Stored Run Record

Run #2771

Completed Oct 6, 2026, 03:00:37 UTC UTC

Artifact-backed

The run preserves its sanitized policy and targets, parsed decisions, route and gate indexes, plus content-addressed raw evidence artifacts.

Total checks
11
Verified
0
Incomplete
11
Failed
0
Unavailable
0

Recorded Decisions

Checks in this run

Run JSON

Privatemode

deepseek-ocr-2

Deepseek Ocr 2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json36061b382ea9556a0537b63ef2c3ab8f0bad76c0d5f562f52b1c37745c155455765Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1846ae3e3708c5a2473103b1a96d24282fb285ae63c6e866669ad1f30ed3e1cbe8eOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "Deepseek Ocr 2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "deepseek-ocr-2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-deepseek-ocr-2",
  "label": "Deepseek Ocr 2",
  "model": "deepseek-ocr-2",
  "status": "partial",
  "ts": "2026-10-06T03:00:27.136233661+00:00",
  "latency_ms": 1052,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "63f4bb9e25f13e860e6e1e93438ad137dc59ebb799ace41ee8600e868a57cf680000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "280a1da6d4ea8d5fab1b6886d8287c1a459c03abb67d45d767fc0d04dc4f28f1",
    "parsed_evidence_digest": "01e5d48c8e463fa9c83f04632df7eda2f8c06b1cccca7f4eb1f504dce5b32289",
    "artifact_set_digest": "b9fa3a5156b341a9fd8b52d8575e093fcf3c3c963c2229759321475319fd70bc"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:27.390448287+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255627139",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:28 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:27.993021020+00:00",
      "sha256": "6ae3e3708c5a2473103b1a96d24282fb285ae63c6e866669ad1f30ed3e1cbe8e",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:27.993858912+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:28.139605286+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "61b382ea9556a0537b63ef2c3ab8f0bad76c0d5f562f52b1c37745c155455765",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:28.188647985+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-deepseek-ocr-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.2

Glm 5.2

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json36069518b920ed9f1549d85bf3b21aac6fac24315bff87915fd34fe66110055372cOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184b9aa9d71eb03484c4a7cf7fe012886bc9c11cfa9d667010e5f47c4d6ef1a5fd6Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "Glm 5.2",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.2",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-2",
  "label": "Glm 5.2",
  "model": "glm-5.2",
  "status": "partial",
  "ts": "2026-10-06T03:00:28.189090165+00:00",
  "latency_ms": 901,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "6c21ca4730dbd6ffd41f34f4370f5b61a4d88285fe6d3baf423c9d399e04d8fe0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "ae492c7aebba7a6e7be0c0cb49b8d8c7d5b6723f88863ff2454c18636f0ad788",
    "parsed_evidence_digest": "3bdae84f29d86cc0e49ceb8accef1e624838b69e8ed1473e6a3c0d098d3896d8",
    "artifact_set_digest": "12866813f8f4c6982187a3f49603bb3ff374fe1824608ee050b7876b98f07f4a"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:28.311341160+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255628191",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:29 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:28.893862225+00:00",
      "sha256": "b9aa9d71eb03484c4a7cf7fe012886bc9c11cfa9d667010e5f47c4d6ef1a5fd6",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:28.894639564+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:29.038788571+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "69518b920ed9f1549d85bf3b21aac6fac24315bff87915fd34fe66110055372c",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:29.090604143+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-2",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3

Glm 5.3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json36013f71d0fcce89c4f44a2f53fa696a576d1ac190a32fc4861d60f9cddf4ea030eOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1844a048ca79507af2d7fea7aed0f900e05a24d57dbedc4b5c8ac11ca1a8cc83117Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "Glm 5.3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3",
  "label": "Glm 5.3",
  "model": "glm-5.3",
  "status": "partial",
  "ts": "2026-10-06T03:00:29.091046593+00:00",
  "latency_ms": 891,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "c6912fe92301d4bb838f0e26afa99bb61f70b8e57def331243feca7e807cf1ac0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "4df0329a51184a2f0e2491473dc84703a2dad9f1905d4fe4a3b397bd2a3bc8d7",
    "parsed_evidence_digest": "46585e9dbaf79039a3710e888dafa4fc955aa5cb9656ec61d02bc85c03879a97",
    "artifact_set_digest": "b8f82408e289a8c18e42f8168b4d6113c1a87977edd981326819a3b86a180ed0"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:29.215049436+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255629093",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:30 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:29.786035125+00:00",
      "sha256": "4a048ca79507af2d7fea7aed0f900e05a24d57dbedc4b5c8ac11ca1a8cc83117",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:29.786764904+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:29.930618136+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "13f71d0fcce89c4f44a2f53fa696a576d1ac190a32fc4861d60f9cddf4ea030e",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:29.982388634+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-5.3-flash

Glm 5.3 Flash

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,3471fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3Open
privatemode-secret-handshakeapplication/json3606cb6cae59fa77a373f1cbf4208d1e70a6081b00d73242e654758041f725d760fOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18402533c1d247fdfeca0d573c9f73e372796996a8278e480373d3831fb273693daOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "Glm 5.3 Flash",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-5.3-flash",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-5-3-flash",
  "label": "Glm 5.3 Flash",
  "model": "glm-5.3-flash",
  "status": "partial",
  "ts": "2026-10-06T03:00:29.982815445+00:00",
  "latency_ms": 1002,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "5050718946cb028eab9d7bb648468b4807f25229c3ee639b70f1d80251ef19cc18d3e47a991178a1a841112461d297e522f4e9c166eb20e612ab35f60e29fb1c",
    "report_data": "a8116a3349fa7214e5b0bdda7a3c4a61c05a6655f42bc4923d591aae58361f470000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "6a8e9839543cd80410bd8f53b0a4d781b2323f128cdbb5924b52bde675099868",
    "parsed_evidence_digest": "7ecb484dffefd7b2d1499c0380b09a78ca0b6a4b718bccbd140ab70c7b7e26ce",
    "artifact_set_digest": "049e4baac1f0daa5af75d80e5fb6328b508857b91245de6d208c8c49d30a98d8"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:30.103061187+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255629985",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:31 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:30.779846299+00:00",
      "sha256": "02533c1d247fdfeca0d573c9f73e372796996a8278e480373d3831fb273693da",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:30.780591558+00:00",
      "sha256": "1fd15d37b8a88a098f5992292f2d99e680ed03ded6a5a6ba585f9eab319c46c3",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:30.931352833+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "6cb6cae59fa77a373f1cbf4208d1e70a6081b00d73242e654758041f725d760f",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:30.985074712+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-5-3-flash",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-flash-latest

Glm Flash Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json360ce067a98c417abe103032556f84df118bd78c43bbc23f87fca15b6dc24886d31Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,18425917c537e9690b841e38e00115333d07f33119cac530dca35c582f2b7958b76Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "Glm Flash Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-flash-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-flash-latest",
  "label": "Glm Flash Latest",
  "model": "glm-flash-latest",
  "status": "partial",
  "ts": "2026-10-06T03:00:30.985505250+00:00",
  "latency_ms": 1019,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "ea485ab021eddb22f1ed69e8de3ec2e6a7c4b3f5394e66406a1a4be0b778aea40000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "7c42671d0b4be7fc044d66cb40e91dca7b5444f7085aaca13b39ee5da26b7e1c",
    "parsed_evidence_digest": "4cc00b588deaed7df37572edad1e2097112ea2af6f059155f8daf06e3579a2f5",
    "artifact_set_digest": "f74c62a3804e08f134607354c619dce9b877c2ed8d69d744ea3b3dfe04252d56"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:31.116046992+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255630988",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:32 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:31.808725179+00:00",
      "sha256": "25917c537e9690b841e38e00115333d07f33119cac530dca35c582f2b7958b76",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:31.809459557+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:31.955176125+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "ce067a98c417abe103032556f84df118bd78c43bbc23f87fca15b6dc24886d31",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:32.005002795+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-flash-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

glm-latest

Glm Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json360c6ff56c511935f43d822cb831d71e6024761a46f853108e4d868d6ec76b52461Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1848aa1256f1f1f9b4daa1887c2619d87da183c54bec45b5148e52c77ecdd98fdcdOpen
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "Glm Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "glm-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-glm-latest",
  "label": "Glm Latest",
  "model": "glm-latest",
  "status": "partial",
  "ts": "2026-10-06T03:00:32.005423054+00:00",
  "latency_ms": 887,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "df41181eb619eff6bca16f91b8cc542ccd04f0f61dff8f8a96e5127475b909aa0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "f0025abcaaf3bdf230c123d7438c1340325b0c32c8ad27d9f2cc6edbe9e3bd9d",
    "parsed_evidence_digest": "5ef34a6de37292df8420a5ef8142051d8864b0f6b72f188918bd61c3d95be041",
    "artifact_set_digest": "9deeef82f8fb9894e45f94755d955a22a4a215ecf6fded9e8a644cd105a62889"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:32.126943368+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255632008",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:33 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:32.695458461+00:00",
      "sha256": "8aa1256f1f1f9b4daa1887c2619d87da183c54bec45b5148e52c77ecdd98fdcd",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:32.696206534+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:32.841111209+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "c6ff56c511935f43d822cb831d71e6024761a46f853108e4d868d6ec76b52461",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:32.892868622+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-glm-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-120b

Gpt Oss 120b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json360b803052d7d5d96401bd6a5889a0176e3784e73053fdf3a53797f55e912c9b71fOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184e24db57d375abfe83356a0a7b86fb3c6d12ec7e661f32794a866a535495f9664Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "Gpt Oss 120b",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-120b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-120b",
  "label": "Gpt Oss 120b",
  "model": "gpt-oss-120b",
  "status": "partial",
  "ts": "2026-10-06T03:00:32.893419226+00:00",
  "latency_ms": 961,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "1f5a14da6137ddcf7ca3a7e8eae444655babf3f559ee87caf366353352e784290000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "3622bf788a885e16e779b77956e12b69c86e5c90eba0c775bc6ec385af1e481f",
    "parsed_evidence_digest": "a0b993a7fc584704f4ffe5afcc0ba31262370e0f92d2aff570b4179f7a81034a",
    "artifact_set_digest": "69e85e653ebdb9a92bc59674b5779ba0703c2d8601b14c33c49f53a79724436c"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:33.015905061+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255632897",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:33 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:33.652752520+00:00",
      "sha256": "e24db57d375abfe83356a0a7b86fb3c6d12ec7e661f32794a866a535495f9664",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:33.653501346+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:33.803112572+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "b803052d7d5d96401bd6a5889a0176e3784e73053fdf3a53797f55e912c9b71f",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:33.854837945+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-120b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

gpt-oss-latest

Gpt Oss Latest

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json3605ea08a833b664e342e587e2744084981d1407aa1da1b3de88c59675e1a0be0d0Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1847193af3fc3c0de1b1ed14d75488b2b6e320995b4c5a738c7fa5d11030162c015Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "Gpt Oss Latest",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "gpt-oss-latest",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-gpt-oss-latest",
  "label": "Gpt Oss Latest",
  "model": "gpt-oss-latest",
  "status": "partial",
  "ts": "2026-10-06T03:00:33.855272811+00:00",
  "latency_ms": 888,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "f182e3a91fd968aeadfd87e008d92b4f8aaa342ae28f81932c2eaa909fdcda160000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "d1a7598d1a3f2a517d700b542154388154f01b46fcb5e37267d4462b3933621f",
    "parsed_evidence_digest": "f37affa38161678669552aa19d1ab56866b94912601bc03b7e923fb28e6dd7ee",
    "artifact_set_digest": "73c46d1e01b2f621e92a3e45ae9f5920dfda01e95bfd428f74010aa379bfa1c0"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:33.963063171+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255633857",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:34 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:34.544668287+00:00",
      "sha256": "7193af3fc3c0de1b1ed14d75488b2b6e320995b4c5a738c7fa5d11030162c015",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:34.545424126+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:34.691614112+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "5ea08a833b664e342e587e2744084981d1407aa1da1b3de88c59675e1a0be0d0",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:34.743147455+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-gpt-oss-latest",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

qwen3-embedding-4b

Qwen3 Embedding 4b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json360f2f3689e266525e9cffc927f1b2ab2775749a7b84a9fada073640e4876773a59Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184d3af610b934050fdd6db9909a0bb430b5d655eb91368d90b49e87acea150ae50Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4b",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "qwen3-embedding-4b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-qwen3-embedding-4b",
  "label": "Qwen3 Embedding 4b",
  "model": "qwen3-embedding-4b",
  "status": "partial",
  "ts": "2026-10-06T03:00:34.743578814+00:00",
  "latency_ms": 957,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "b86d60052757a470f92e8833e2f2576744845767067e72ea30e8c8b3f4ab55c00000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "3cae9d64667b2cda0bb688a93d5ec1aade66e189bb397b9fa8f99447dff926b4",
    "parsed_evidence_digest": "9957468c973c1a0776eb774c5535b61d965e2c0371d473344ef336416ec7bbbb",
    "artifact_set_digest": "f8774deb47413cd8d53f72d8ff0386d43fc87c83ee68d6040dd41431aeafa3e2"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:34.867171667+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255634746",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:35 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:35.493985739+00:00",
      "sha256": "d3af610b934050fdd6db9909a0bb430b5d655eb91368d90b49e87acea150ae50",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:35.494724235+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:35.646299918+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "f2f3689e266525e9cffc927f1b2ab2775749a7b84a9fada073640e4876773a59",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:35.700248423+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-qwen3-embedding-4b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

voxtral-mini-3b

Voxtral Mini 3b

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json36051a5504d218edbcf8cc3cf32768228188fbf121078fefbd3b2e2474bbc65292eOpen
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,1846425a43afa2841316b58ef605aa4af445c847777e391d76e60ccbf7652868797Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3b",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "voxtral-mini-3b",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-voxtral-mini-3b",
  "label": "Voxtral Mini 3b",
  "model": "voxtral-mini-3b",
  "status": "partial",
  "ts": "2026-10-06T03:00:35.700650747+00:00",
  "latency_ms": 905,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "a63aaf088d576cdfb2f105e1bda7f5df9ef0cca88cf7d7a9fe4d6b5faebfcd8d0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "4c0008b098eb5fd928fe9fc4d3cc9b00074ac333a99dcf5dcf18be5f8ed75182",
    "parsed_evidence_digest": "2ad5bda5c39637c8204b6f6a277cda35e0d52db77f3f3ab7010e2ca9c573866e",
    "artifact_set_digest": "62b753b4c4358390709491f4bb17df9e83acd2b0f527e72e33b39db21781a819"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:35.818602265+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255635703",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:36 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:36.411174140+00:00",
      "sha256": "6425a43afa2841316b58ef605aa4af445c847777e391d76e60ccbf7652868797",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:36.411910152+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:36.558131968+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "51a5504d218edbcf8cc3cf32768228188fbf121078fefbd3b2e2474bbc65292e",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:36.606233330+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-voxtral-mini-3b",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}

Privatemode

whisper-large-v3

Whisper Large V3

partial

Captured evidence

KindTypeBytesSHA-256Artifact
amd-vcek-certificateapplication/pkix-cert1,347e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7eOpen
privatemode-secret-handshakeapplication/json360b1225a24f760a668e959147d1a42d891f6f0fc9e831e10927c649a51e7a16997Open
provider-manifest-responsebinary/octet-stream6,096384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42bOpen
sev-snp-reportapplication/vnd.amd.sev-snp.report1,184001534f73a1826b9c8e7844b9b09d60d2b2bb085d5ced74e5a175cecb38eefa4Open
verification-errortext/plain; charset=utf-82300f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4Open
Sanitized target
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "type": "privatemode",
  "url": "https://api.privatemode.ai/v1/models",
  "host": null,
  "model": "whisper-large-v3",
  "metadata": {}
}
Parsed decision JSON
{
  "provider": "privatemode",
  "id": "privatemode-whisper-large-v3",
  "label": "Whisper Large V3",
  "model": "whisper-large-v3",
  "status": "partial",
  "ts": "2026-10-06T03:00:36.606609226+00:00",
  "latency_ms": 945,
  "error": "Evidence incomplete: Channel establishment is quote-bound; the sealed payload path was not exercised end-to-end; No signed workload/source provenance was verified; No request-bound storefront-to-workload route receipt was verified",
  "snp": {
    "chip_id": "1886afb73cf8656295b87cc64457df576c43f95f00b713b7f79f88239582cf423efd9023e211afec216696078d30f39d13149699f184b4b30411f91faf3f0d86",
    "report_data": "5a2cefd990a3d7295c0d773e350e40d3db516a65cbfd350a39f5a3015785b53c0000000000000000000000000000000000000000000000000000000000000000",
    "measurement": "766d05930c6cb7c32fc375677b3bc9896b73a65f8f8e709b2a4885b033b7aee5789fce6aa0bab57d89cf7211d5fa327a",
    "family_id": "01000000000000000000000000000000",
    "image_id": "02000000000000000000000000000000",
    "generation": "Genoa",
    "current_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "reported_tcb": "bl=12 tee=0 snp=28 ucode=88",
    "policy_bits": 38928698,
    "platform_smt": false,
    "platform_tsme": false,
    "debug_allowed": false,
    "vcek_fingerprint": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e"
  },
  "version": "v1.24.1",
  "report_data_binds_nonce": true,
  "manifest_pinned_measurements": [
    "manifest-sha256:384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
    "contrast:v1.24.1",
    "snp-generation:Genoa",
    "SNP/Genoa:766d05930c6cb7c32fc37567"
  ],
  "manifest_workloads": [
    "deepseek-ocr-2",
    "glm-5-3",
    "glm-5-3-flash",
    "gpt-oss-120b",
    "whisper-qwen3-voxtral"
  ],
  "privatemode_sdk": {
    "protocol": "sdk-v1",
    "attestation_type": "snp",
    "contrast_version": "v1.24.1",
    "coordinator_generation": "Genoa",
    "quote_verified": true,
    "amd_roots_anchored": true,
    "platform_identity_verified": true,
    "tcb_satisfied": true,
    "guest_policy_satisfied": true,
    "platform_info_satisfied": true,
    "mitigation_vectors_satisfied": true,
    "measurement_matches_manifest": true,
    "report_data_binds_nonce": true,
    "manifest_active_match": true,
    "manifest_history_depth": 1,
    "policy_hashes_match": true,
    "host_data_binds_policy": true,
    "mesh_cert_chain_verified": true,
    "mesh_cert_validity_ok": true,
    "mesh_cert_san_authorized": true,
    "handshake_signature_verified": true,
    "channel_binding_observed": true,
    "api_models_fetched": true
  },
  "served_models": [
    "deepseek-ocr-2",
    "glm-5.3",
    "glm-5.2",
    "glm-latest",
    "glm-5.3-flash",
    "glm-flash-latest",
    "openai/gpt-oss-120b",
    "gpt-oss-120b",
    "gpt-oss-latest",
    "openai/whisper-large-v3",
    "whisper-large-v3",
    "qwen3-embedding-4b",
    "voxtral-mini-3b"
  ],
  "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
  "trust_tier": "tee-only",
  "route": {
    "route_binding": "not-verified",
    "workload_operator": {
      "organization": "edgeless-systems",
      "confidence": "declared",
      "evidence": "Privatemode architecture."
    },
    "tee_platform": {
      "organization": "contrast",
      "confidence": "verified",
      "evidence": "Privatemode architecture and active Contrast manifest evidence."
    },
    "cloud_host": {
      "organization": "scaleway",
      "confidence": "declared",
      "evidence": "Privatemode architecture documentation."
    }
  },
  "gates": {
    "hardware": {
      "state": "verified",
      "detail": "Vendor-rooted hardware evidence was verified."
    },
    "tcb": {
      "state": "verified",
      "detail": "The quote passed the configured TCB policy."
    },
    "freshness": {
      "state": "verified",
      "detail": "The quote binds the verifier-owned challenge."
    },
    "channel": {
      "state": "verified",
      "detail": "The application channel key is bound to attested evidence."
    },
    "workload": {
      "state": "verified",
      "detail": "Measured workload evidence matched the configured expectation."
    },
    "source_provenance": {
      "state": "not-proven",
      "detail": "Registry existence alone is not source provenance."
    },
    "route": {
      "state": "not-proven",
      "detail": "No request-bound storefront-to-backend route receipt was verified."
    }
  },
  "evidence_meta": {
    "verifier_version": "0.2.2",
    "policy_hash": "c135027b18e601851a01e9148d819240e7adddbb7c66c06d06fc1f2baadac45b",
    "target_hash": "7dc2029f1e86dc461d7cc6343b7bb9b7507e760595ded6aa20c90296748258b7",
    "parsed_evidence_digest": "85d88e8b10a48f7fe0da1c0b1eaa450a00fbf941775606d0ca63c12132d112de",
    "artifact_set_digest": "021f5849b93ae9e74b3a16a6e8c474b9782805895b7c653c97d79b7a3228e2bf"
  },
  "evidence_artifacts": [
    {
      "kind": "provider-manifest-response",
      "media_type": "binary/octet-stream",
      "collected_at": "2026-10-06T03:00:36.725888314+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json?t=1791255636609",
      "sha256": "384a2137e534357d74392bf3940373ff49d309d91551376b5a7f828e372af42b",
      "size_bytes": 6096,
      "encoding": "binary",
      "metadata": {
        "date": "Tue, 06 Oct 2026 03:00:37 GMT",
        "etag": "\"21ce50a492ff7a0d3c28a6648f912a73\"",
        "http_method": "GET",
        "http_status": "200",
        "last_modified": "Fri, 02 Oct 2026 10:18:27 GMT"
      }
    },
    {
      "kind": "sev-snp-report",
      "media_type": "application/vnd.amd.sev-snp.report",
      "collected_at": "2026-10-06T03:00:37.353215168+00:00",
      "sha256": "001534f73a1826b9c8e7844b9b09d60d2b2bb085d5ced74e5a175cecb38eefa4",
      "size_bytes": 1184,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api"
      }
    },
    {
      "kind": "amd-vcek-certificate",
      "media_type": "application/pkix-cert",
      "collected_at": "2026-10-06T03:00:37.353945178+00:00",
      "sha256": "e6bb659fcd88f84b141ca68c107c4ce421b1230671682f3eafe9cf9314130f7e",
      "size_bytes": 1347,
      "encoding": "binary",
      "metadata": {
        "backend_id": "privatemode-api",
        "product": "Genoa",
        "source": "provider-bundle"
      }
    },
    {
      "kind": "privatemode-secret-handshake",
      "media_type": "application/json",
      "collected_at": "2026-10-06T03:00:37.499673929+00:00",
      "source_url": "https://api.privatemode.ai/privatemode/v1/secret",
      "sha256": "b1225a24f760a668e959147d1a42d891f6f0fc9e831e10927c649a51e7a16997",
      "size_bytes": 360,
      "encoding": "utf-8"
    },
    {
      "kind": "verification-error",
      "media_type": "text/plain; charset=utf-8",
      "collected_at": "2026-10-06T03:00:37.551582836+00:00",
      "source_url": "https://cdn.confidential.cloud/privatemode/v2/manifest.json",
      "sha256": "0f676798186177615b9359642c3bfaf1cb44a3f041a956ab39f9295224018dd4",
      "size_bytes": 230,
      "encoding": "utf-8",
      "metadata": {
        "check_id": "privatemode-whisper-large-v3",
        "provider": "privatemode",
        "status": "partial"
      }
    }
  ]
}