19:00:52.785129598+00:00",
  "latency_ms": 1764,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "337f5b317aac6edb6e22b07380fc8dc1126e7450d1cb9eee85e30052b41407d50b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c",
    "measurement": "6dd91ce3a9b812c7b22f4fb0bd53c025c0b4fb6f4469a97f966ad50a0bc71496fb2723ddabe96a6c79da746a64af129a",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.142",
  "release_digest": "7299507cca23c4af0c289564778885d37d9c36dcf13eeb3fe74677b4639c5c91",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2",
  "signing_public_key": "0b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c",
  "signing_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "173d9586f5d428b1d4387fb6cdbda568fd2fb897a01c752f3ff34099d5582d94",
    "parsed_evidence_digest": "007e29f2f20413b9e10ada1c79b4d40998de3826b75526a55320831f55ce250b",
    "artifact_set_digest": "a37c2141a82c00b72d7cccfbaa372d8465875a94999e85d243fdc5827af4f77e"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-08-30T19:00:53.549178835+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2",
      "sha256": "54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2",
      "size_bytes": 18467,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 30 Aug 2026 19:00:53 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-08-30T19:00:53.549607680+00:00",
      "sha256": "77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-30T19:00:53.550542193+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-30T19:00:54.549639889+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-2",
      "sha256": "f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-glm-5-2",
        "provider": "ppq",
        "status": "partial"
      }
    }
  ]
}

PPQ.AI

private/gpt-oss-120b

GPT-OSS 120B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6 Open
provider-attestation-response application/json 18,467 54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2 Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf Open
source-provenance-response application/json; charset=utf-8 6,019 9f1367b7732e6a17c4c07e43469022ce875a5f3015399be7d6dc6304725a6968 Open
verification-error text/plain; charset=utf-8 182 7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6 Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/gpt-oss-120b",
  "metadata": {
    "backend_host": "gpt-oss-120b-1.inf10.tinfoil.sh",
    "backend_repo": "tinfoilsh/confidential-gpt-oss-120b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "private/gpt-oss-120b",
  "status": "unreachable",
  "ts": "2026-08-30T19:00:17.469326914+00:00",
  "latency_ms": 33102,
  "error": "Network error: Tinfoil attestation request to gpt-oss-120b-1.inf10.tinfoil.sh: error sending request for url (https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "d4eae8541256c6665eb682a665171cedbc8a8c506c94be8b72c2fd1702b0d04f",
    "parsed_evidence_digest": "b3b1f0c2850936413873ac7cfedb2a6ef9cf3b5da8021b2447685ba7c09b817e",
    "artifact_set_digest": "8f028ccba64a65ff6632a8f73dcd680532579c7cdfaa81d9ea5ac95240588558"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-08-30T19:00:18.303248553+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b",
      "sha256": "54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2",
      "size_bytes": 18467,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 30 Aug 2026 19:00:18 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-08-30T19:00:18.304789445+00:00",
      "sha256": "77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-30T19:00:18.307987736+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-08-30T19:00:18.607051697+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest",
      "sha256": "9f1367b7732e6a17c4c07e43469022ce875a5f3015399be7d6dc6304725a6968",
      "size_bytes": 6019,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 30 Aug 2026 19:00:18 GMT",
        "etag": "W/\"cb495e653277479e3665941b838d89e9f2442f79bdf4b85ca8dc54f06a18c966\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Wed, 19 Aug 2026 03:54:38 GMT"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-30T19:00:50.571177028+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6",
      "size_bytes": 182,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-gpt-oss-120b",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}

PPQ.AI

private/kimi-k3

Kimi K3 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6 Open
provider-attestation-response application/json 18,467 54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2 Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf Open
verification-error text/plain; charset=utf-8 230 f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003 Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-kimi-k3",
  "label": "Kimi K3 (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/kimi-k3",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-kimi-k3",
  "label": "Kimi K3 (TEE)",
  "model": "private/kimi-k3",
  "status": "partial",
  "ts": "2026-08-30T19:01:29.171064492+00:00",
  "latency_ms": 2104,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "337f5b317aac6edb6e22b07380fc8dc1126e7450d1cb9eee85e30052b41407d50b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c",
    "measurement": "6dd91ce3a9b812c7b22f4fb0bd53c025c0b4fb6f4469a97f966ad50a0bc71496fb2723ddabe96a6c79da746a64af129a",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.142",
  "release_digest": "7299507cca23c4af0c289564778885d37d9c36dcf13eeb3fe74677b4639c5c91",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:c51e12746b17479692daabdf00608d30d682c300b0ed9fee57c50fca1b4f5ba4"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3",
  "signing_public_key": "0b1ede235cbf0de010c41e49b9d2cdc52b6a1983ca343228ab66759281e21e2c",
  "signing_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "19045ba6d47c64a654a062b1b3ae1a419e335676e766c2c82cec365198cbce31",
    "parsed_evidence_digest": "79c7b3b2e9597b53860eb054f3407935b2d85eb26b320154c26a9a8df980fcb9",
    "artifact_set_digest": "a37c2141a82c00b72d7cccfbaa372d8465875a94999e85d243fdc5827af4f77e"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-08-30T19:01:29.920248004+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3",
      "sha256": "54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2",
      "size_bytes": 18467,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 30 Aug 2026 19:01:29 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-08-30T19:01:29.920627145+00:00",
      "sha256": "77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-30T19:01:29.921442004+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-30T19:01:31.275036618+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3",
      "sha256": "f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-kimi-k3",
        "provider": "ppq",
        "status": "partial"
      }
    }
  ]
}

PPQ.AI

private/llama3-3-70b

Llama 3.3 70B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificate application/pkix-cert 1,347 3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6 Open
provider-attestation-response application/json 18,467 54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2 Open
sev-snp-report application/vnd.amd.sev-snp.report 1,184 77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf Open
verification-error text/plain; charset=utf-8 206 4a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9 Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/llama3-3-70b",
  "metadata": {
    "backend_host": "llama3-3-70b.tinfoil.containers.tinfoil.dev",
    "backend_repo": "tinfoilsh/confidential-llama3-3-70b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "model": "private/llama3-3-70b",
  "status": "unreachable",
  "ts": "2026-08-30T19:00:50.571869257+00:00",
  "latency_ms": 2213,
  "error": "Network error: Tinfoil attestation request to llama3-3-70b.tinfoil.containers.tinfoil.dev: error sending request for url (https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "12d41db2274558f7ee7c9ab100b1a897f49bc901b1ae5c1b0d35aa2deca7813d",
    "target_hash": "33a7ffbd436564136c95f2f4d703c2e193db3f89829eefa548ed5b3184f8131f",
    "parsed_evidence_digest": "65d0af1ff2826ae303551af74a1f0493e1473596c4684fc824de80cfdba41659",
    "artifact_set_digest": "6074b5c0072a4f09ab9dff794ba62148bbd8b3928a6f76c79b5f3246737b2a07"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-08-30T19:00:51.332460695+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b",
      "sha256": "54485dfcf9ffb001544a113dea6b826bb234070153e8f6c0fcac4db58c0d28c2",
      "size_bytes": 18467,
      "encoding": "binary",
      "metadata": {
        "date": "Sun, 30 Aug 2026 19:00:51 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-08-30T19:00:51.332882106+00:00",
      "sha256": "77ac94b1218925d69b33a039e08e2f069adeebf89aa7da035fec9fc4340bfccf",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-08-30T19:00:51.333738272+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-08-30T19:00:52.784724969+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "4a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9",
      "size_bytes": 206,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-llama3-70b",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}