Stored Run Record

Run #2763

Completed Oct 5, 2026, 19:01:44 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
7
Verified
0
Incomplete
4
Failed
0
Unavailable
3

Recorded Decisions

Checks in this run

Run JSON

PPQ.AI

private/deepseek-v4-1-flash

Deepseek V4 1 Flash (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3473c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6Open
provider-attestation-responseapplication/json26,017d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18459d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6Open
verification-errortext/plain; charset=utf-8230f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-deepseek-v4-1-flash",
  "label": "Deepseek V4 1 Flash (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/deepseek-v4-1-flash",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-deepseek-v4-1-flash",
  "label": "Deepseek V4 1 Flash (TEE)",
  "model": "private/deepseek-v4-1-flash",
  "status": "partial",
  "ts": "2026-10-05T19:01:41.063400386+00:00",
  "latency_ms": 1685,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
    "measurement": "b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.155",
  "release_digest": "ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash",
  "e2ee_public_key": "6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
  "e2ee_key_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "50290897fff5218ae3bdece9c57e7f86f4e2754b129b83c4ab6df9b0f53ad769",
    "parsed_evidence_digest": "6edb9ab59fe2d5533070190465b7a6703f26dfeed5576e923311ad73ad43067f",
    "artifact_set_digest": "37f980a8307d0f65c1f2173272a2b15065df1bd0d86a5add7bc61dbc1fafd291"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-05T19:01:41.472764147+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash",
      "sha256": "d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00",
      "size_bytes": 26017,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 05 Oct 2026 19:01:45 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-05T19:01:41.473188393+00:00",
      "sha256": "59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-05T19:01:41.474014112+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-05T19:01:42.748799087+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fdeepseek-v4-1-flash",
      "sha256": "f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-deepseek-v4-1-flash",
        "provider": "ppq",
        "status": "partial"
      }
    }
  ]
}

PPQ.AI

private/gemma4-31b

Gemma 4 31B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3473c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6Open
provider-attestation-responseapplication/json26,017d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18459d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6Open
verification-errortext/plain; charset=utf-8178f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-gemma4",
  "label": "Gemma 4 31B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/gemma4-31b",
  "metadata": {
    "backend_host": "gemma4-31b-1.inf10.tinfoil.sh",
    "backend_repo": "tinfoilsh/confidential-gemma4-31b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-gemma4",
  "label": "Gemma 4 31B (TEE)",
  "model": "private/gemma4-31b",
  "status": "unreachable",
  "ts": "2026-10-05T19:01:06.659870690+00:00",
  "latency_ms": 31636,
  "error": "Network error: Tinfoil attestation request to gemma4-31b-1.inf10.tinfoil.sh: error sending request for url (https://gemma4-31b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "4bc79df7e73dc310c6faedd024d5ab7a421d11e9a24cb27c13ee0fe2f6c6d57a",
    "parsed_evidence_digest": "12d636e48dd8bf1ebc3a6764032dfd628133fb1b6793847c0c80593a02695b6b",
    "artifact_set_digest": "d18b223a05f50171e0b27e80f0d9b98d1e94588e0a0b3cfe4d03000cb618eff4"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-05T19:01:07.070116997+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgemma4-31b",
      "sha256": "d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00",
      "size_bytes": 26017,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 05 Oct 2026 19:01:06 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-05T19:01:07.070536695+00:00",
      "sha256": "59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-05T19:01:07.071420744+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-05T19:01:38.296499887+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "f63e8fa50b5c9cf468d85c09581d83c4a4a618b2ab132ce45928a8215e869aa4",
      "size_bytes": 178,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-gemma4",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}

PPQ.AI

private/glm-5-3

GLM 5.3 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3473c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6Open
provider-attestation-responseapplication/json26,017d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18459d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6Open
verification-errortext/plain; charset=utf-8230f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-glm-5-3",
  "label": "GLM 5.3 (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/glm-5-3",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-glm-5-3",
  "label": "GLM 5.3 (TEE)",
  "model": "private/glm-5-3",
  "status": "partial",
  "ts": "2026-10-05T19:01:04.393812291+00:00",
  "latency_ms": 2266,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
    "measurement": "b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.155",
  "release_digest": "ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3",
  "e2ee_public_key": "6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
  "e2ee_key_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "b3168bca100f9259e792140998c3d67027921578960f0cb1f0197d6e7f05344a",
    "parsed_evidence_digest": "6c9612201af7951be680f28eb60809cc684deb50d67c1370866a4cc09e168011",
    "artifact_set_digest": "37f980a8307d0f65c1f2173272a2b15065df1bd0d86a5add7bc61dbc1fafd291"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-05T19:01:04.799673360+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3",
      "sha256": "d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00",
      "size_bytes": 26017,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 05 Oct 2026 19:01:08 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-05T19:01:04.800102295+00:00",
      "sha256": "59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-05T19:01:04.801035987+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-05T19:01:06.659494174+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3",
      "sha256": "f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-glm-5-3",
        "provider": "ppq",
        "status": "partial"
      }
    }
  ]
}

PPQ.AI

private/glm-5-3-flash

Glm 5 3 Flash (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3473c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6Open
provider-attestation-responseapplication/json26,017d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18459d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6Open
verification-errortext/plain; charset=utf-8230f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-glm-5-3-flash",
  "label": "Glm 5 3 Flash (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/glm-5-3-flash",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-glm-5-3-flash",
  "label": "Glm 5 3 Flash (TEE)",
  "model": "private/glm-5-3-flash",
  "status": "partial",
  "ts": "2026-10-05T19:01:42.749201281+00:00",
  "latency_ms": 2012,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
    "measurement": "b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.155",
  "release_digest": "ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash",
  "e2ee_public_key": "6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
  "e2ee_key_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "3b825ea5aafc52150a5d331a83b2cc60eff66730911dcb4b79a342f10e95f8cd",
    "parsed_evidence_digest": "fd18c88853b152ed71f91764846d70118aa79a17fa81f67e99eec2dcff677632",
    "artifact_set_digest": "37f980a8307d0f65c1f2173272a2b15065df1bd0d86a5add7bc61dbc1fafd291"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-05T19:01:43.182112880+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash",
      "sha256": "d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00",
      "size_bytes": 26017,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 05 Oct 2026 19:01:47 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-05T19:01:43.182554919+00:00",
      "sha256": "59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-05T19:01:43.183379527+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-05T19:01:44.761698312+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fglm-5-3-flash",
      "sha256": "f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-glm-5-3-flash",
        "provider": "ppq",
        "status": "partial"
      }
    }
  ]
}

PPQ.AI

private/gpt-oss-120b

GPT-OSS 120B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3473c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6Open
provider-attestation-responseapplication/json26,017d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18459d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6Open
source-provenance-responseapplication/json; charset=utf-86,00706da859dcac519548ecd3643f7b59a7065dc1f48f8d22732cf8d42b24ad4ea4fOpen
verification-errortext/plain; charset=utf-81827f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/gpt-oss-120b",
  "metadata": {
    "backend_host": "gpt-oss-120b-1.inf10.tinfoil.sh",
    "backend_repo": "tinfoilsh/confidential-gpt-oss-120b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-gpt-oss-120b",
  "label": "GPT-OSS 120B (TEE)",
  "model": "private/gpt-oss-120b",
  "status": "unreachable",
  "ts": "2026-10-05T19:00:29.422597404+00:00",
  "latency_ms": 32987,
  "error": "Network error: Tinfoil attestation request to gpt-oss-120b-1.inf10.tinfoil.sh: error sending request for url (https://gpt-oss-120b-1.inf10.tinfoil.sh/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "d4eae8541256c6665eb682a665171cedbc8a8c506c94be8b72c2fd1702b0d04f",
    "parsed_evidence_digest": "4aa990d31b4c8a67222119bab965a1db3a76e9e9521dd13ce2bd3365934a985d",
    "artifact_set_digest": "b3852d265b2aa4aed676b177f64216ed6577971f6f1fcc0f2213720b5ab9dd52"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-05T19:00:30.242735343+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fgpt-oss-120b",
      "sha256": "d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00",
      "size_bytes": 26017,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 05 Oct 2026 19:00:34 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-05T19:00:30.243189435+00:00",
      "sha256": "59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-05T19:00:30.244008372+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "source-provenance-response",
      "media_type": "application/json; charset=utf-8",
      "collected_at": "2026-10-05T19:00:30.558159727+00:00",
      "source_url": "https://api.github.com/repos/tinfoilsh/confidential-model-router/releases/latest",
      "sha256": "06da859dcac519548ecd3643f7b59a7065dc1f48f8d22732cf8d42b24ad4ea4f",
      "size_bytes": 6007,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 05 Oct 2026 19:00:30 GMT",
        "etag": "W/\"78d1b1b3af8b63f4f49eee65aff4cee94abc20d4383b2c0bf9d9969909d0251d\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 25 Sep 2026 00:07:42 GMT"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-05T19:01:02.409642406+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "7f1b0bef4e696392bf0955c1356cc7ed8437edcf7f60ddf5d8819e3bda7af0f6",
      "size_bytes": 182,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-gpt-oss-120b",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}

PPQ.AI

private/kimi-k3

Kimi K3 (TEE)

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3473c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6Open
provider-attestation-responseapplication/json26,017d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18459d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6Open
verification-errortext/plain; charset=utf-8230f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-kimi-k3",
  "label": "Kimi K3 (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/kimi-k3",
  "metadata": {
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-kimi-k3",
  "label": "Kimi K3 (TEE)",
  "model": "private/kimi-k3",
  "status": "partial",
  "ts": "2026-10-05T19:01:38.296795431+00:00",
  "latency_ms": 2766,
  "error": "Evidence incomplete: No Tinfoil model backend mapping configured for PPQ model; PPQ certificate domain metadata is not authenticated by a trusted certificate chain; No request-bound PPQ router-to-model-backend receipt was verified",
  "snp": {
    "chip_id": "1af1aa6c1f56037a05849a59b8815cf909583f9ba9ef2f053218c437f33ba183e4e415b039b37f8205250ad15f8b88a0a3add9f4c081c0779a48ed2214378e44",
    "report_data": "2ac79995464edfb139b34e4ee6269f38d0ab63da92b1a431170dec3bdd0c7c846fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
    "measurement": "b3be62c7199d8e4d24f130e5651bdc8a62a2532f72c7e87c986bec54bf5f90bab703ad4dbfc5e45bfd385f8972dfc66c",
    "family_id": "00000000000000000000000000000000",
    "image_id": "00000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "reported_tcb": "bl=10 tee=0 snp=23 ucode=84",
    "policy_bits": 196608,
    "platform_smt": true,
    "platform_tsme": true,
    "debug_allowed": false,
    "vcek_fingerprint": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6"
  },
  "images_verified": true,
  "report_data_binds_signer": true,
  "sigstore_match": true,
  "sigstore_bundle_verified": true,
  "sigstore_tag": "v0.0.155",
  "release_digest": "ad95d02b2e27b3c1d5c327f2ee9616634f841e4b2ed5a48f404e4e9f595a4876",
  "sigstore_repo": "tinfoilsh/confidential-model-router",
  "certificate_domain_matches": true,
  "certificate_binds_hpke": true,
  "certificate_binds_attestation": true,
  "router_config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "config_images": [
    "ghcr.io/tinfoilsh/confidential-model-router@sha256:4bb0895d58d82cbcc5898bba3a46aa9cb48ce3f604f538f914214f50ee7a3bf2",
    "ghcr.io/tinfoilsh/confidential-safeguards@sha256:200aa8fb814fa52a494d581ff19e7530528aa367281449ea3b1d60d06b4a3eef"
  ],
  "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3",
  "e2ee_public_key": "6fbc650af5c0aac5adb635309ea70c95885ca72d0bb6c3be7cb478b90ab36108",
  "e2ee_key_algo": "hpke",
  "trust_tier": "app-e2ee",
  "e2ee_capability": "hpke",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "corroborated",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "19045ba6d47c64a654a062b1b3ae1a419e335676e766c2c82cec365198cbce31",
    "parsed_evidence_digest": "f8d6a5e706af5be3c443dec15c593fbf99fccf0e7666e8d8a736c3ebe87e9122",
    "artifact_set_digest": "37f980a8307d0f65c1f2173272a2b15065df1bd0d86a5add7bc61dbc1fafd291"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-05T19:01:39.069162729+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3",
      "sha256": "d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00",
      "size_bytes": 26017,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 05 Oct 2026 19:01:38 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-05T19:01:39.069573279+00:00",
      "sha256": "59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-05T19:01:39.070318648+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-05T19:01:41.063045470+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fkimi-k3",
      "sha256": "f446a4b8263f90262c1a8a87057ff88b8e14f6a603a58e18965ba75c81e58003",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-kimi-k3",
        "provider": "ppq",
        "status": "partial"
      }
    }
  ]
}

PPQ.AI

private/llama3-3-70b

Llama 3.3 70B (TEE)

unreachable

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3473c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6Open
provider-attestation-responseapplication/json26,017d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00Open
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18459d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6Open
verification-errortext/plain; charset=utf-82064a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9Open
Sanitized target
{
  "provider": "ppq",
  "id": "ppq-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "type": "ppq",
  "url": "https://api.ppq.ai/private",
  "host": "api.ppq.ai",
  "model": "private/llama3-3-70b",
  "metadata": {
    "backend_host": "llama3-3-70b.tinfoil.containers.tinfoil.dev",
    "backend_repo": "tinfoilsh/confidential-llama3-3-70b",
    "repo": "tinfoilsh/confidential-model-router"
  }
}
Parsed decision JSON
{
  "provider": "ppq",
  "id": "ppq-llama3-70b",
  "label": "Llama 3.3 70B (TEE)",
  "model": "private/llama3-3-70b",
  "status": "unreachable",
  "ts": "2026-10-05T19:01:02.410122157+00:00",
  "latency_ms": 1983,
  "error": "Network error: Tinfoil attestation request to llama3-3-70b.tinfoil.containers.tinfoil.dev: error sending request for url (https://llama3-3-70b.tinfoil.containers.tinfoil.dev/.well-known/tinfoil-attestation)",
  "trust_tier": "none",
  "route": {
    "route_binding": "not-verified",
    "router": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ private-mode evidence identifies the Tinfoil model router."
    },
    "workload_operator": {
      "organization": "tinfoil",
      "confidence": "declared",
      "evidence": "PPQ documents private models as powered by Tinfoil; no independent backend route is mapped for this model."
    }
  },
  "gates": {
    "hardware": {
      "state": "not-proven",
      "detail": "No current hardware evidence was available."
    },
    "tcb": {
      "state": "not-proven",
      "detail": "TCB policy could not be evaluated."
    },
    "freshness": {
      "state": "not-proven",
      "detail": "No verifier-owned challenge binding was exposed."
    },
    "channel": {
      "state": "not-proven",
      "detail": "No attested application channel binding was verified."
    },
    "workload": {
      "state": "not-proven",
      "detail": "No expected workload measurement was verified."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "33a7ffbd436564136c95f2f4d703c2e193db3f89829eefa548ed5b3184f8131f",
    "parsed_evidence_digest": "92447dd20e2e1fd4066d1cf86b3ccb79263f98ae2cab5482976395e1a72f9cd5",
    "artifact_set_digest": "6f96ea72326010ceb2d5d12c740d1d0b1f84d6c2896fc92e789f412ccadbbc35"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-attestation-response",
      "media_type": "application/json",
      "collected_at": "2026-10-05T19:01:03.064298980+00:00",
      "source_url": "https://api.ppq.ai/private/attestation?model=private%2Fllama3-3-70b",
      "sha256": "d31e36b1bf7c56853ad5fe48d4cb68bc1581e14940898018cdb314349654de00",
      "size_bytes": 26017,
      "encoding": "binary",
      "metadata": {
        "date": "Mon, 05 Oct 2026 19:01:02 GMT",
        "http_method": "GET",
        "http_status": "200"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-05T19:01:03.064713998+00:00",
      "sha256": "59d7ffe55220ef94190c14e733f6ecf59571c2e47045fc67f46be9927da823f6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-05T19:01:03.065585774+00:00",
      "sha256": "3c0d43f9abb25c6109f7fc8b36cf434fbbf047d2941de4d5f9a33b0e212c88e6",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "inference.tinfoil.sh",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-05T19:01:04.393484116+00:00",
      "source_url": "https://api.ppq.ai/private",
      "sha256": "4a50fc832364f8480ff6513d077a61673d902bf36d109b77c0036013371216c9",
      "size_bytes": 206,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "ppq-llama3-70b",
        "provider": "ppq",
        "status": "unreachable"
      }
    }
  ]
}